Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa
File:                     323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (raw, json)
Hash identifier:          +IGFqJkjNSWZd2bOOEzKPgSNY5qaC9rAK5gZ1T+N+68=
Subject key identifier:   86:A4:FF:03:4B:E3:CC:BF:91:7E:A3:58:C7:48:A8:AD:AF:A0:66:CF
Certificate issuer:       /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial:       4A6AFD1D5F590B11C772B474A5E318C71D2E8A73
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa
Signing time:             Thu 19 Feb 2026 13:33:41 +0000
ROA not before:           Thu 19 Feb 2026 13:28:41 +0000
ROA not after:            Thu 18 Feb 2027 13:33:41 +0000
asID:                     264971
IP address blocks:        2801:80:1920::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl
                          rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6a:fd:1d:5f:59:0b:11:c7:72:b4:74:a5:e3:18:c7:1d:2e:8a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Validity
            Not Before: Feb 19 13:28:41 2026 GMT
            Not After : Feb 18 13:33:41 2027 GMT
        Subject: CN=86A4FF034BE3CCBF917EA358C748A8ADAFA066CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:ee:e7:44:85:f3:4f:fd:a8:11:ff:40:65:
                    41:1b:13:60:0c:45:27:d7:e9:b2:6b:54:6d:f7:4c:
                    34:2a:51:40:d4:75:aa:6d:30:fb:c1:32:f2:20:63:
                    33:e1:1e:ff:1d:fb:3c:5e:b6:bb:91:19:7e:b3:e4:
                    4f:b8:56:4c:fd:59:dd:36:ae:66:50:4c:d6:41:51:
                    5b:80:86:90:44:be:94:dc:51:20:dc:af:d4:79:34:
                    d9:02:b0:aa:1b:2c:39:c4:bf:b8:e8:f7:e6:e8:9e:
                    e2:f3:ce:7f:55:2c:2b:3d:74:e8:19:e2:50:31:af:
                    9c:5c:50:49:1f:f6:a0:0c:1c:4d:9a:e6:59:9f:a3:
                    fe:f0:e9:1d:c9:99:a6:c0:79:63:78:85:97:d6:b1:
                    ea:8c:32:29:ef:aa:b8:1f:fa:09:a1:36:95:98:bf:
                    3f:5e:7d:35:11:30:32:75:f7:e4:1e:15:61:e0:d4:
                    4b:51:26:09:1f:88:19:00:c4:02:18:db:4e:a6:fc:
                    97:cd:56:da:3c:0b:da:68:06:19:50:83:08:88:14:
                    91:10:1a:3a:da:6c:90:40:98:b2:b1:1f:23:d6:59:
                    50:36:9d:44:39:1e:cc:6c:06:ac:55:38:06:47:6a:
                    19:60:17:09:68:9d:fc:53:3c:f4:e1:90:e2:60:7e:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A4:FF:03:4B:E3:CC:BF:91:7E:A3:58:C7:48:A8:AD:AF:A0:66:CF
            X509v3 Authority Key Identifier:
                keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1920::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:9a:4e:a5:9a:95:64:0a:0a:20:a0:91:57:b4:57:0e:06:
         bb:65:fa:b5:e4:33:56:1a:a6:4d:d6:fd:b5:2b:86:c9:18:17:
         6b:5a:c9:3c:21:54:16:3a:ec:78:16:ee:e5:49:84:fa:10:ff:
         85:1a:db:29:ed:df:9a:53:87:48:b7:44:13:d5:a1:1b:18:d4:
         97:4b:b9:99:6c:e3:6a:92:0f:54:ba:24:98:07:61:50:af:99:
         2f:d0:1c:eb:1d:0c:71:04:ad:28:53:46:9b:f2:a1:a4:ce:23:
         6a:fc:ed:e5:1c:1d:57:10:5a:8d:92:8a:a5:ef:cf:18:36:9c:
         d8:52:48:48:56:70:55:15:cc:98:5f:c2:ce:a0:01:9d:d0:42:
         70:00:66:f5:7a:35:fb:3c:e8:38:8e:79:b4:ba:11:7b:44:bf:
         25:fc:c1:a2:a4:b2:08:ee:b9:1b:76:56:a3:84:e9:57:5a:cb:
         0c:50:e8:e4:bc:37:78:c1:05:eb:a4:c3:94:c6:4a:d8:99:11:
         e6:3d:e9:f8:ef:5e:d6:d1:dd:c0:f3:e0:f6:49:5f:07:48:0c:
         c3:38:de:84:d7:a0:f3:cb:34:bc:33:36:61:23:eb:8d:c1:d8:
         a9:6a:ad:41:dd:c2:d9:7e:5d:51:5a:05:89:5a:de:63:25:85:
         b0:a0:4c:d1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUSmr9HV9ZCxHHcrR0peMYxx0uinMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZENTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0
RDQwRkU5MjAeFw0yNjAyMTkxMzI4NDFaFw0yNzAyMTgxMzMzNDFaMDMxMTAvBgNV
BAMTKDg2QTRGRjAzNEJFM0NDQkY5MTdFQTM1OEM3NDhBOEFEQUZBMDY2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKu7nRIXzT/2oEf9AZUEbE2AM
RSfX6bJrVG33TDQqUUDUdaptMPvBMvIgYzPhHv8d+zxetruRGX6z5E+4Vkz9Wd02
rmZQTNZBUVuAhpBEvpTcUSDcr9R5NNkCsKobLDnEv7jo9+bonuLzzn9VLCs9dOgZ
4lAxr5xcUEkf9qAMHE2a5lmfo/7w6R3JmabAeWN4hZfWseqMMinvqrgf+gmhNpWY
vz9efTURMDJ19+QeFWHg1EtRJgkfiBkAxAIY206m/JfNVto8C9poBhlQgwiIFJEQ
GjrabJBAmLKxHyPWWVA2nUQ5HsxsBqxVOAZHahlgFwlonfxTPPThkOJgfoVLAgMB
AAGjggJYMIICVDAdBgNVHQ4EFgQUhqT/A0vjzL+RfqNYx0iora+gZs8wHwYDVR0j
BBgwFoAUH9U77JdmwLT4EVUec4XOLk1A/pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN
WUMvMC8xRkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRDUzQkVDOTc2NkMwQjRG
ODExNTUxRTczODVDRTJFNEQ0MEZFOTIuY2VyMIGyBggrBgEFBQcBCwSBpTCBojCB
nwYIKwYBBQUHMAuGgZJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhaUJhTFBjUGpyejlOSFZobUV0eVVhOE1tem5GNDFXRlJ4ZFd1NFNZTVlDLzAv
MzIzODMwMzEzYTM4MzAzYTMxMzkzMjMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzIzNjM0MzkzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEAgBkgMA0GCSqGSIb3DQEBCwUAA4IB
AQBnx5pOpZqVZAoKIKCRV7RXDga7Zfq15DNWGqZN1v21K4bJGBdrWsk8IVQWOux4
Fu7lSYT6EP+FGtsp7d+aU4dIt0QT1aEbGNSXS7mZbONqkg9UuiSYB2FQr5kv0Bzr
HQxxBK0oU0ab8qGkziNq/O3lHB1XEFqNkoql788YNpzYUkhIVnBVFcyYX8LOoAGd
0EJwAGb1ejX7POg4jnm0uhF7RL8l/MGipLII7rkbdlajhOlXWssMUOjkvDd4wQXr
pMOUxkrYmRHmPen4717W0d3A8+D2SV8HSAzDON6E16DzyzS8MzZhI+uNwdipaq1B
3cLZfl1RWgWJWt5jJYWwoEzR
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:59:49 2026 by rpki-client