Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
File:                     3230372e3234382e342e302f32322d3234203d3e20323731333330.roa (raw, json)
Hash identifier:          ghF1TGhBZZyNg9ABkTWFCoeZHaXw906fT76yMOCnUfc=
Subject key identifier:   85:7F:F9:31:03:83:50:D3:80:87:A3:D5:64:D8:5F:08:6B:7E:8E:33
Certificate issuer:       /CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
Certificate serial:       1AECE15F09A5FE1D6147EB19A31AF293429D00CA
Authority key identifier: BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     271330
IP address blocks:        207.248.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl
                          rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ec:e1:5f:09:a5:fe:1d:61:47:eb:19:a3:1a:f2:93:42:9d:00:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0A1EEFD67F36B7D7F60A6431C72C8138020661
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:61:39:14:33:cd:17:cf:c2:20:e4:08:7a:
                    64:28:4b:aa:cf:0d:9d:38:f6:7c:01:b6:b8:d9:d3:
                    91:fc:c3:1d:02:54:1e:a2:98:9c:9c:f6:6e:d0:9a:
                    5a:fa:b4:4f:8c:bd:ce:ef:c7:a4:34:a8:ad:bb:53:
                    86:0f:ac:26:39:c2:6f:85:ea:4f:09:c3:f2:ee:38:
                    76:22:23:da:66:e9:db:9e:11:65:4e:06:b7:ae:90:
                    0b:19:b7:46:fa:0e:0d:09:89:e3:09:c5:6a:55:f6:
                    57:9a:fb:23:02:cf:85:36:04:5a:b7:18:fb:e8:02:
                    60:70:28:d1:e6:09:7e:bc:e3:ca:0d:ad:d1:57:4e:
                    4e:d8:65:58:54:35:17:1e:f6:21:21:65:54:b4:a8:
                    99:77:d1:b7:ea:53:65:2e:3e:7e:87:58:8a:52:0b:
                    35:47:61:55:70:ba:11:01:fe:98:dd:df:41:7f:71:
                    b4:81:1c:11:e1:17:0b:c9:42:2f:57:88:51:d8:12:
                    fe:bb:b9:c3:a0:78:36:c3:3e:ac:5d:32:3c:9c:14:
                    db:5f:53:b3:5d:08:9c:0d:43:1a:b5:0c:96:74:36:
                    82:b8:64:14:34:e9:ee:95:91:0e:b1:69:5e:8e:1f:
                    dc:ca:fc:b5:bf:cc:ef:4b:47:2b:4b:67:12:14:c1:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7F:F9:31:03:83:50:D3:80:87:A3:D5:64:D8:5F:08:6B:7E:8E:33
            X509v3 Authority Key Identifier:
                keyid:BB:0A:1E:EF:D6:7F:36:B7:D7:F6:0A:64:31:C7:2C:81:38:02:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB0A1EEFD67F36B7D7F60A6431C72C8138020661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/1/3230372e3234382e342e302f32322d3234203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:1f:ce:00:70:7c:e2:0a:bb:52:83:16:70:8d:7d:db:21:
         b1:05:dd:68:a2:55:95:12:50:41:5b:ce:79:cb:43:a4:22:5b:
         b7:73:40:6c:cf:90:00:94:7b:86:61:d4:97:7c:39:86:f8:8c:
         97:c1:96:64:2e:2d:ea:8d:b5:e1:6e:5a:ea:4b:0c:8f:49:6c:
         d6:f8:38:d0:c9:f9:7d:df:64:74:01:70:f0:d7:d6:53:5a:06:
         c1:bc:a9:97:89:a2:ff:24:b8:36:68:7e:29:6e:70:8b:35:d2:
         f6:c6:1c:fd:60:97:02:08:59:06:c5:c6:7c:37:37:b3:f8:3a:
         ec:15:08:77:10:59:2a:74:d4:e0:a3:83:a2:0e:76:1a:37:01:
         dc:8f:cf:21:49:0a:56:6f:74:37:d2:8c:16:4e:09:40:1e:59:
         2d:0f:16:e3:fc:08:c2:c8:b9:91:a4:bd:2d:37:c1:88:59:5f:
         65:b2:24:46:09:58:9f:cb:cc:20:a2:e0:51:5e:aa:fd:b9:b7:
         38:43:8c:c5:bb:a7:09:78:70:64:85:bf:dc:b1:d0:50:8b:e6:
         98:b5:83:f0:b8:93:8e:d9:fe:1e:09:fc:50:2c:df:43:6d:5f:
         41:fd:f7:70:78:7d:ef:8a:b0:33:00:45:37:f8:05:b1:1f:81:
         07:7e:79:70
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUGuzhXwml/h1hR+sZoxryk0KdAMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwQTFFRUZENjdGMzZCN0Q3RjYwQTY0MzFDNzJDODEz
ODAyMDY2MTAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E3MTYxMzkxNDMzQ0QxN0NG
QzIyMEU0MDg3QTY0Mjg0QkFBQ0YwRDlEMzhGNjdDMDFCNkI4RDlEMzkxRkNDMzFE
MDI1NDFFQTI5ODlDOUNGNjZFRDA5QTVBRkFCNDRGOENCRENFRUZDN0E0MzRBOEFE
QkI1Mzg2MEZBQzI2MzlDMjZGODVFQTRGMDlDM0YyRUUzODc2MjIyM0RBNjZFOURC
OUUxMTY1NEUwNkI3QUU5MDBCMTlCNzQ2RkEwRTBEMDk4OUUzMDlDNTZBNTVGNjU3
OUFGQjIzMDJDRjg1MzYwNDVBQjcxOEZCRTgwMjYwNzAyOEQxRTYwOTdFQkNFM0NB
MERBREQxNTc0RTRFRDg2NTU4NTQzNTE3MUVGNjIxMjE2NTU0QjRBODk5NzdEMUI3
RUE1MzY1MkUzRTdFODc1ODhBNTIwQjM1NDc2MTU1NzBCQTExMDFGRTk4RERERjQx
N0Y3MUI0ODExQzExRTExNzBCQzk0MjJGNTc4ODUxRDgxMkZFQkJCOUMzQTA3ODM2
QzMzRUFDNUQzMjNDOUMxNERCNUY1M0IzNUQwODlDMEQ0MzFBQjUwQzk2NzQzNjgy
Qjg2NDE0MzRFOUVFOTU5MTBFQjE2OTVFOEUxRkRDQ0FGQ0I1QkZDQ0VGNEI0NzJC
NEI2NzEyMTRDMTk1NUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAynFhORQzzRfPwiDkCHpkKEuqzw2dOPZ8Aba42dOR/MMdAlQeopic
nPZu0Jpa+rRPjL3O78ekNKitu1OGD6wmOcJvhepPCcPy7jh2IiPaZunbnhFlTga3
rpALGbdG+g4NCYnjCcVqVfZXmvsjAs+FNgRatxj76AJgcCjR5gl+vOPKDa3RV05O
2GVYVDUXHvYhIWVUtKiZd9G36lNlLj5+h1iKUgs1R2FVcLoRAf6Y3d9Bf3G0gRwR
4RcLyUIvV4hR2BL+u7nDoHg2wz6sXTI8nBTbX1OzXQicDUMatQyWdDaCuGQUNOnu
lZEOsWlejh/cyvy1v8zvS0crS2cSFMGVXwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIV/+TEDg1DTgIej1WTYXwhrfo4zMB8GA1UdIwQYMBaAFLsKHu/Wfza31/YKZDHH
LIE4AgZhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJGd0dwS2VoSmpRcHhM
cXJNZFN1a2c2czV2YkhndW5IbnRTbVVGZWthblZLLzEvQkIwQTFFRUZENjdGMzZC
N0Q3RjYwQTY0MzFDNzJDODEzODAyMDY2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CQjBBMUVFRkQ2N0YzNkI3RDdGNjBBNjQzMUM3MkM4MTM4MDIw
NjYxLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yRndHcEtlaEpqUXB4THFyTWRT
dWtnNnM1dmJIZ3VuSG50U21VRmVrYW5WSy8xLzMyMzAzNzJlMzIzNDM4MmUzNDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMzMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAs/4
BDANBgkqhkiG9w0BAQsFAAOCAQEAdscfzgBwfOIKu1KDFnCNfdshsQXdaKJVlRJQ
QVvOectDpCJbt3NAbM+QAJR7hmHUl3w5hviMl8GWZC4t6o214W5a6ksMj0ls1vg4
0Mn5fd9kdAFw8NfWU1oGwbypl4mi/yS4Nmh+KW5wizXS9sYc/WCXAghZBsXGfDc3
s/g67BUIdxBZKnTU4KODog52GjcB3I/PIUkKVm90N9KMFk4JQB5ZLQ8W4/wIwsi5
kaS9LTfBiFlfZbIkRglYn8vMIKLgUV6q/bm3OEOMxbunCXhwZIW/3LHQUIvmmLWD
8LiTjtn+Hgn8UCzfQ21fQf33cHh974qwMwBFN/gFsR+BB355cA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:24 2026 by rpki-client