Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          Nd+Yn1Fd25bfj40Hel/RcRLSShFFbt8NoGWOuxrfI9I=
Subject key identifier:   2A:C2:4B:9C:40:E2:EE:43:A7:40:46:51:29:18:54:EB:53:D0:41:1E
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       6A9EA9FC3135ADF76ACF8FD32A10B5A902086370
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 05 Feb 2026 10:56:28 +0000
ROA not before:           Thu 05 Feb 2026 10:51:28 +0000
ROA not after:            Thu 04 Feb 2027 10:56:28 +0000
asID:                     270370
IP address blocks:        190.89.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9e:a9:fc:31:35:ad:f7:6a:cf:8f:d3:2a:10:b5:a9:02:08:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Feb  5 10:51:28 2026 GMT
            Not After : Feb  4 10:56:28 2027 GMT
        Subject: CN=2AC24B9C40E2EE43A7404651291854EB53D0411E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d2:e6:4b:bd:f1:6c:fc:f1:c8:ed:cc:e5:a6:
                    ae:3c:8e:96:f9:06:69:02:8a:48:9a:ff:24:5f:bf:
                    b5:34:0f:d5:2e:23:f2:cd:d0:74:44:7d:ba:6c:8e:
                    a1:b3:56:c2:c7:11:88:98:26:d0:c1:ae:59:7f:22:
                    64:eb:9f:b8:8e:5a:77:f2:73:40:6a:8a:28:a0:7c:
                    53:1d:42:94:bd:4c:34:18:55:ef:8b:66:0e:96:d6:
                    c2:fc:80:0d:33:34:9b:b7:9b:f6:a0:b6:cc:de:80:
                    38:15:ba:5b:ff:7e:b2:24:52:b5:17:6f:6d:de:f5:
                    0a:be:64:af:e1:5d:b7:ba:4f:72:59:0f:2b:d9:c9:
                    c1:16:59:db:81:28:a1:e7:7a:0a:2a:71:e4:10:d8:
                    ab:35:60:14:1b:9b:c0:dd:8d:30:c5:58:a8:47:7f:
                    bb:06:51:6f:1b:b2:c5:d9:9f:ce:c5:ee:11:86:a9:
                    89:2c:6b:d5:4e:a8:35:f4:28:ba:9f:91:08:4c:3a:
                    96:5b:a2:7d:e2:e0:fc:43:57:6d:63:a3:2f:ed:7b:
                    c0:60:58:67:35:6e:66:95:25:f2:57:f1:48:72:2a:
                    90:ab:ae:88:8a:77:ca:f0:cc:00:82:e0:f6:1f:c7:
                    0a:44:e5:90:4e:b6:7e:bf:07:ea:9e:66:95:1d:34:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C2:4B:9C:40:E2:EE:43:A7:40:46:51:29:18:54:EB:53:D0:41:1E
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3135302e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:19:25:15:23:c0:1b:59:5e:f0:fb:0e:f1:b5:f4:26:ce:c8:
         9a:1a:58:a2:d2:2e:23:73:96:0b:23:c8:ba:4a:1f:4b:f3:a6:
         a8:c2:98:87:ea:56:32:dc:b1:6a:c8:94:35:00:db:b1:71:d5:
         cd:a7:8f:c5:7e:03:87:f6:46:13:e9:4a:0a:db:2e:7c:7b:2f:
         5a:8b:58:6a:e5:9e:e3:db:2b:8d:51:41:70:63:e4:72:a7:c9:
         6c:7c:9f:f4:3c:cc:79:da:69:1c:96:a4:6d:f2:55:16:85:71:
         12:93:29:79:f9:4f:b9:d9:90:38:a1:4c:c9:21:64:6f:03:d4:
         59:f1:25:08:3f:fd:30:e4:5d:0c:58:ab:24:43:42:54:50:76:
         69:f4:f7:24:a6:40:59:c7:a1:9a:57:a6:05:d8:cf:53:9e:15:
         89:8b:11:95:6d:cc:62:57:09:c9:81:c2:fc:ff:bb:ac:a7:5c:
         7f:23:76:e2:49:68:20:80:6f:d4:84:cb:ca:e0:76:23:21:7a:
         22:9b:f8:84:b2:0b:e7:98:6b:9c:86:87:55:56:17:44:c4:e8:
         b1:d8:11:91:dd:1f:f9:af:cd:45:ca:35:b2:6e:65:0b:fe:85:
         dc:12:3d:88:b5:bc:18:7f:51:29:bb:0c:86:6b:1e:73:a3:c4:
         91:b8:54:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUap6p/DE1rfdqz4/TKhC1qQIIY3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRkZGNzJDMTFCMzY0OUQ1QTA0N0ZENDJEM0REMzEy
QjE4NDJDRjAeFw0yNjAyMDUxMDUxMjhaFw0yNzAyMDQxMDU2MjhaMDMxMTAvBgNV
BAMTKDJBQzI0QjlDNDBFMkVFNDNBNzQwNDY1MTI5MTg1NEVCNTNEMDQxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0uZLvfFs/PHI7czlpq48jpb5
BmkCikia/yRfv7U0D9UuI/LN0HREfbpsjqGzVsLHEYiYJtDBrll/ImTrn7iOWnfy
c0BqiiigfFMdQpS9TDQYVe+LZg6W1sL8gA0zNJu3m/agtszegDgVulv/frIkUrUX
b23e9Qq+ZK/hXbe6T3JZDyvZycEWWduBKKHnegoqceQQ2Ks1YBQbm8DdjTDFWKhH
f7sGUW8bssXZn87F7hGGqYksa9VOqDX0KLqfkQhMOpZbon3i4PxDV21joy/te8Bg
WGc1bmaVJfJX8UhyKpCrroiKd8rwzACC4PYfxwpE5ZBOtn6/B+qeZpUdNPZRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKsJLnEDi7kOnQEZRKRhU61PQQR4wHwYDVR0j
BBgwFoAUxT//csEbNknVoEf9QtPdMSsYQs8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnQzYkdaWHo4bUpEckRkbVo2TkRjMnhaRHNiamZnRXJocmpXZTdIdjhv
UU0vMS9DNTNGRkY3MkMxMUIzNjQ5RDVBMDQ3RkQ0MkQzREQzMTJCMTg0MkNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0ZGRjcyQzExQjM2NDlE
NUEwNDdGRDQyRDNERDMxMkIxODQyQ0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0M2JHWlh6OG1KRHJEZG1aNk5EYzJ4WkRzYmpmZ0VyaHJqV2U3SHY4b1FNLzEv
MzEzOTMwMmUzODM5MmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+WZYwDQYJKoZIhvcNAQELBQADggEBAEsZJRUj
wBtZXvD7DvG19CbOyJoaWKLSLiNzlgsjyLpKH0vzpqjCmIfqVjLcsWrIlDUA27Fx
1c2nj8V+A4f2RhPpSgrbLnx7L1qLWGrlnuPbK41RQXBj5HKnyWx8n/Q8zHnaaRyW
pG3yVRaFcRKTKXn5T7nZkDihTMkhZG8D1FnxJQg//TDkXQxYqyRDQlRQdmn09ySm
QFnHoZpXpgXYz1OeFYmLEZVtzGJXCcmBwvz/u6ynXH8jduJJaCCAb9SEy8rgdiMh
eiKb+ISyC+eYa5yGh1VWF0TE6LHYEZHdH/mvzUXKNbJuZQv+hdwSPYi1vBh/USm7
DIZrHnOjxJG4VGE=
-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:41 2026 by rpki-client