Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65421.roa
File:                     AS65421.roa (raw, json)
Hash identifier:          S7RZw/1YTkkh+BCMZNah3V5iNI3wdBlS9TItInrZwak=
Subject key identifier:   6B:C5:5B:7E:C1:09:2D:56:1C:61:E4:2F:19:24:B5:C4:4D:A9:9C:B3
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       5C73D7D3A54C3B061EF1424210F74B1D6F1C5FF7
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65421.roa
Signing time:             Fri 06 Feb 2026 20:01:11 +0000
ROA not before:           Fri 06 Feb 2026 19:56:11 +0000
ROA not after:            Fri 05 Feb 2027 20:01:11 +0000
asID:                     65421
IP address blocks:        187.61.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:73:d7:d3:a5:4c:3b:06:1e:f1:42:42:10:f7:4b:1d:6f:1c:5f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Feb  6 19:56:11 2026 GMT
            Not After : Feb  5 20:01:11 2027 GMT
        Subject: CN=6BC55B7EC1092D561C61E42F1924B5C44DA99CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:79:65:e3:d6:f2:77:06:6d:20:00:bd:30:
                    69:c9:0b:e2:18:00:b6:89:f3:62:9b:8a:26:c6:33:
                    5b:1d:b5:33:00:b6:e2:d0:ac:42:6b:e7:15:db:e4:
                    ea:52:5e:b1:ae:91:35:84:91:3e:8c:e8:96:d1:78:
                    b0:0d:1f:cd:5d:f6:42:10:49:5d:70:68:bb:5b:dc:
                    15:35:5b:05:1f:52:c9:66:f1:89:29:14:12:e8:aa:
                    0e:02:c6:6e:88:e3:3e:97:37:37:05:4e:47:d1:bf:
                    fe:12:ff:e6:26:f5:9a:e9:48:18:ad:48:d0:54:0f:
                    db:e2:87:c4:d5:7c:78:15:2b:71:ae:92:11:23:43:
                    08:52:31:15:38:b9:32:60:ea:80:c4:c7:b0:60:ec:
                    44:c0:ec:ba:e3:2d:9d:26:9a:3a:67:3a:c6:e4:a9:
                    06:8d:65:65:94:70:87:e0:0c:e1:f2:99:86:dc:e1:
                    df:0e:a3:77:d0:fc:19:ea:08:54:3f:a3:f0:7c:c7:
                    c8:10:04:15:13:c8:0a:b3:cd:6b:34:5e:94:6e:31:
                    df:e3:6e:2d:5a:fa:dd:6b:45:58:3c:7b:39:d4:49:
                    c9:2a:93:64:57:fc:28:ac:be:52:b4:2f:d7:ef:e6:
                    82:15:a6:82:2f:55:39:1c:7d:8d:4a:b5:68:48:df:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:5B:7E:C1:09:2D:56:1C:61:E4:2F:19:24:B5:C4:4D:A9:9C:B3
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:17:4d:e8:f6:0d:46:9d:9a:c3:af:07:b8:a8:64:8b:28:
         a8:a7:5a:dc:67:31:fa:be:c4:91:89:00:b8:62:be:05:cb:4b:
         55:0c:cd:24:0c:48:65:68:58:d7:50:45:e0:11:9a:ed:c0:d9:
         a2:38:61:bc:c6:3c:ac:bc:29:72:63:f0:10:29:00:02:7a:c4:
         05:14:76:48:8c:d5:bf:0c:72:32:f4:ab:09:ab:8e:40:d8:42:
         99:11:af:55:15:59:b7:51:39:19:c4:e8:74:d1:04:2e:51:45:
         e7:e0:d7:50:18:08:28:66:74:ec:bf:8f:0a:d3:a3:b1:a9:36:
         69:d2:de:c3:b0:d1:3f:13:aa:40:e2:e5:17:29:74:93:46:33:
         22:a3:24:fa:6d:7a:c4:7e:cf:8f:ec:76:2f:9c:89:97:37:1a:
         e1:db:02:6c:e5:27:91:a9:1a:72:7f:f1:6f:cc:fa:ba:b1:aa:
         d5:18:1d:a1:0c:77:2a:be:ec:9f:87:c4:52:19:2d:99:4f:30:
         76:b3:cf:04:d9:95:52:82:9e:64:12:33:54:01:79:e5:2b:c7:
         2d:5f:dd:08:23:90:88:74:2b:b8:66:0e:0c:21:9a:b7:55:52:
         0a:02:9a:fb:30:e4:43:04:92:55:e8:7c:ef:92:76:d2:35:89:
         ab:b5:fb:0a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUXHPX06VMOwYe8UJCEPdLHW8cX/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE
M0FDMjYxODAeFw0yNjAyMDYxOTU2MTFaFw0yNzAyMDUyMDAxMTFaMDMxMTAvBgNV
BAMTKDZCQzU1QjdFQzEwOTJENTYxQzYxRTQyRjE5MjRCNUM0NERBOTlDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC273ll49bydwZtIAC9MGnJC+IY
ALaJ82KbiibGM1sdtTMAtuLQrEJr5xXb5OpSXrGukTWEkT6M6JbReLANH81d9kIQ
SV1waLtb3BU1WwUfUslm8YkpFBLoqg4Cxm6I4z6XNzcFTkfRv/4S/+Ym9ZrpSBit
SNBUD9vih8TVfHgVK3GukhEjQwhSMRU4uTJg6oDEx7Bg7ETA7LrjLZ0mmjpnOsbk
qQaNZWWUcIfgDOHymYbc4d8Oo3fQ/BnqCFQ/o/B8x8gQBBUTyAqzzWs0XpRuMd/j
bi1a+t1rRVg8eznUSckqk2RX/CisvlK0L9fv5oIVpoIvVTkcfY1KtWhI36nzAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQUa8VbfsEJLVYcYeQvGSS1xE2pnLMwHwYDVR0j
BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE
MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTNjU0
MjEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK7PbgwDQYJKoZIhvcNAQELBQADggEBAF0rF03o9g1GnZrD
rwe4qGSLKKinWtxnMfq+xJGJALhivgXLS1UMzSQMSGVoWNdQReARmu3A2aI4YbzG
PKy8KXJj8BApAAJ6xAUUdkiM1b8McjL0qwmrjkDYQpkRr1UVWbdRORnE6HTRBC5R
Refg11AYCChmdOy/jwrTo7GpNmnS3sOw0T8TqkDi5RcpdJNGMyKjJPptesR+z4/s
di+ciZc3GuHbAmzlJ5GpGnJ/8W/M+rqxqtUYHaEMdyq+7J+HxFIZLZlPMHazzwTZ
lVKCnmQSM1QBeeUrxy1f3QgjkIh0K7hmDgwhmrdVUgoCmvsw5EMEklXofO+SdtI1
iau1+wo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:04 2026 by rpki-client