Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (raw, json)
Hash identifier:          MVPAA1+zOej95lT9A2DX1H55TZCNkfC9Nq4h/FPebP8=
Subject key identifier:   77:25:8C:F5:6F:8D:15:87:3C:D6:DA:F0:17:FD:75:0E:65:68:6B:BF
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       0BFAE32C2A600C54058972BEA8674CEEA6D3EE08
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
Signing time:             Wed 04 Feb 2026 21:18:36 +0000
ROA not before:           Wed 04 Feb 2026 21:13:36 +0000
ROA not after:            Wed 03 Feb 2027 21:18:36 +0000
asID:                     271680
IP address blocks:        187.111.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fa:e3:2c:2a:60:0c:54:05:89:72:be:a8:67:4c:ee:a6:d3:ee:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Feb  4 21:13:36 2026 GMT
            Not After : Feb  3 21:18:36 2027 GMT
        Subject: CN=77258CF56F8D15873CD6DAF017FD750E65686BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:21:55:0e:89:f8:16:08:45:19:fa:18:25:
                    d9:7d:fe:d9:5a:fa:6f:85:0c:c6:30:56:29:8b:d4:
                    ca:dc:c1:9b:18:15:2c:cd:4c:0b:16:3b:8f:a5:7c:
                    c6:2a:cb:e4:93:6a:b6:bf:42:a9:db:b2:51:ec:41:
                    d8:fe:73:ae:a3:66:b1:61:81:06:6b:59:38:46:dd:
                    ab:1f:75:56:71:bf:ba:19:a1:fd:dd:67:89:f0:83:
                    2e:c1:6e:18:24:58:84:70:8b:7f:a7:3f:c2:94:58:
                    12:cd:cd:30:e2:4f:05:07:44:fa:27:00:f0:c7:b2:
                    22:d7:e6:84:3a:fd:78:64:18:0a:47:25:67:7b:2d:
                    a9:cd:c7:1f:61:36:ce:8e:f6:fd:25:12:b6:3f:c0:
                    e3:b5:b1:d1:36:2a:8e:11:5a:e6:26:28:8a:49:0d:
                    37:66:b2:46:8a:b3:ba:81:8c:09:89:4f:f8:73:86:
                    bc:65:28:7f:73:4f:19:7c:2f:43:0e:f0:cc:66:5c:
                    7e:b9:3d:dc:7f:aa:a4:aa:3c:a7:b2:81:5f:e1:46:
                    7b:26:7c:6d:78:f7:d2:c7:3c:49:21:04:f7:26:d1:
                    cf:18:35:5c:e1:9e:cb:d9:5d:a9:a5:ac:13:96:6b:
                    85:63:3f:41:cb:65:e7:ff:e0:ab:d2:91:dd:39:59:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:8C:F5:6F:8D:15:87:3C:D6:DA:F0:17:FD:75:0E:65:68:6B:BF
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:24:4b:f7:0a:98:4f:93:33:da:5d:9e:98:46:d6:31:e8:28:
         94:07:4e:cf:6b:67:b4:1f:16:eb:11:58:ee:07:bf:9e:89:ce:
         31:3e:b0:df:29:a7:6f:68:a6:85:b4:f1:60:e7:f4:3f:f2:e8:
         21:3a:4d:39:f7:f5:40:9c:1f:b6:3b:ad:1f:32:77:e7:d0:20:
         4d:07:da:d6:0a:c3:de:4e:74:8e:b2:2d:d0:1b:84:17:6e:2d:
         9a:23:77:23:40:62:1f:67:74:04:32:7f:2e:ee:f2:ba:09:d5:
         d4:71:f1:0b:8d:bd:9d:1d:c3:d3:56:37:c1:cc:2f:ce:4c:9d:
         97:3b:30:7d:39:9a:0b:86:75:67:f1:ed:b8:6f:b7:87:ab:14:
         b6:ed:78:8e:b4:95:64:39:7e:7f:60:34:46:e3:3b:29:00:18:
         1f:24:c8:58:a1:8f:94:7a:74:e4:30:74:56:2a:ca:35:57:63:
         5d:12:2a:35:5c:23:7e:cc:da:64:5f:af:40:ad:2d:90:23:d0:
         ec:e2:fc:7f:67:44:d7:cf:02:16:b3:87:b4:65:ef:60:c3:65:
         da:51:15:f7:a7:17:b5:a3:bc:83:fc:e7:43:df:dd:99:19:0c:
         5c:37:b4:33:c0:0e:87:b6:57:0b:f6:21:fb:22:33:b7:fb:44:
         7a:ac:b1:2e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC/rjLCpgDFQFiXK+qGdM7qbT7ggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2N0MxRTk3NTYxNEM5OTVBNkZCNzM3MTMyNTQ4OTI4
RTk0MzcxNzAeFw0yNjAyMDQyMTEzMzZaFw0yNzAyMDMyMTE4MzZaMDMxMTAvBgNV
BAMTKDc3MjU4Q0Y1NkY4RDE1ODczQ0Q2REFGMDE3RkQ3NTBFNjU2ODZCQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4diFVDon4FghFGfoYJdl9/tla
+m+FDMYwVimL1MrcwZsYFSzNTAsWO4+lfMYqy+STara/QqnbslHsQdj+c66jZrFh
gQZrWThG3asfdVZxv7oZof3dZ4nwgy7BbhgkWIRwi3+nP8KUWBLNzTDiTwUHRPon
APDHsiLX5oQ6/XhkGApHJWd7LanNxx9hNs6O9v0lErY/wOO1sdE2Ko4RWuYmKIpJ
DTdmskaKs7qBjAmJT/hzhrxlKH9zTxl8L0MO8MxmXH65Pdx/qqSqPKeygV/hRnsm
fG1499LHPEkhBPcm0c8YNVzhnsvZXamlrBOWa4VjP0HLZef/4KvSkd05WR5jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdyWM9W+NFYc81trwF/11DmVoa78wHwYDVR0j
BBgwFoAUBmfB6XVhTJlab7c3EyVIko6UNxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpj
YTIvMS8wNjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NjdDMUU5NzU2MTRDOTk1
QTZGQjczNzEzMjU0ODkyOEU5NDM3MTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzbVJuc0puMVMxVEJocXlkWUROQnBWeEtBOWQyUHd6U1IyTVdMWm56Y2EyLzEv
MzEzODM3MmUzMTMxMzEyZTMxMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTM2MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbtvcDANBgkqhkiG9w0BAQsFAAOCAQEASiRL
9wqYT5Mz2l2emEbWMegolAdOz2tntB8W6xFY7ge/nonOMT6w3ymnb2imhbTxYOf0
P/LoITpNOff1QJwftjutHzJ359AgTQfa1grD3k50jrIt0BuEF24tmiN3I0BiH2d0
BDJ/Lu7yugnV1HHxC429nR3D01Y3wcwvzkydlzswfTmaC4Z1Z/HtuG+3h6sUtu14
jrSVZDl+f2A0RuM7KQAYHyTIWKGPlHp05DB0VirKNVdjXRIqNVwjfszaZF+vQK0t
kCPQ7OL8f2dE188CFrOHtGXvYMNl2lEV96cXtaO8g/znQ9/dmRkMXDe0M8AOh7ZX
C/Yh+yIzt/tEeqyxLg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:19 2026 by rpki-client