Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32322d3232203d3e203631363732.roa (raw, json)
Hash identifier:          11u4TK2/FNjVPFYoN1bCCz7vk68BV+onDX1RUYfeEpc=
Subject key identifier:   BF:1B:B4:08:74:79:07:3A:C8:27:51:19:09:00:6B:9F:71:26:A8:3C
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       193DE2FA4F2AB911E164BD92392DEF6995607957
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa
Signing time:             Thu 05 Feb 2026 19:00:35 +0000
ROA not before:           Thu 05 Feb 2026 18:55:35 +0000
ROA not after:            Thu 04 Feb 2027 19:00:35 +0000
asID:                     61672
IP address blocks:        177.11.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3d:e2:fa:4f:2a:b9:11:e1:64:bd:92:39:2d:ef:69:95:60:79:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Feb  5 18:55:35 2026 GMT
            Not After : Feb  4 19:00:35 2027 GMT
        Subject: CN=BF1BB4087479073AC827511909006B9F7126A83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:30:3d:9b:64:10:96:6f:48:59:1a:3b:af:
                    0e:22:a2:25:b9:b5:a6:74:df:6b:06:77:40:62:00:
                    bb:ec:2b:93:f9:1c:fd:2b:92:e9:f3:bd:9d:69:fd:
                    5a:7d:29:60:de:ee:cc:3f:62:f5:4e:a8:60:89:16:
                    b7:68:94:b2:a1:cd:26:b5:d3:1a:5d:87:f3:b6:b6:
                    23:33:d1:f0:5d:96:67:2e:04:05:f2:87:ea:87:6e:
                    5a:7b:7e:ee:28:41:5e:bf:f2:2a:f4:f8:3c:55:16:
                    14:e7:11:fd:39:83:2f:ef:0a:35:fd:87:0a:a4:27:
                    55:8f:4d:72:c8:1c:4f:c6:f4:05:30:b9:26:40:fa:
                    0d:b4:2b:f6:c3:51:73:81:f3:d2:8f:e8:0e:cc:92:
                    6d:75:0b:c3:8f:35:dc:7d:4c:03:b0:20:a0:a8:f7:
                    a1:3c:8e:98:8e:8b:55:50:21:e2:31:37:95:8e:67:
                    86:8f:5a:4c:fe:0a:bb:29:82:07:87:f9:d9:5f:3c:
                    4d:f5:13:fa:15:f6:be:93:b5:7f:2e:9c:a9:e8:bf:
                    5f:8b:77:dd:b1:bb:49:b7:d7:8a:f8:c4:76:2b:94:
                    f1:72:a4:77:dc:a3:0b:01:54:41:b8:24:ab:b5:b3:
                    fd:95:06:5d:bb:24:ee:c6:45:9c:2d:80:fe:7f:97:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:B4:08:74:79:07:3A:C8:27:51:19:09:00:6B:9F:71:26:A8:3C
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:21:c1:29:8c:48:b5:c4:86:c5:e2:d2:42:50:a6:27:36:06:
         14:0c:14:6f:24:73:1c:b5:9d:22:db:4b:c9:37:46:82:25:dc:
         84:1b:8a:46:a8:e5:da:6a:0e:c2:92:af:b5:5f:a0:f6:7a:91:
         07:9f:13:77:3a:29:e3:9f:93:b3:c7:af:d4:3b:96:0c:68:6b:
         d8:0d:9b:d2:44:6a:91:cc:75:5c:bf:f3:be:b6:0a:f6:46:4e:
         b7:76:e7:37:fa:ad:1f:40:4c:48:13:ad:a1:52:25:4e:36:ce:
         0b:cd:99:dd:d9:81:bb:f0:ee:4b:59:71:ff:e1:25:f2:dd:ac:
         78:f8:07:b2:7d:4d:76:eb:a0:89:40:95:18:fe:c1:9c:8a:12:
         13:56:d9:df:d3:0b:67:40:40:ff:a5:ec:30:c6:ee:47:b8:71:
         8c:d4:a9:79:c9:b2:bf:95:c6:32:f4:32:a8:00:68:31:21:89:
         7b:62:5a:d4:ec:fb:43:fe:96:f5:4b:4e:16:e3:0e:b5:d1:92:
         48:cc:0e:d8:fa:57:01:bb:34:1e:c0:74:49:06:8b:2b:66:4e:
         af:d1:a6:00:6d:0b:cf:14:74:3f:34:cf:2c:ea:51:04:29:08:
         64:1e:2a:3c:b4:b4:cd:9f:47:e9:e8:92:e0:3e:aa:c9:fa:49:
         f3:b9:10:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGT3i+k8quRHhZL2SOS3vaZVgeVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNjAyMDUxODU1MzVaFw0yNzAyMDQxOTAwMzVaMDMxMTAvBgNV
BAMTKEJGMUJCNDA4NzQ3OTA3M0FDODI3NTExOTA5MDA2QjlGNzEyNkE4M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJjA9m2QQlm9IWRo7rw4ioiW5
taZ032sGd0BiALvsK5P5HP0rkunzvZ1p/Vp9KWDe7sw/YvVOqGCJFrdolLKhzSa1
0xpdh/O2tiMz0fBdlmcuBAXyh+qHblp7fu4oQV6/8ir0+DxVFhTnEf05gy/vCjX9
hwqkJ1WPTXLIHE/G9AUwuSZA+g20K/bDUXOB89KP6A7Mkm11C8OPNdx9TAOwIKCo
96E8jpiOi1VQIeIxN5WOZ4aPWkz+CrspggeH+dlfPE31E/oV9r6TtX8unKnov1+L
d92xu0m314r4xHYrlPFypHfcowsBVEG4JKu1s/2VBl27JO7GRZwtgP5/lxGVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvxu0CHR5BzrIJ1EZCQBrn3EmqDwwHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzEzNzM3MmUzMTMxMmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQtkMA0GCSqGSIb3DQEBCwUAA4IBAQDTIcEpjEi1
xIbF4tJCUKYnNgYUDBRvJHMctZ0i20vJN0aCJdyEG4pGqOXaag7Ckq+1X6D2epEH
nxN3Oinjn5Ozx6/UO5YMaGvYDZvSRGqRzHVcv/O+tgr2Rk63duc3+q0fQExIE62h
UiVONs4LzZnd2YG78O5LWXH/4SXy3ax4+AeyfU1266CJQJUY/sGcihITVtnf0wtn
QED/pewwxu5HuHGM1Kl5ybK/lcYy9DKoAGgxIYl7YlrU7PtD/pb1S04W4w610ZJI
zA7Y+lcBuzQewHRJBosrZk6v0aYAbQvPFHQ/NM8s6lEEKQhkHio8tLTNn0fp6JLg
PqrJ+knzuRC4
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:50 2026 by rpki-client