Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa
File:                     3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa (raw, json)
Hash identifier:          1cqNO15N6eNaEXlcpCnSfHKJEutcsSDYzbNoRtaMQuM=
Subject key identifier:   8C:05:98:0D:6F:9A:33:FC:61:76:AD:B4:41:73:13:F3:4A:4D:ED:11
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       0B763EB9E396F8DF1D5323EDF2B99FA2DE77012F
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa
Signing time:             Thu 05 Feb 2026 04:59:06 +0000
ROA not before:           Thu 05 Feb 2026 04:54:06 +0000
ROA not after:            Thu 04 Feb 2027 04:59:06 +0000
asID:                     270683
IP address blocks:        200.187.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:76:3e:b9:e3:96:f8:df:1d:53:23:ed:f2:b9:9f:a2:de:77:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Feb  5 04:54:06 2026 GMT
            Not After : Feb  4 04:59:06 2027 GMT
        Subject: CN=8C05980D6F9A33FC6176ADB4417313F34A4DED11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1f:9d:0f:e2:87:e1:c0:c5:32:60:56:6f:58:
                    d5:14:35:61:c7:b0:52:0f:b3:a3:54:df:27:b7:23:
                    86:b6:31:1f:5a:8d:b8:9e:9f:ab:56:5e:36:17:9c:
                    8a:c3:f1:15:1a:1c:5a:82:c2:38:c5:ef:86:ed:5d:
                    39:50:b7:bd:bd:5d:f1:75:c2:64:cb:b2:e2:3d:c9:
                    2d:4c:92:93:eb:90:d9:e0:0d:82:1b:bc:dd:53:f6:
                    71:fd:5b:8c:a4:fc:6c:27:cb:46:5f:ab:3e:f8:0f:
                    cb:07:01:18:c3:2f:35:ce:b9:dc:8b:84:32:c0:6c:
                    9a:ac:b9:80:df:dd:68:2b:98:54:28:ba:58:06:3a:
                    4c:f1:74:75:59:37:e0:2e:43:51:55:4c:f8:3d:53:
                    9d:54:a8:c6:8c:9a:8d:29:0c:c5:03:f0:d3:e6:b7:
                    b3:f3:63:0b:3a:a1:15:4b:c5:9d:ab:e0:08:0d:df:
                    a2:09:15:44:7e:27:f2:56:23:49:ab:02:7c:f5:73:
                    1f:81:4d:48:28:72:81:d9:a2:79:38:e4:7f:9d:42:
                    64:43:5f:2c:88:f3:ed:5e:98:44:68:f1:c2:c7:a9:
                    13:89:41:76:2f:f4:7b:ce:be:6e:32:ba:5a:b3:86:
                    19:71:7d:ed:c0:25:a8:7f:3b:7d:ee:1d:ea:5c:68:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:98:0D:6F:9A:33:FC:61:76:AD:B4:41:73:13:F3:4A:4D:ED:11
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130332e302f32342d3234203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ec:79:05:1c:3e:21:1b:44:eb:d4:ca:4b:9e:ef:a6:9b:95:
         f4:2b:36:c2:18:28:01:5f:71:f2:d0:d4:27:be:b3:b5:15:6d:
         13:ee:d1:82:89:37:72:f3:8b:db:bd:85:89:50:f5:ac:7a:0b:
         c2:ae:7c:9c:3b:87:6c:21:94:2c:06:4f:6e:20:4f:78:40:40:
         99:50:2e:be:81:8a:77:65:6b:d6:d4:07:ee:05:0e:38:5a:d6:
         59:0b:ac:08:80:9c:c1:e5:23:95:79:ac:17:30:5c:42:c8:9b:
         cf:36:c0:82:59:42:73:73:d5:03:2b:78:e0:eb:45:f3:19:92:
         0f:63:b6:79:24:12:7b:f9:cf:ea:53:75:a5:fd:63:ae:9b:f4:
         90:09:19:23:27:1c:6a:40:8d:bb:81:b7:3c:a5:d5:cc:36:3b:
         db:a7:28:c6:bc:ce:39:a0:89:34:44:02:d7:c3:e3:da:02:3f:
         c4:ef:9f:bf:b1:72:83:35:f0:b9:3a:c4:4b:91:d3:9f:86:8f:
         4a:4a:ee:94:9f:2d:c3:cc:ed:01:2f:5e:c0:c9:6b:a8:48:9a:
         1a:e9:2a:5e:62:36:eb:f9:20:63:3a:cf:96:4c:56:b7:78:cd:
         7e:e9:56:b0:64:91:c1:e5:71:7a:4c:6e:f3:e8:54:18:83:fb:
         22:7a:27:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC3Y+ueOW+N8dUyPt8rmfot53AS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBMjE0OTlEOUY3NkRBODVFRUM4RDhCMUE4RTNCMDY5
RDRDNzUwNTAeFw0yNjAyMDUwNDU0MDZaFw0yNzAyMDQwNDU5MDZaMDMxMTAvBgNV
BAMTKDhDMDU5ODBENkY5QTMzRkM2MTc2QURCNDQxNzMxM0YzNEE0REVEMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlH50P4ofhwMUyYFZvWNUUNWHH
sFIPs6NU3ye3I4a2MR9ajbien6tWXjYXnIrD8RUaHFqCwjjF74btXTlQt729XfF1
wmTLsuI9yS1MkpPrkNngDYIbvN1T9nH9W4yk/Gwny0Zfqz74D8sHARjDLzXOudyL
hDLAbJqsuYDf3WgrmFQoulgGOkzxdHVZN+AuQ1FVTPg9U51UqMaMmo0pDMUD8NPm
t7PzYws6oRVLxZ2r4AgN36IJFUR+J/JWI0mrAnz1cx+BTUgocoHZonk45H+dQmRD
XyyI8+1emERo8cLHqROJQXYv9HvOvm4yulqzhhlxfe3AJah/O33uHepcaB5nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjAWYDW+aM/xhdq20QXMT80pN7REwHwYDVR0j
BBgwFoAUjqIUmdn3bahe7I2LGo47Bp1MdQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkN4dEtnVk5qMlRQZ0cyOHJOUXp6VnI0bjIxNXRWUUV4TWdnSkF1TnJI
UHkvMS84RUEyMTQ5OUQ5Rjc2REE4NUVFQzhEOEIxQThFM0IwNjlENEM3NTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTIxNDk5RDlGNzZEQTg1
RUVDOEQ4QjFBOEUzQjA2OUQ0Qzc1MDUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJDeHRLZ1ZOajJUUGdHMjhyTlF6elZyNG4yMTV0VlFFeE1nZ0pBdU5ySFB5LzEv
MzIzMDMwMmUzMTM4MzcyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMi7ZzANBgkqhkiG9w0BAQsFAAOCAQEArex5
BRw+IRtE69TKS57vppuV9Cs2whgoAV9x8tDUJ76ztRVtE+7Rgok3cvOL272FiVD1
rHoLwq58nDuHbCGULAZPbiBPeEBAmVAuvoGKd2Vr1tQH7gUOOFrWWQusCICcweUj
lXmsFzBcQsibzzbAgllCc3PVAyt44OtF8xmSD2O2eSQSe/nP6lN1pf1jrpv0kAkZ
IyccakCNu4G3PKXVzDY726coxrzOOaCJNEQC18Pj2gI/xO+fv7FygzXwuTrES5HT
n4aPSkrulJ8tw8ztAS9ewMlrqEiaGukqXmI26/kgYzrPlkxWt3jNfulWsGSRweVx
ekxu8+hUGIP7InonAw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:17 2026 by rpki-client