Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa
File:                     3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa (raw, json)
Hash identifier:          CVRAWic0EMJ3pC526p3Q7/WIg3l/by+zZ0ZpByHrrxM=
Subject key identifier:   67:C1:85:AF:28:B5:7D:60:BF:5F:3B:5F:7A:1A:E1:54:8D:84:D4:36
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       05C50FE7EB24435A151BB145809F95F99529CA2D
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     265477
IP address blocks:        168.197.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c5:0f:e7:eb:24:43:5a:15:1b:b1:45:80:9f:95:f9:95:29:ca:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=67C185AF28B57D60BF5F3B5F7A1AE1548D84D436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:99:d3:37:ca:b6:b4:5b:99:67:27:20:61:13:
                    36:71:4e:f3:96:86:cd:c4:44:e4:77:d5:8c:10:3c:
                    de:4d:ec:20:34:8c:fa:65:be:c2:94:49:ad:15:3b:
                    ad:c7:40:6f:8d:ad:fa:29:57:eb:5c:bb:bf:b3:d2:
                    df:b4:95:5a:0c:34:f3:52:08:68:93:f2:d1:7d:19:
                    54:b6:b7:10:95:54:49:03:e6:43:d1:ff:8b:ee:c1:
                    ae:de:ad:1c:66:f2:40:2a:98:82:8f:e1:f5:15:e7:
                    ef:32:f8:4c:c5:64:6c:e4:43:89:b2:eb:6c:43:e3:
                    31:44:b3:14:d5:58:34:60:43:3a:af:f8:82:57:f7:
                    4d:ce:7e:84:7b:41:59:e4:a4:cf:e0:0d:3e:37:d6:
                    22:7e:3b:84:5d:fe:65:ac:83:4e:0f:d2:03:85:44:
                    4e:ab:6d:60:87:93:25:bc:b8:32:cc:4d:2d:75:0e:
                    5b:1f:c1:6c:bf:16:43:29:ec:4f:89:a9:b8:57:18:
                    ea:6f:bd:c9:90:9a:dc:c7:bf:58:67:a9:a6:67:13:
                    5c:be:2f:84:25:80:02:f7:37:a4:b8:35:bf:35:56:
                    a8:4e:a3:5e:45:ab:e3:12:7d:f4:9e:2d:71:1e:18:
                    cb:34:a5:0c:c0:27:7e:7e:7d:0f:b8:ec:1a:d0:c3:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:85:AF:28:B5:7D:60:BF:5F:3B:5F:7A:1A:E1:54:8D:84:D4:36
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3136382e3139372e3130342e302f32342d3234203d3e20323635343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f4:e2:1d:2f:e3:79:2f:89:2c:eb:94:15:a4:58:d4:ba:ec:
         a7:42:7e:66:f5:e7:e6:3e:ac:a6:5c:0a:21:5a:d7:1a:25:ff:
         9e:35:cf:32:1e:51:4e:d3:f2:29:90:7f:4d:ff:7b:2d:4b:a5:
         a0:9d:ce:ff:9a:ed:31:30:2a:97:df:18:5d:1e:c3:00:82:fc:
         05:df:d1:c9:dc:39:f6:30:de:df:a1:90:03:1b:4b:fb:98:3e:
         ef:08:fa:b0:fb:da:0a:0c:22:48:f1:04:34:07:3d:a9:7a:c9:
         69:30:91:44:26:56:96:14:43:9d:e6:ea:c3:d1:8d:eb:2a:f7:
         56:2b:cf:45:72:09:73:82:ef:89:f2:54:2e:aa:a8:ae:56:b3:
         5d:4e:e5:5c:ef:ce:61:bb:09:c1:b4:a3:6e:26:0d:5e:81:e6:
         9f:d5:43:b8:d4:4e:ad:44:28:97:1b:20:d0:11:8b:19:19:64:
         f0:c6:7b:b7:24:ed:9c:d6:f5:43:f3:f2:e1:65:32:37:6a:f9:
         75:28:b7:8b:4d:a4:79:43:11:e5:88:92:40:e4:1f:78:61:a3:
         e4:ba:ac:9b:2e:d5:d7:53:98:70:d9:b2:7b:4b:04:b8:64:af:
         7f:46:48:36:db:06:b4:53:2e:d8:f7:30:c1:76:26:fa:4b:81:
         f6:b1:e0:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBcUP5+skQ1oVG7FFgJ+V+ZUpyi0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5RUU3RDU2NUMwMjcwOTc1ODUzN0FGRUI3QkI4M0VD
NkFEMkVEMzAeFw0yNjAyMDQxOTU1MDdaFw0yNzAyMDMyMDAwMDdaMDMxMTAvBgNV
BAMTKDY3QzE4NUFGMjhCNTdENjBCRjVGM0I1RjdBMUFFMTU0OEQ4NEQ0MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvmdM3yra0W5lnJyBhEzZxTvOW
hs3EROR31YwQPN5N7CA0jPplvsKUSa0VO63HQG+NrfopV+tcu7+z0t+0lVoMNPNS
CGiT8tF9GVS2txCVVEkD5kPR/4vuwa7erRxm8kAqmIKP4fUV5+8y+EzFZGzkQ4my
62xD4zFEsxTVWDRgQzqv+IJX903OfoR7QVnkpM/gDT431iJ+O4Rd/mWsg04P0gOF
RE6rbWCHkyW8uDLMTS11DlsfwWy/FkMp7E+JqbhXGOpvvcmQmtzHv1hnqaZnE1y+
L4QlgAL3N6S4Nb81VqhOo15Fq+MSffSeLXEeGMs0pQzAJ35+fQ+47BrQwxfzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZ8GFryi1fWC/XztfehrhVI2E1DYwHwYDVR0j
BBgwFoAUq57n1WXAJwl1hTev63u4PsatLtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj
dVkvMS9BQjlFRTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOUVFN0Q1NjVDMDI3MDk3
NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzEv
MzEzNjM4MmUzMTM5MzcyZTMxMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjFaDANBgkqhkiG9w0BAQsFAAOCAQEAJvTi
HS/jeS+JLOuUFaRY1Lrsp0J+ZvXn5j6splwKIVrXGiX/njXPMh5RTtPyKZB/Tf97
LUuloJ3O/5rtMTAql98YXR7DAIL8Bd/Rydw59jDe36GQAxtL+5g+7wj6sPvaCgwi
SPEENAc9qXrJaTCRRCZWlhRDnebqw9GN6yr3VivPRXIJc4LvifJULqqorlazXU7l
XO/OYbsJwbSjbiYNXoHmn9VDuNROrUQolxsg0BGLGRlk8MZ7tyTtnNb1Q/Py4WUy
N2r5dSi3i02keUMR5YiSQOQfeGGj5Lqsmy7V11OYcNmye0sEuGSvf0ZINtsGtFMu
2PcwwXYm+kuB9rHgAg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:42 2026 by rpki-client