Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa
File:                     3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (raw, json)
Hash identifier:          jQ6/5frxDqkVkkcEfiI4JX9SVRQPGQReqALs4lhfh9o=
Subject key identifier:   B1:83:78:94:1C:D0:97:2E:46:7A:A2:80:17:0E:EF:1F:BA:01:B7:E2
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       095E5EBA3579C02AA36F77FDA944D029D4291CAE
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa
Signing time:             Thu 05 Feb 2026 08:00:11 +0000
ROA not before:           Thu 05 Feb 2026 07:55:11 +0000
ROA not after:            Thu 04 Feb 2027 08:00:11 +0000
asID:                     265935
IP address blocks:        164.163.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:5e:ba:35:79:c0:2a:a3:6f:77:fd:a9:44:d0:29:d4:29:1c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Feb  5 07:55:11 2026 GMT
            Not After : Feb  4 08:00:11 2027 GMT
        Subject: CN=B18378941CD0972E467AA280170EEF1FBA01B7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c1:7f:bb:63:8b:59:38:ab:e0:35:d0:21:46:
                    8c:b1:f1:b9:d0:ca:94:34:d0:68:f0:95:b4:81:39:
                    e7:9d:a8:af:ad:fc:61:7d:ca:99:21:01:16:21:2b:
                    db:a9:18:46:90:ef:6e:96:78:88:76:39:57:93:24:
                    3c:34:c8:78:3e:6b:a0:97:6e:e2:0c:7c:42:00:1d:
                    c8:4d:ef:9f:d6:d8:bf:13:a0:bc:14:aa:d4:97:da:
                    dc:c8:f5:6e:77:26:a6:22:fe:63:ff:94:44:52:b3:
                    70:fa:b2:a7:77:4f:17:82:e6:5b:e9:45:d5:3c:0c:
                    2a:1f:4f:fb:f6:d3:64:da:f8:1e:26:b2:84:ac:f3:
                    c5:b0:52:dd:50:59:a5:e9:d5:bf:ff:5c:73:8e:47:
                    78:ab:67:4d:5c:d7:86:1e:5c:b4:3e:f0:c6:fc:1f:
                    1f:59:d3:5b:ac:db:2a:1e:a4:02:ba:a8:b9:fb:d1:
                    a7:60:2c:81:3a:5d:8f:74:b2:38:d7:f6:ca:eb:39:
                    90:46:c7:b7:d0:9c:07:e4:e1:96:6b:db:ce:cb:f3:
                    88:1b:c5:c4:94:c4:f7:e3:c9:d9:56:a2:b6:e1:44:
                    0b:5a:b7:81:1d:6d:98:b8:81:88:31:1c:18:19:7a:
                    96:c0:95:45:0f:9c:84:21:6a:a3:76:76:97:91:63:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:78:94:1C:D0:97:2E:46:7A:A2:80:17:0E:EF:1F:BA:01:B7:E2
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bd:d2:78:85:ff:01:5d:ea:0a:20:7e:c3:9f:34:c7:e7:05:
         3f:50:dd:28:8a:d6:24:53:08:e8:14:e3:6c:9a:09:3d:bf:f0:
         0f:0f:fa:68:fd:08:06:28:df:8d:70:f3:21:20:f4:36:d8:d7:
         bf:20:fb:7d:9a:b2:91:8a:03:00:93:41:44:d6:8b:a9:34:7e:
         39:49:35:74:0e:c8:3d:29:99:67:22:d3:6e:f1:4d:08:3d:72:
         23:f0:92:f1:52:7e:67:e8:1f:a0:ef:bf:18:55:20:cc:33:d3:
         4d:0e:8a:dc:62:88:dc:3a:ff:4d:63:bb:75:bd:f0:8a:9f:6f:
         b9:2d:cb:77:34:1e:56:be:11:97:d8:7d:ad:00:12:5c:fe:b5:
         00:1e:41:bf:b0:a4:94:94:c6:0e:22:c7:27:11:a5:a9:00:5a:
         1e:0c:3d:2a:67:7a:94:ee:ce:8b:81:bb:63:26:1d:37:a8:ed:
         0b:63:90:47:22:9f:56:13:9d:a7:ec:46:b4:f8:07:08:49:00:
         78:ca:48:e2:06:74:b0:4e:25:b3:0b:eb:6b:df:30:5e:56:b9:
         24:4e:05:b7:2b:21:5f:f8:aa:a2:50:13:13:72:19:32:3f:56:
         5e:42:bb:9f:11:ba:37:bb:1a:3f:b8:18:48:a4:ce:c2:5f:3e:
         6f:7e:ee:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCV5eujV5wCqjb3f9qUTQKdQpHK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0
NjdGNUJEMzAeFw0yNjAyMDUwNzU1MTFaFw0yNzAyMDQwODAwMTFaMDMxMTAvBgNV
BAMTKEIxODM3ODk0MUNEMDk3MkU0NjdBQTI4MDE3MEVFRjFGQkEwMUI3RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwX+7Y4tZOKvgNdAhRoyx8bnQ
ypQ00GjwlbSBOeedqK+t/GF9ypkhARYhK9upGEaQ726WeIh2OVeTJDw0yHg+a6CX
buIMfEIAHchN75/W2L8ToLwUqtSX2tzI9W53JqYi/mP/lERSs3D6sqd3TxeC5lvp
RdU8DCofT/v202Ta+B4msoSs88WwUt1QWaXp1b//XHOOR3irZ01c14YeXLQ+8Mb8
Hx9Z01us2yoepAK6qLn70adgLIE6XY90sjjX9srrOZBGx7fQnAfk4ZZr287L84gb
xcSUxPfjydlWorbhRAtat4EdbZi4gYgxHBgZepbAlUUPnIQhaqN2dpeRY2lbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsYN4lBzQly5GeqKAFw7vH7oBt+IwHwYDVR0j
BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ
NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC
RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNiN2JlWndMYlRqVEIzR1BSdEJoek1Seld4RW5ZTUJZR1ZNQXRzRXp3UDZqLzEv
MzEzNjM0MmUzMTM2MzMyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACkoxcwDQYJKoZIhvcNAQELBQADggEBAGm90niF
/wFd6gogfsOfNMfnBT9Q3SiK1iRTCOgU42yaCT2/8A8P+mj9CAYo341w8yEg9DbY
178g+32aspGKAwCTQUTWi6k0fjlJNXQOyD0pmWci027xTQg9ciPwkvFSfmfoH6Dv
vxhVIMwz000OitxiiNw6/01ju3W98Iqfb7kty3c0Hla+EZfYfa0AElz+tQAeQb+w
pJSUxg4ixycRpakAWh4MPSpnepTuzouBu2MmHTeo7QtjkEcin1YTnafsRrT4BwhJ
AHjKSOIGdLBOJbML62vfMF5WuSROBbcrIV/4qqJQExNyGTI/Vl5Cu58Ruje7Gj+4
GEikzsJfPm9+7uk=
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:37 2026 by rpki-client