Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          mpO3FC2So6bV32r9mYosuVjvChsZ/+cTKtCiB/Xzy0c=
Subject key identifier:   DF:0B:E2:EC:D7:F6:2D:37:28:2E:D4:69:0C:95:DE:F9:24:38:8E:56
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       357F6426B2A36B9DE69F66C56756A44CAEB56D02
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa
Signing time:             Wed 04 Feb 2026 20:00:24 +0000
ROA not before:           Wed 04 Feb 2026 19:55:24 +0000
ROA not after:            Wed 03 Feb 2027 20:00:24 +0000
asID:                     271326
IP address blocks:        190.123.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7f:64:26:b2:a3:6b:9d:e6:9f:66:c5:67:56:a4:4c:ae:b5:6d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Feb  4 19:55:24 2026 GMT
            Not After : Feb  3 20:00:24 2027 GMT
        Subject: CN=DF0BE2ECD7F62D37282ED4690C95DEF924388E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:2e:ba:6e:c3:22:0a:32:4f:1d:b7:88:62:
                    a5:c6:53:0d:3a:0f:33:e5:c5:2f:58:88:81:28:05:
                    85:84:d3:c7:bf:33:f0:0b:04:35:9f:f1:9e:2e:9b:
                    2e:a4:d7:49:e6:92:cc:b5:a7:cd:9e:27:96:b6:1a:
                    ea:65:25:2d:06:9d:7b:0d:44:f9:0b:57:77:93:67:
                    1b:08:0c:12:c6:30:5e:88:f9:bd:d1:08:f8:2b:bf:
                    ce:56:88:47:bd:6a:dd:dd:7a:cc:20:e7:c7:d9:e3:
                    0f:cd:a2:97:e4:b6:99:10:a8:f2:ee:99:01:08:ef:
                    38:6d:37:4d:1f:f2:6c:a7:3a:84:6e:c8:75:69:8a:
                    76:12:17:bf:41:8a:a0:99:6e:65:a9:49:17:fd:e1:
                    3c:d9:24:eb:72:2c:54:ce:a2:48:ac:47:bc:5a:d9:
                    b8:61:56:79:ac:ab:f8:3e:45:ec:c8:fe:41:dd:23:
                    b8:30:a5:d4:05:40:79:e5:01:6a:cf:c4:8b:99:63:
                    bf:d7:8a:c4:91:6a:8b:d1:be:af:28:86:f8:c7:37:
                    0a:38:1a:6b:e5:a4:64:e7:ba:fd:83:a8:c7:c5:d1:
                    c4:e2:8f:36:0c:c4:81:95:67:03:db:bf:98:37:c1:
                    bb:5f:65:fa:4d:33:0c:fd:bc:ea:4b:90:fb:fe:5c:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:E2:EC:D7:F6:2D:37:28:2E:D4:69:0C:95:DE:F9:24:38:8E:56
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37342e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:eb:a3:57:30:34:d6:4c:37:ff:84:c6:9d:8a:d3:4a:77:38:
         e5:16:15:29:49:09:d6:f9:e2:fd:27:0a:83:aa:d1:85:c2:bf:
         46:d8:70:52:d9:6a:86:26:a8:c2:5c:78:13:68:44:31:f4:e0:
         08:36:b0:41:71:1f:df:1a:16:30:f8:83:91:78:37:bd:52:8a:
         e7:90:95:e9:6d:bb:5e:2a:32:45:44:e5:26:3e:f4:3a:50:ac:
         29:8b:12:0e:e8:f2:fc:1f:38:94:5c:ff:25:07:c2:75:66:24:
         40:c6:6f:e6:13:b0:de:3b:1b:93:61:95:6b:30:9e:26:c0:1d:
         9d:83:f8:71:04:84:db:de:28:e3:a7:f3:80:7b:43:3c:ed:03:
         6a:45:8b:54:b4:f8:fb:fa:dd:f4:bf:c0:08:57:ce:2a:93:64:
         e8:ae:04:18:56:4a:f6:be:b0:43:02:91:a3:58:30:ca:58:23:
         4f:0a:85:2e:2d:a8:df:30:de:d4:78:5c:97:7a:39:22:a4:3b:
         f8:f9:83:be:1e:d7:64:29:f5:31:3e:4a:86:4e:04:78:f4:fd:
         a1:84:6a:11:b3:98:25:8c:0a:a4:79:22:bb:1c:6e:b0:85:53:
         38:10:92:63:9b:88:f0:af:c0:28:e2:05:5c:2a:99:64:3b:d4:
         08:44:4b:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNX9kJrKja53mn2bFZ1akTK61bQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRDNzVFNERDMTdFQjY5RTNDNUQ3RjI0NzdBNjM2NkM0
NDc2QUNENTAeFw0yNjAyMDQxOTU1MjRaFw0yNzAyMDMyMDAwMjRaMDMxMTAvBgNV
BAMTKERGMEJFMkVDRDdGNjJEMzcyODJFRDQ2OTBDOTVERUY5MjQzODhFNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84y66bsMiCjJPHbeIYqXGUw06
DzPlxS9YiIEoBYWE08e/M/ALBDWf8Z4umy6k10nmksy1p82eJ5a2GuplJS0GnXsN
RPkLV3eTZxsIDBLGMF6I+b3RCPgrv85WiEe9at3deswg58fZ4w/NopfktpkQqPLu
mQEI7zhtN00f8mynOoRuyHVpinYSF79BiqCZbmWpSRf94TzZJOtyLFTOokisR7xa
2bhhVnmsq/g+RezI/kHdI7gwpdQFQHnlAWrPxIuZY7/XisSRaovRvq8ohvjHNwo4
GmvlpGTnuv2DqMfF0cTijzYMxIGVZwPbv5g3wbtfZfpNMwz9vOpLkPv+XDifAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3wvi7Nf2LTcoLtRpDJXe+SQ4jlYwHwYDVR0j
BBgwFoAU5MdeTcF+tp48XX8kd6Y2bER2rNUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhFZnA4R1pXUXFoVHh5Z3JSb3RXQVl6MXhDR2p5MnNmUmV2cTFiOTV4
dm8vMS9FNEM3NUU0REMxN0VCNjlFM0M1RDdGMjQ3N0E2MzY2QzQ0NzZBQ0Q1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0Qzc1RTREQzE3RUI2OUUz
QzVEN0YyNDc3QTYzNjZDNDQ3NkFDRDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIRWZwOEdaV1FxaFR4eWdyUm90V0FZejF4Q0dqeTJzZlJldnExYjk1eHZvLzEv
MzEzOTMwMmUzMTMyMzMyZTM3MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+e0owDQYJKoZIhvcNAQELBQADggEBADPro1cw
NNZMN/+Exp2K00p3OOUWFSlJCdb54v0nCoOq0YXCv0bYcFLZaoYmqMJceBNoRDH0
4Ag2sEFxH98aFjD4g5F4N71SiueQleltu14qMkVE5SY+9DpQrCmLEg7o8vwfOJRc
/yUHwnVmJEDGb+YTsN47G5NhlWswnibAHZ2D+HEEhNveKOOn84B7QzztA2pFi1S0
+Pv63fS/wAhXziqTZOiuBBhWSva+sEMCkaNYMMpYI08KhS4tqN8w3tR4XJd6OSKk
O/j5g74e12Qp9TE+SoZOBHj0/aGEahGzmCWMCqR5IrscbrCFUzgQkmObiPCvwCji
BVwqmWQ71AhES5k=
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:19 2026 by rpki-client