Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137372e32312e39362e302f31392d3234203d3e203533323436.roa
File:                     3137372e32312e39362e302f31392d3234203d3e203533323436.roa (raw, json)
Hash identifier:          +ANSQXiguToRDAGLBO33UxOp5asgVdI/2vYJ5WZWJTY=
Subject key identifier:   02:FE:3D:05:28:F3:AF:8F:2B:E2:33:B0:B6:1F:04:24:7E:35:E9:92
Certificate issuer:       /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial:       4956D3E2D34EEAEB99A020EDC82407158E2C8F5F
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137372e32312e39362e302f31392d3234203d3e203533323436.roa
Signing time:             Thu 05 Feb 2026 19:14:02 +0000
ROA not before:           Thu 05 Feb 2026 19:09:02 +0000
ROA not after:            Thu 04 Feb 2027 19:14:02 +0000
asID:                     53246
IP address blocks:        177.21.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl
                          rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:56:d3:e2:d3:4e:ea:eb:99:a0:20:ed:c8:24:07:15:8e:2c:8f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
        Validity
            Not Before: Feb  5 19:09:02 2026 GMT
            Not After : Feb  4 19:14:02 2027 GMT
        Subject: CN=02FE3D0528F3AF8F2BE233B0B61F04247E35E992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:fe:1f:f0:77:e5:57:cb:ee:55:49:8c:c1:
                    cc:5c:d1:f3:9e:90:32:47:16:6b:2a:bf:b5:4f:ae:
                    8c:d4:5c:5b:ab:eb:58:09:65:de:42:d8:65:db:c9:
                    5f:b2:e5:d9:54:42:7c:8a:fe:f4:2c:e3:f2:09:34:
                    96:af:33:42:17:99:f4:03:e5:24:fd:20:39:26:da:
                    9a:53:8c:b1:f2:3a:19:6d:ef:a9:2c:37:65:20:d0:
                    21:19:86:ae:07:aa:a2:d6:bf:ad:ec:56:3a:24:f0:
                    41:9a:80:06:58:c8:ac:88:bd:da:da:e0:f9:14:d3:
                    4f:e3:39:48:34:e6:14:8d:fa:cc:0b:de:ad:9e:dd:
                    56:62:bc:4e:8f:73:53:44:c6:05:c5:12:67:65:e3:
                    0c:0d:14:dd:83:c9:3b:49:55:3a:f6:b5:c3:77:b9:
                    bc:9c:72:d4:b8:9b:c3:f1:70:e3:df:8d:7c:9b:e0:
                    77:3c:89:8a:d8:90:3a:57:78:87:81:47:24:c3:2d:
                    f2:b2:2b:d7:47:01:04:87:f8:f8:e8:cc:20:21:53:
                    0b:7d:13:a1:d2:2c:36:a3:ef:46:a2:05:a7:4b:35:
                    d0:6a:d8:96:f8:a4:f9:ce:6c:54:57:3c:37:0a:db:
                    3e:e8:51:c9:da:b1:79:72:0e:02:03:0e:cd:c6:6b:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:3D:05:28:F3:AF:8F:2B:E2:33:B0:B6:1F:04:24:7E:35:E9:92
            X509v3 Authority Key Identifier:
                keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/3137372e32312e39362e302f31392d3234203d3e203533323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:04:90:a3:6e:5e:f3:7d:31:c0:f0:06:7e:91:ec:af:7e:
         eb:a1:9b:6b:85:10:24:1b:a0:97:24:f2:ff:49:a2:b4:17:6f:
         86:a2:a3:08:69:cb:49:88:7b:20:8f:23:7e:9f:33:1e:57:b5:
         cc:70:fb:a3:96:9b:50:2d:e3:3e:6d:d3:06:53:4b:60:4a:03:
         ee:8f:a7:69:62:17:1f:88:15:d9:a1:b2:df:52:56:f3:43:ec:
         20:c7:6a:ef:ab:60:21:cf:9b:f0:75:44:5a:cd:61:60:59:4d:
         ab:8e:0b:96:79:87:50:8e:04:11:4e:7c:a5:23:68:2f:1e:8d:
         b7:39:04:3e:c1:1c:a1:8b:f8:f6:fd:87:9b:34:80:3a:c9:38:
         4f:c6:17:b7:a1:67:ef:c1:b7:9d:37:7a:36:00:29:57:89:ac:
         bd:11:ec:62:38:e0:c5:25:85:f3:5a:bd:d7:f9:cb:cd:06:ea:
         34:0d:36:65:47:dd:f6:82:dd:fd:84:3b:12:49:95:a6:e7:9f:
         2a:0f:3d:79:a7:da:08:87:9b:89:fe:1a:77:1c:0b:ba:48:13:
         53:f1:93:43:00:4b:a1:42:1a:1c:b9:1e:81:c5:3e:b7:17:42:
         36:7b:a2:ad:06:75:a3:ef:26:3d:6f:f8:77:4a:0b:0e:7c:57:
         7d:1d:b6:4e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUSVbT4tNO6uuZoCDtyCQHFY4sj18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBGRTkzQzI5QjJEOUU5NjVGNTJGQ0VEMDQ3NjA4MTBB
MjQwRTlFMTAeFw0yNjAyMDUxOTA5MDJaFw0yNzAyMDQxOTE0MDJaMDMxMTAvBgNV
BAMTKDAyRkUzRDA1MjhGM0FGOEYyQkUyMzNCMEI2MUYwNDI0N0UzNUU5OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ2P4f8HflV8vuVUmMwcxc0fOe
kDJHFmsqv7VProzUXFur61gJZd5C2GXbyV+y5dlUQnyK/vQs4/IJNJavM0IXmfQD
5ST9IDkm2ppTjLHyOhlt76ksN2Ug0CEZhq4HqqLWv63sVjok8EGagAZYyKyIvdra
4PkU00/jOUg05hSN+swL3q2e3VZivE6Pc1NExgXFEmdl4wwNFN2DyTtJVTr2tcN3
ubycctS4m8PxcOPfjXyb4Hc8iYrYkDpXeIeBRyTDLfKyK9dHAQSH+PjozCAhUwt9
E6HSLDaj70aiBadLNdBq2Jb4pPnObFRXPDcK2z7oUcnasXlyDgIDDs3Ga5ZBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAv49BSjzr48r4jOwth8EJH416ZIwHwYDVR0j
BBgwFoAUMP6TwpstnpZfUvztBHYIEKJA6eEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJ2UW5tTmVRcWlVZERxRjRxZ1hSQkJOM29DUGtNRVBmZEhZOGkzSlZQ
eDEvMS8zMEZFOTNDMjlCMkQ5RTk2NUY1MkZDRUQwNDc2MDgxMEEyNDBFOUUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwRkU5M0MyOUIyRDlFOTY1
RjUyRkNFRDA0NzYwODEwQTI0MEU5RTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSdlFubU5lUXFpVWREcUY0cWdYUkJCTjNvQ1BrTUVQZmRIWThpM0pWUHgxLzEv
MzEzNzM3MmUzMjMxMmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzUzMzMy
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBbEVYDANBgkqhkiG9w0BAQsFAAOCAQEATD8EkKNuXvN9
McDwBn6R7K9+66Gba4UQJBuglyTy/0mitBdvhqKjCGnLSYh7II8jfp8zHle1zHD7
o5abUC3jPm3TBlNLYEoD7o+naWIXH4gV2aGy31JW80PsIMdq76tgIc+b8HVEWs1h
YFlNq44LlnmHUI4EEU58pSNoLx6NtzkEPsEcoYv49v2HmzSAOsk4T8YXt6Fn78G3
nTd6NgApV4msvRHsYjjgxSWF81q91/nLzQbqNA02ZUfd9oLd/YQ7EkmVpuefKg89
eafaCIebif4adxwLukgTU/GTQwBLoUIaHLkegcU+txdCNnuirQZ1o+8mPW/4d0oL
DnxXfR22Tg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:13:35 2026 by rpki-client