Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa
File:                     3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa (raw, json)
Hash identifier:          VIC/HBtHMm4xzqjiv7mqBktq0HTJjjn38udMhY5LxS4=
Subject key identifier:   5F:AC:36:64:ED:65:33:A6:62:4B:DD:93:B6:E2:3A:E3:9D:DB:5F:49
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       5F58C20EEB31B72DD291B69C5030F47E02970434
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa
Signing time:             Thu 05 Feb 2026 04:59:07 +0000
ROA not before:           Thu 05 Feb 2026 04:54:07 +0000
ROA not after:            Thu 04 Feb 2027 04:59:07 +0000
asID:                     270683
IP address blocks:        200.187.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:58:c2:0e:eb:31:b7:2d:d2:91:b6:9c:50:30:f4:7e:02:97:04:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Feb  5 04:54:07 2026 GMT
            Not After : Feb  4 04:59:07 2027 GMT
        Subject: CN=5FAC3664ED6533A6624BDD93B6E23AE39DDB5F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:a4:af:a1:1f:58:db:cc:80:14:55:bb:7a:
                    f7:11:ab:b4:78:d7:2a:0d:d1:c6:d8:4d:85:a5:e4:
                    7d:79:c3:bb:20:22:38:07:71:bc:53:27:39:76:02:
                    a4:5b:e8:76:9c:f1:22:31:8b:14:c4:67:88:a4:05:
                    c8:bd:38:f7:64:16:e6:cc:45:24:18:79:49:46:37:
                    11:83:22:ef:03:80:eb:d2:e1:df:37:8c:16:3b:bf:
                    65:5c:82:69:fe:a2:f7:fa:df:60:31:56:1c:6d:36:
                    8b:84:dc:88:39:7e:f1:0a:8d:ea:c0:89:28:7b:45:
                    08:ad:9b:5f:94:c2:f8:1e:48:af:db:d9:41:8a:a1:
                    fd:91:4f:b0:f4:eb:c7:72:de:13:1b:de:2f:55:b3:
                    a4:8f:92:72:ef:eb:6c:83:94:a4:4c:6a:b7:21:05:
                    db:5e:c4:ba:f5:4a:28:8e:d1:9b:da:68:87:9e:54:
                    06:72:42:7e:a4:9f:6a:93:68:d6:e7:c6:c4:12:de:
                    cf:e1:0d:7e:af:26:dd:92:22:36:8e:a7:05:8d:9b:
                    87:89:a4:aa:cf:3a:35:f4:61:f2:47:48:c1:ea:e6:
                    9a:ba:c3:83:93:24:56:34:08:bc:9c:2b:f2:8a:d1:
                    a3:98:62:38:d2:38:ed:93:be:0e:20:f8:83:65:e4:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AC:36:64:ED:65:33:A6:62:4B:DD:93:B6:E2:3A:E3:9D:DB:5F:49
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130312e302f32342d3234203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:35:95:53:d4:73:71:39:ba:69:2b:d4:b6:94:d7:ce:4a:
         2a:27:e6:4e:22:59:2c:24:8b:fe:ca:be:37:eb:f4:ff:99:41:
         21:67:5d:3e:c9:c3:ba:32:35:b9:52:c3:60:e8:56:57:93:1f:
         48:92:86:df:aa:13:49:3f:f2:39:8b:b4:1d:9f:13:60:f1:f0:
         db:0d:6d:15:5f:7f:d4:f4:cf:21:6b:be:0e:44:cd:8d:c0:dc:
         9b:54:0e:72:d5:9f:08:a2:d0:17:bb:c0:34:23:96:a1:13:cc:
         6b:a0:08:ff:90:b4:2b:21:dd:8d:50:4a:a5:51:86:e3:a1:ce:
         61:ad:34:48:b6:95:4d:19:00:db:ee:bd:ce:7c:54:8c:2b:d0:
         14:46:89:2c:fe:f4:ca:a5:b2:5d:47:38:70:ec:1d:1e:e2:aa:
         3f:b0:c9:31:e3:3f:05:c6:ae:df:85:8e:b2:18:57:ce:f7:c9:
         75:6e:a7:58:1c:a9:c1:3a:0b:3f:b3:c7:77:ad:84:13:cb:30:
         ac:41:8f:b9:3d:00:fc:c1:7c:f2:15:6d:55:e3:f1:0f:c8:5e:
         b0:0f:12:df:8b:0d:14:03:a6:b8:71:09:8e:45:1a:66:58:69:
         7f:38:3a:7e:30:77:d2:59:a3:7b:5f:d0:32:28:4b:d6:53:2f:
         64:3d:b5:44
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX1jCDusxty3SkbacUDD0fgKXBDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5
RDRDNzUwNTAeFw0yNjAyMDUwNDU0MDdaFw0yNzAyMDQwNDU5MDdaMDMxMTAvBgNV
BAMTKDVGQUMzNjY0RUQ2NTMzQTY2MjRCREQ5M0I2RTIzQUUzOUREQjVGNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnaSvoR9Y28yAFFW7evcRq7R4
1yoN0cbYTYWl5H15w7sgIjgHcbxTJzl2AqRb6Hac8SIxixTEZ4ikBci9OPdkFubM
RSQYeUlGNxGDIu8DgOvS4d83jBY7v2Vcgmn+ovf632AxVhxtNouE3Ig5fvEKjerA
iSh7RQitm1+UwvgeSK/b2UGKof2RT7D068dy3hMb3i9Vs6SPknLv62yDlKRMarch
BdtexLr1SiiO0ZvaaIeeVAZyQn6kn2qTaNbnxsQS3s/hDX6vJt2SIjaOpwWNm4eJ
pKrPOjX0YfJHSMHq5pq6w4OTJFY0CLycK/KK0aOYYjjSOO2Tvg4g+INl5K1jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUX6w2ZO1lM6ZiS92TtuI6453bX0kwHwYDVR0j
BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI
UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1
RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJDeHRLZ1ZOajJUUGdHMjhyTlF6elZyNG4yMTV0VlFFeE1nZ0pBdU5ySFB5LzEv
MzIzMDMwMmUzMTM4MzcyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMi7ZTANBgkqhkiG9w0BAQsFAAOCAQEADH81
lVPUc3E5umkr1LaU185KKifmTiJZLCSL/sq+N+v0/5lBIWddPsnDujI1uVLDYOhW
V5MfSJKG36oTST/yOYu0HZ8TYPHw2w1tFV9/1PTPIWu+DkTNjcDcm1QOctWfCKLQ
F7vANCOWoRPMa6AI/5C0KyHdjVBKpVGG46HOYa00SLaVTRkA2+69znxUjCvQFEaJ
LP70yqWyXUc4cOwdHuKqP7DJMeM/Bcau34WOshhXzvfJdW6nWBypwToLP7PHd62E
E8swrEGPuT0A/MF88hVtVePxD8hesA8S34sNFAOmuHEJjkUaZlhpfzg6fjB30lmj
e1/QMihL1lMvZD21RA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:13 2026 by rpki-client