Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa
File:                     3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          RUF2U/TyU/qQ+OyIpub/5wQwJZgaihDcYeU5vaI8e70=
Subject key identifier:   F5:42:2F:F1:3A:96:22:13:1E:03:2B:91:13:AE:D0:D4:89:E1:7B:A4
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       014DFA4CFD2515BDDCE100ECCC78F0A773B2FD3A
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     262903
IP address blocks:        186.251.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4d:fa:4c:fd:25:15:bd:dc:e1:00:ec:cc:78:f0:a7:73:b2:fd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:0d:4c:3b:dc:a1:85:0d:fc:e8:fb:09:ed:
                    0b:8f:ed:ed:0c:7b:9f:da:be:16:34:f0:8a:d9:54:
                    9e:35:cc:f2:20:9f:03:6a:39:0e:f3:30:09:80:03:
                    5c:37:45:be:8a:9d:55:2d:bc:b2:89:46:00:d7:9a:
                    0b:a1:e9:91:7a:e7:13:5b:bb:60:e7:41:48:cf:5c:
                    55:c4:72:0b:59:fb:9f:d1:a7:5b:9e:13:f2:56:ba:
                    80:64:3e:6c:f3:12:56:52:b1:a1:51:09:3d:b7:4d:
                    a8:89:0e:00:9f:49:29:06:26:9c:e8:20:54:1c:4b:
                    4f:85:fc:b9:5a:a5:d6:49:70:b8:a1:ba:d3:e8:ba:
                    2c:f3:11:95:34:93:ad:89:f0:4b:0f:c6:83:ff:0b:
                    63:d8:04:7d:9a:53:d7:59:50:11:5f:fe:94:2b:29:
                    f4:36:c1:f4:c6:56:c4:82:4f:a0:64:ce:20:05:55:
                    86:68:dc:27:e8:d7:37:23:1a:a7:33:08:fd:24:24:
                    05:23:8d:5f:ee:d1:05:23:ed:fe:fb:04:1d:b5:51:
                    38:47:8b:6e:7b:f6:b9:f2:cc:c1:fa:9c:01:fa:1c:
                    92:50:01:a9:11:0c:a2:61:1c:cd:d4:bf:fd:cc:de:
                    26:16:f6:d1:f5:f4:27:67:1c:9c:de:cb:bc:64:25:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:2F:F1:3A:96:22:13:1E:03:2B:91:13:AE:D0:D4:89:E1:7B:A4
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3138362e3235312e35362e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:dc:fb:0d:45:34:e9:8f:92:80:6e:5c:d6:d2:ba:c9:ab:16:
         4c:ca:fc:3e:20:b5:87:9c:9e:22:d7:09:c6:58:58:e7:4b:24:
         b3:e6:71:fc:cd:d1:de:23:09:5c:93:de:09:53:ef:3b:7e:02:
         47:a4:af:36:0d:3e:e7:60:e3:7a:7e:98:76:c1:d1:27:d7:d5:
         18:dd:92:f8:20:57:85:f6:dd:b2:e6:f9:4c:bf:ba:43:8c:33:
         49:15:26:11:e3:11:9f:88:94:9d:29:bd:97:db:5d:96:80:bc:
         e7:29:6e:a7:31:85:7e:5b:7f:bc:54:ed:c2:52:fe:47:a9:f3:
         a9:58:2e:f6:9b:50:cf:bf:5c:c9:38:e4:e0:a4:9f:b4:2c:3d:
         3a:38:77:f9:58:90:cd:fb:78:f9:26:a2:32:2b:64:6f:5f:52:
         85:9b:74:1c:63:27:bd:ea:e6:58:2e:f1:c6:ef:74:24:dd:b0:
         42:89:dd:d2:f9:a0:0e:df:12:7a:2f:d0:ee:ef:0b:c4:7a:c1:
         db:50:20:d1:1c:60:45:2a:2c:b1:f5:35:19:2a:ad:99:32:63:
         de:61:9c:2e:ca:30:76:02:68:22:2c:33:7e:b0:e7:78:52:00:
         f2:e4:d2:05:9f:47:c0:a8:81:4f:d7:0c:a9:8a:54:ef:4c:29:
         e1:7b:48:de
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAU36TP0lFb3c4QDszHjwp3Oy/TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNzBEQzZFQTQ2QUE0RDJFQTI1NjYzRDI3QkNEMEM3
QjdCM0Q2MzAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY5MDBENEMzQkRDQTE4NTBE
RkNFOEZCMDlFRDBCOEZFREVEMEM3QjlGREFCRTE2MzRGMDhBRDk1NDlFMzVDQ0Yy
MjA5RjAzNkEzOTBFRjMzMDA5ODAwMzVDMzc0NUJFOEE5RDU1MkRCQ0IyODk0NjAw
RDc5QTBCQTFFOTkxN0FFNzEzNUJCQjYwRTc0MTQ4Q0Y1QzU1QzQ3MjBCNTlGQjlG
RDFBNzVCOUUxM0YyNTZCQTgwNjQzRTZDRjMxMjU2NTJCMUExNTEwOTNEQjc0REE4
ODkwRTAwOUY0OTI5MDYyNjlDRTgyMDU0MUM0QjRGODVGQ0I5NUFBNUQ2NDk3MEI4
QTFCQUQzRThCQTJDRjMxMTk1MzQ5M0FEODlGMDRCMEZDNjgzRkYwQjYzRDgwNDdE
OUE1M0Q3NTk1MDExNUZGRTk0MkIyOUY0MzZDMUY0QzY1NkM0ODI0RkEwNjRDRTIw
MDU1NTg2NjhEQzI3RThENzM3MjMxQUE3MzMwOEZEMjQyNDA1MjM4RDVGRUVEMTA1
MjNFREZFRkIwNDFEQjU1MTM4NDc4QjZFN0JGNkI5RjJDQ0MxRkE5QzAxRkExQzky
NTAwMUE5MTEwQ0EyNjExQ0NERDRCRkZEQ0NERTI2MTZGNkQxRjVGNDI3NjcxQzlD
REVDQkJDNjQyNUEwNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA35ANTDvcoYUN/Oj7Ce0Lj+3tDHuf2r4WNPCK2VSeNczyIJ8DajkO
8zAJgANcN0W+ip1VLbyyiUYA15oLoemReucTW7tg50FIz1xVxHILWfuf0adbnhPy
VrqAZD5s8xJWUrGhUQk9t02oiQ4An0kpBiac6CBUHEtPhfy5WqXWSXC4obrT6Los
8xGVNJOtifBLD8aD/wtj2AR9mlPXWVARX/6UKyn0NsH0xlbEgk+gZM4gBVWGaNwn
6Nc3IxqnMwj9JCQFI41f7tEFI+3++wQdtVE4R4tue/a58szB+pwB+hySUAGpEQyi
YRzN1L/9zN4mFvbR9fQnZxyc3su8ZCWgeQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPVCL/E6liITHgMrkROu0NSJ4XukMB8GA1UdIwQYMBaAFCG3DcbqRqpNLqJWY9J7
zQx7ez1jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVM
Q29aNHlpaWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzEvMjFCNzBEQzZFQTQ2QUE0
RDJFQTI1NjYzRDI3QkNEMEM3QjdCM0Q2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMUI3MERDNkVBNDZBQTREMkVBMjU2NjNEMjdCQ0QwQzdCN0Iz
RDYzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80OWFQdkFIeTlvOUo1TENvWjR5
aWlqUDY1TTVTS0ZGemZlVHdod0RETmU0di8xLzMxMzgzNjJlMzIzNTMxMmUzNTM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
uvs4MA0GCSqGSIb3DQEBCwUAA4IBAQC43PsNRTTpj5KAblzW0rrJqxZMyvw+ILWH
nJ4i1wnGWFjnSySz5nH8zdHeIwlck94JU+87fgJHpK82DT7nYON6fph2wdEn19UY
3ZL4IFeF9t2y5vlMv7pDjDNJFSYR4xGfiJSdKb2X212WgLznKW6nMYV+W3+8VO3C
Uv5HqfOpWC72m1DPv1zJOOTgpJ+0LD06OHf5WJDN+3j5JqIyK2RvX1KFm3QcYye9
6uZYLvHG73Qk3bBCid3S+aAO3xJ6L9Du7wvEesHbUCDRHGBFKiyx9TUZKq2ZMmPe
YZwuyjB2AmgiLDN+sOd4UgDy5NIFn0fAqIFP1wypilTvTCnhe0je
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:29 2026 by rpki-client