Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53054.roa
File:                     AS53054.roa (raw, json)
Hash identifier:          dvz8O3gofJ+turpgUvJbdBBj2FFKj+HhYkgvXV2i67E=
Subject key identifier:   AB:EA:71:80:22:9F:A4:5A:F1:AC:16:60:AB:4A:A3:9D:63:CB:1D:B9
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       181293DB423362757436EF892AD901B8D3F3A657
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53054.roa
Signing time:             Fri 06 Feb 2026 20:01:11 +0000
ROA not before:           Fri 06 Feb 2026 19:56:11 +0000
ROA not after:            Fri 05 Feb 2027 20:01:11 +0000
asID:                     53054
IP address blocks:        187.73.192.0/19 maxlen: 19
                          187.73.192.0/19 maxlen: 24
                          187.73.208.0/20 maxlen: 20
                          187.73.210.0/23 maxlen: 23
                          2804:a3c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:12:93:db:42:33:62:75:74:36:ef:89:2a:d9:01:b8:d3:f3:a6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Feb  6 19:56:11 2026 GMT
            Not After : Feb  5 20:01:11 2027 GMT
        Subject: CN=ABEA7180229FA45AF1AC1660AB4AA39D63CB1DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:de:7e:15:93:b7:b7:96:36:a2:6b:b4:ef:
                    0d:44:c3:36:f9:4e:08:0e:36:2f:71:5f:fd:cb:3c:
                    8b:eb:26:ee:f8:4f:da:57:99:a1:89:06:11:2c:7d:
                    26:88:fe:20:89:76:3d:f5:b3:15:d7:e7:f8:fd:87:
                    0b:b0:e3:6e:ea:bc:15:c0:91:3f:75:44:53:64:05:
                    e4:d5:a0:12:05:62:ed:57:7c:5d:db:35:8c:e5:e5:
                    3f:82:73:c5:7a:13:d0:45:ed:f0:c4:c8:d5:af:b5:
                    34:32:fc:19:b8:ee:f0:d4:74:57:d7:56:31:26:8c:
                    1a:ca:79:63:3b:df:1f:58:49:7b:19:5c:f3:6d:d4:
                    b8:7b:76:f9:31:57:6a:44:7a:66:8d:dd:07:3d:55:
                    f7:ca:63:33:f8:63:e7:6a:7a:cb:47:f0:8a:d9:33:
                    91:16:c9:aa:d5:63:6f:b5:27:76:dc:b9:bf:36:46:
                    6c:6a:c8:18:5f:9a:fd:aa:47:a3:9c:52:f0:72:0e:
                    2d:89:47:27:b6:ff:e5:f4:a5:68:bb:d1:10:68:bc:
                    e5:e4:b2:4d:0d:e7:ed:4a:36:29:9c:0e:dd:bd:6c:
                    08:f0:ea:e5:c8:63:a3:de:c2:88:da:84:8d:2f:33:
                    0e:ef:df:30:cf:2f:25:18:36:57:e1:5b:53:e0:9a:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EA:71:80:22:9F:A4:5A:F1:AC:16:60:AB:4A:A3:9D:63:CB:1D:B9
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.192.0/19
                IPv6:
                  2804:a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:9c:f7:70:05:69:19:23:93:b0:43:c0:37:a6:e4:99:6c:92:
         4c:49:5d:34:ae:e5:12:a3:dd:42:de:f8:ed:4f:d6:88:66:0a:
         b3:83:0f:de:0a:67:8b:99:4c:d0:8f:1e:dc:12:a2:ac:f4:b3:
         ae:10:e2:16:fd:86:e3:13:d5:aa:31:b1:b1:09:f7:05:7b:ca:
         97:11:02:17:d9:9f:df:cb:03:23:cb:e7:a9:38:88:13:dc:ff:
         d5:c3:a8:e3:8a:cc:e0:a6:4b:b9:e4:5a:4b:ab:23:6b:0d:63:
         bd:a3:42:e7:5f:be:a6:a0:0a:23:90:fd:fa:60:c4:10:47:87:
         cf:21:fe:ca:47:11:31:aa:68:45:a8:42:8b:03:85:8d:1f:b1:
         19:a9:8d:f5:e0:de:4b:de:81:d0:9f:b4:55:05:ac:b2:81:2e:
         99:5e:bd:d6:d0:e4:69:c6:63:72:fb:cd:99:ac:17:35:97:d3:
         1a:f4:fd:00:28:18:8a:f4:32:86:f2:34:f5:73:ee:6f:48:b0:
         10:61:db:41:8f:4d:84:3e:33:05:25:e7:7c:37:8e:7a:e9:4a:
         e5:06:ff:cb:d3:8c:f4:ac:e0:8e:d8:c1:06:d5:9f:46:29:80:
         28:fe:df:0d:52:dd:b7:7f:f5:9f:3f:ff:f9:6b:b3:9d:56:8f:
         5c:05:9c:be
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIUGBKT20IzYnV0Nu+JKtkBuNPzplcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE
M0FDMjYxODAeFw0yNjAyMDYxOTU2MTFaFw0yNzAyMDUyMDAxMTFaMDMxMTAvBgNV
BAMTKEFCRUE3MTgwMjI5RkE0NUFGMUFDMTY2MEFCNEFBMzlENjNDQjFEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusN5+FZO3t5Y2omu07w1Ewzb5
TggONi9xX/3LPIvrJu74T9pXmaGJBhEsfSaI/iCJdj31sxXX5/j9hwuw427qvBXA
kT91RFNkBeTVoBIFYu1XfF3bNYzl5T+Cc8V6E9BF7fDEyNWvtTQy/Bm47vDUdFfX
VjEmjBrKeWM73x9YSXsZXPNt1Lh7dvkxV2pEemaN3Qc9VffKYzP4Y+dqestH8IrZ
M5EWyarVY2+1J3bcub82RmxqyBhfmv2qR6OcUvByDi2JRye2/+X0pWi70RBovOXk
sk0N5+1KNimcDt29bAjw6uXIY6PewojahI0vMw7v3zDPLyUYNlfhW1Pgmtc3AgMB
AAGjggIqMIICJjAdBgNVHQ4EFgQUq+pxgCKfpFrxrBZgq0qjnWPLHbkwHwYDVR0j
BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE
MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTNTMw
NTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAW7ScAwDQQCAAIwBwMFACgECjwwDQYJKoZIhvcNAQELBQAD
ggEBAIic93AFaRkjk7BDwDem5JlskkxJXTSu5RKj3ULe+O1P1ohmCrODD94KZ4uZ
TNCPHtwSoqz0s64Q4hb9huMT1aoxsbEJ9wV7ypcRAhfZn9/LAyPL56k4iBPc/9XD
qOOKzOCmS7nkWkurI2sNY72jQudfvqagCiOQ/fpgxBBHh88h/spHETGqaEWoQosD
hY0fsRmpjfXg3kvegdCftFUFrLKBLplevdbQ5GnGY3L7zZmsFzWX0xr0/QAoGIr0
MobyNPVz7m9IsBBh20GPTYQ+MwUl53w3jnrpSuUG/8vTjPSs4I7YwQbVn0YpgCj+
3w1S3bd/9Z8///lrs51Wj1wFnL4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:34:38 2026 by rpki-client