Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa
File:                     3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          pfFsHlVXNkZIAKUo1DACDon/IiPyXHKzn3WJX1uQliM=
Subject key identifier:   BF:B4:F9:07:21:02:D0:FC:5D:EB:CC:6E:DD:F3:F1:82:64:AF:2C:4F
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       5D4AA8346F7DC46A34D921727F882671F98C7897
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     266448
IP address blocks:        170.239.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4a:a8:34:6f:7d:c4:6a:34:d9:21:72:7f:88:26:71:f9:8c:78:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=BFB4F9072102D0FC5DEBCC6EDDF3F18264AF2C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:23:67:21:9d:e5:82:f0:f5:8e:2f:f0:39:
                    68:0d:97:9e:ba:20:b0:c9:0a:25:87:1a:49:8e:ef:
                    1f:83:3f:18:7a:19:50:20:c9:11:78:b0:76:70:d7:
                    8e:74:71:dd:48:5a:0e:bf:a5:d2:ce:e2:ce:c9:df:
                    c0:6e:54:1d:21:f1:87:7f:e8:58:2a:bc:eb:0a:62:
                    1f:df:0a:6b:b8:c2:23:8f:b1:86:f4:c3:cd:4a:0e:
                    79:f9:cd:48:98:95:7d:f9:50:ca:74:56:e1:a7:fd:
                    33:37:f7:96:7d:3d:78:ab:87:c4:8b:ed:c7:56:34:
                    14:f5:d7:62:91:6b:4b:12:f3:a7:06:6e:97:85:06:
                    be:a9:19:a1:c2:1b:d3:89:4e:c3:50:eb:82:1a:b0:
                    c8:a4:c8:af:93:84:9d:5d:6b:04:32:ca:39:ea:94:
                    74:0e:61:d2:85:2d:c1:b7:34:f5:b3:e2:50:52:35:
                    8f:30:75:e4:e3:3a:7d:8a:a1:db:04:c5:b7:a2:80:
                    64:11:e5:27:48:dd:ee:fc:1d:3e:6c:0c:54:f3:c6:
                    22:08:0a:0b:6c:55:73:e1:fb:a3:e1:89:be:d5:42:
                    7a:d7:64:dd:91:ba:04:c0:eb:28:6b:e9:48:59:27:
                    93:96:e1:a0:07:50:79:dd:2c:f9:8c:68:01:60:e1:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B4:F9:07:21:02:D0:FC:5D:EB:CC:6E:DD:F3:F1:82:64:AF:2C:4F
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3131312e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d6:aa:6e:ee:27:ee:1f:f1:63:a1:e2:b3:e0:d6:d2:04:06:
         fa:9a:10:cf:01:e5:89:3c:8b:9c:21:95:56:fd:23:a1:a2:48:
         c6:e9:21:fd:37:50:15:ad:47:96:ab:c1:79:fd:0b:bb:f8:0a:
         a5:2c:95:01:a1:84:d1:5b:16:06:bc:28:ec:44:e9:25:3f:61:
         2f:13:46:64:5d:09:6e:ff:23:1b:8a:9e:f2:c3:25:f0:c9:49:
         6a:3a:05:cb:eb:0b:d4:99:70:ef:ea:2e:60:2b:59:3d:01:82:
         5f:cf:8f:ee:3e:b2:69:86:83:11:c1:2b:0d:9e:01:97:e4:dc:
         a6:31:81:4b:2f:53:f2:eb:d3:d2:21:12:be:ea:2f:23:e3:55:
         6b:71:92:e4:25:66:99:6a:6d:65:cb:d3:e8:26:c4:ce:19:54:
         31:6b:0a:54:b6:34:c4:ed:e1:ea:6b:89:33:e2:87:63:c9:c5:
         e9:4e:e4:b3:a3:8a:37:93:b1:d1:b1:e1:5b:a9:fc:04:96:8d:
         e8:46:50:17:8e:18:4e:10:9a:71:93:d0:7a:35:df:84:6e:14:
         db:55:70:8b:23:3d:5b:94:b2:35:7e:b3:72:ea:48:04:f9:4a:
         f7:4a:dc:e4:c1:3e:24:4e:fb:de:42:69:7f:0f:ca:ce:6f:e8:
         ce:ae:ea:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXUqoNG99xGo02SFyf4gmcfmMeJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjczNzgyQjk5Nzg3OEE5NDE1RjEzMjIxNEU4RDA5Q0ZB
OTcxNTcyRjAeFw0yNjAyMDQxOTU1MDdaFw0yNzAyMDMyMDAwMDdaMDMxMTAvBgNV
BAMTKEJGQjRGOTA3MjEwMkQwRkM1REVCQ0M2RURERjNGMTgyNjRBRjJDNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nyNnIZ3lgvD1ji/wOWgNl566
ILDJCiWHGkmO7x+DPxh6GVAgyRF4sHZw1450cd1IWg6/pdLO4s7J38BuVB0h8Yd/
6FgqvOsKYh/fCmu4wiOPsYb0w81KDnn5zUiYlX35UMp0VuGn/TM395Z9PXirh8SL
7cdWNBT112KRa0sS86cGbpeFBr6pGaHCG9OJTsNQ64IasMikyK+ThJ1dawQyyjnq
lHQOYdKFLcG3NPWz4lBSNY8wdeTjOn2KodsExbeigGQR5SdI3e78HT5sDFTzxiII
CgtsVXPh+6Phib7VQnrXZN2RugTA6yhr6UhZJ5OW4aAHUHndLPmMaAFg4RjlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUv7T5ByEC0Pxd68xu3fPxgmSvLE8wHwYDVR0j
BBgwFoAUJzeCuZeHipQV8TIhTo0Jz6lxVy8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDF6b2t5WFZmQWNoaGlNR3VjQ3o5OE1YaXE2Tjk5MVFqWWJWOG9HemFp
WkUvMS8yNzM3ODJCOTk3ODc4QTk0MTVGMTMyMjE0RThEMDlDRkE5NzE1NzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3Mzc4MkI5OTc4NzhBOTQx
NUYxMzIyMTRFOEQwOUNGQTk3MTU3MkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQxem9reVhWZkFjaGhpTUd1Y0N6OThNWGlxNk45OTFRalliVjhvR3phaVpFLzEv
MzEzNzMwMmUzMjMzMzkyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrvbzANBgkqhkiG9w0BAQsFAAOCAQEAT9aq
bu4n7h/xY6His+DW0gQG+poQzwHliTyLnCGVVv0joaJIxukh/TdQFa1HlqvBef0L
u/gKpSyVAaGE0VsWBrwo7ETpJT9hLxNGZF0Jbv8jG4qe8sMl8MlJajoFy+sL1Jlw
7+ouYCtZPQGCX8+P7j6yaYaDEcErDZ4Bl+TcpjGBSy9T8uvT0iESvuovI+NVa3GS
5CVmmWptZcvT6CbEzhlUMWsKVLY0xO3h6muJM+KHY8nF6U7ks6OKN5Ox0bHhW6n8
BJaN6EZQF44YThCacZPQejXfhG4U21VwiyM9W5SyNX6zcupIBPlK90rc5ME+JE77
3kJpfw/Kzm/ozq7qYA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:11 2026 by rpki-client