Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          b/jxd0Ies4lj+Bf7n+iSI15tUeChU2EBazK87gFFNJw=
Subject key identifier:   F4:63:AE:2A:70:92:07:54:B1:51:45:18:71:57:68:EB:C8:3B:06:28
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       DF7BF4B2B4C797D0FECCCA0D76405F1494BDFC
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa
Signing time:             Thu 05 Feb 2026 17:11:22 +0000
ROA not before:           Thu 05 Feb 2026 17:06:22 +0000
ROA not after:            Thu 04 Feb 2027 17:11:22 +0000
asID:                     262772
IP address blocks:        186.232.176.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            df:7b:f4:b2:b4:c7:97:d0:fe:cc:ca:0d:76:40:5f:14:94:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Feb  5 17:06:22 2026 GMT
            Not After : Feb  4 17:11:22 2027 GMT
        Subject: CN=F463AE2A70920754B1514518715768EBC83B0628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:46:e0:46:33:8b:1a:a0:55:89:6a:ea:66:
                    24:e5:93:67:49:3e:8d:70:05:58:8a:8f:b8:4a:c3:
                    e3:cf:e9:3a:a9:74:72:14:f7:29:43:19:46:f0:28:
                    be:cd:76:de:20:5e:fc:74:00:f3:51:2e:0a:06:83:
                    fc:c3:8c:58:28:44:12:a2:f2:4f:a4:f7:d4:7a:38:
                    d0:e2:05:15:f1:99:aa:ef:a6:00:bb:ed:85:2c:93:
                    3b:24:86:91:72:c7:50:a0:ea:50:c9:8e:4d:4d:d7:
                    f3:e4:fe:43:30:1a:4b:e2:7f:3d:eb:03:3c:79:60:
                    30:3d:63:0f:80:3d:04:f0:8d:82:f8:95:16:0c:4f:
                    16:12:ac:5e:2b:51:6d:e0:98:57:f1:9f:ce:c9:1b:
                    ca:8d:a4:f6:1a:25:1f:ce:38:9c:90:a8:26:7d:5e:
                    fe:16:45:de:63:2f:c2:bd:f8:84:04:de:1b:f3:73:
                    43:df:fb:55:cf:44:4a:16:9d:be:a4:88:1a:5d:3e:
                    c1:5e:9e:b9:c3:2f:cb:49:60:1e:8d:a0:1c:b6:fb:
                    9f:14:af:0c:95:57:e1:a2:73:cd:2f:3f:cd:1c:d0:
                    0b:cb:c9:14:de:dc:4f:f4:b1:73:1b:86:db:2d:ca:
                    5e:6b:ac:aa:09:4a:9d:f4:90:60:ce:ea:d1:49:31:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:AE:2A:70:92:07:54:B1:51:45:18:71:57:68:EB:C8:3B:06:28
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:75:30:06:2a:27:15:de:5c:a5:69:a5:ba:b7:54:07:13:91:
         3c:4d:8c:7c:d8:9a:71:f1:a8:c1:af:47:6b:1b:8d:30:0d:4d:
         2b:51:8a:ed:57:a5:32:f0:c9:e2:09:a4:6e:67:02:b0:21:a6:
         8c:48:62:29:23:7e:2f:d6:b7:fa:d7:a3:3e:d8:9e:cf:50:88:
         e6:5e:da:51:ac:d2:09:e4:df:58:0a:c6:9c:fe:e0:32:3d:82:
         1b:88:53:16:0c:49:9c:d8:31:cc:86:67:fd:40:55:c3:76:b9:
         29:8f:86:19:cf:60:5d:d2:7d:e9:9e:ec:36:0a:a7:17:e7:e5:
         0a:92:60:af:53:6c:f6:a1:92:b7:5b:a1:e8:08:bb:93:2e:b9:
         1f:c4:dd:5a:05:81:79:dd:72:de:5a:b2:b1:53:e7:48:35:ed:
         22:62:d2:e7:0b:e4:3d:09:cc:5f:bf:fe:83:d6:c8:75:7c:67:
         b9:34:83:b6:33:48:25:4e:32:d1:70:c6:9d:b7:07:b3:fd:cd:
         86:02:21:3b:20:e6:e0:4f:65:00:4d:3f:68:e3:fe:4e:80:ef:
         7b:bd:d3:7c:ad:98:6a:76:a4:0a:06:69:ff:87:c6:52:ba:cc:
         ff:1f:04:cd:39:f8:7a:2f:c2:be:a8:a3:08:c5:4e:17:fc:60:
         4b:6c:a3:b6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAN979LK0x5fQ/szKDXZAXxSUvfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzOEEyQjVCNDlGMzcyNTk4RDAwREY0QjA0MEVCRUM2
QkREMTc2QzAeFw0yNjAyMDUxNzA2MjJaFw0yNzAyMDQxNzExMjJaMDMxMTAvBgNV
BAMTKEY0NjNBRTJBNzA5MjA3NTRCMTUxNDUxODcxNTc2OEVCQzgzQjA2MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4G0bgRjOLGqBViWrqZiTlk2dJ
Po1wBViKj7hKw+PP6TqpdHIU9ylDGUbwKL7Ndt4gXvx0APNRLgoGg/zDjFgoRBKi
8k+k99R6ONDiBRXxmarvpgC77YUskzskhpFyx1Cg6lDJjk1N1/Pk/kMwGkvifz3r
Azx5YDA9Yw+APQTwjYL4lRYMTxYSrF4rUW3gmFfxn87JG8qNpPYaJR/OOJyQqCZ9
Xv4WRd5jL8K9+IQE3hvzc0Pf+1XPREoWnb6kiBpdPsFenrnDL8tJYB6NoBy2+58U
rwyVV+Gic80vP80c0AvLyRTe3E/0sXMbhtstyl5rrKoJSp30kGDO6tFJMQClAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9GOuKnCSB1SxUUUYcVdo68g7BigwHwYDVR0j
BBgwFoAUbziitbSfNyWY0A30sEDr7GvdF2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2ZNRTZIaE1vS05HMzNBMmNldWhaS3I4VktEU2VEbkpWRzZRVUV0YThO
akgvMS82RjM4QTJCNUI0OUYzNzI1OThEMDBERjRCMDQwRUJFQzZCREQxNzZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzhBMkI1QjQ5RjM3MjU5
OEQwMERGNEIwNDBFQkVDNkJERDE3NkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNmTUU2SGhNb0tORzMzQTJjZXVoWktyOFZLRFNlRG5KVkc2UVVFdGE4TmpILzEv
MzEzODM2MmUzMjMzMzIyZTMxMzczNjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrosDANBgkqhkiG9w0BAQsFAAOCAQEATXUw
BionFd5cpWmlurdUBxORPE2MfNiacfGowa9HaxuNMA1NK1GK7VelMvDJ4gmkbmcC
sCGmjEhiKSN+L9a3+tejPtiez1CI5l7aUazSCeTfWArGnP7gMj2CG4hTFgxJnNgx
zIZn/UBVw3a5KY+GGc9gXdJ96Z7sNgqnF+flCpJgr1Ns9qGSt1uh6Ai7ky65H8Td
WgWBed1y3lqysVPnSDXtImLS5wvkPQnMX7/+g9bIdXxnuTSDtjNIJU4y0XDGnbcH
s/3NhgIhOyDm4E9lAE0/aOP+ToDve73TfK2YanakCgZp/4fGUrrM/x8EzTn4ei/C
vqijCMVOF/xgS2yjtg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:34:49 2026 by rpki-client