Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa
File:                     3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (raw, json)
Hash identifier:          63YHpFvuB9Pq7Fw0lqcRisSjgm2HdqMAI+lF9iiVlHk=
Subject key identifier:   C3:30:74:DC:EE:F3:4E:49:39:04:94:0F:93:C9:16:31:69:73:2E:CB
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       6ECD0E419EE2AEA742323B5DDEF4C7589AD2485E
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa
Signing time:             Thu 05 Feb 2026 09:50:48 +0000
ROA not before:           Thu 05 Feb 2026 09:45:48 +0000
ROA not after:            Thu 04 Feb 2027 09:50:48 +0000
asID:                     61834
IP address blocks:        201.150.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
                          rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:cd:0e:41:9e:e2:ae:a7:42:32:3b:5d:de:f4:c7:58:9a:d2:48:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Feb  5 09:45:48 2026 GMT
            Not After : Feb  4 09:50:48 2027 GMT
        Subject: CN=C33074DCEEF34E493904940F93C9163169732ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:31:2a:bb:1e:65:02:0f:5c:0b:8b:2e:9b:
                    3f:16:e7:13:1c:5f:2d:b6:42:02:8b:7b:8e:e8:09:
                    59:9f:5a:b1:dd:13:fc:8b:e9:25:a4:14:e4:8c:b9:
                    1d:65:60:c2:f3:72:22:d3:7a:8f:b6:d3:8e:f7:cb:
                    8d:9b:07:0e:6a:6d:38:ac:98:7f:c0:49:b5:ca:56:
                    70:9f:2d:7c:1d:57:f4:64:4e:c1:88:a5:70:93:fb:
                    d9:76:84:ad:10:b6:8f:84:cc:4d:cf:e3:8d:90:78:
                    ce:61:fb:78:22:d9:35:30:20:90:eb:bf:f3:db:55:
                    69:af:e7:9b:15:f0:07:b0:a1:fb:c0:87:c3:f9:81:
                    29:f7:c8:fb:5c:50:46:4c:ec:d0:b3:44:f4:69:98:
                    e3:4f:67:44:61:8d:7a:98:ae:e8:44:00:31:3f:92:
                    67:68:ae:b0:d5:2e:bf:29:c2:8a:91:ff:7c:9f:47:
                    9e:50:16:a6:8f:8c:11:bb:02:42:d0:de:1a:07:92:
                    ab:97:51:92:79:8f:76:12:5b:3f:a0:88:2f:3f:5f:
                    72:e3:8a:89:bd:ae:af:64:58:36:d6:42:40:11:5a:
                    04:57:75:d3:17:f7:fb:f2:af:33:94:9c:65:38:53:
                    d1:0a:68:4e:2a:2d:e7:54:c2:fc:35:26:16:14:38:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:74:DC:EE:F3:4E:49:39:04:94:0F:93:C9:16:31:69:73:2E:CB
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:7f:74:d1:e2:31:f9:a2:8c:f1:a1:a7:ae:2c:34:2c:e6:
         5e:d2:8f:ba:64:bc:c0:2c:f0:9a:8d:e8:4b:1c:d2:7e:ff:d1:
         4e:1f:6c:aa:db:a4:24:88:d5:5b:97:06:ad:42:66:1b:ab:f8:
         54:8b:0b:c5:df:07:53:58:8e:90:c6:99:b9:92:c9:fc:7a:28:
         ba:d5:3f:08:db:54:87:ac:07:cc:77:24:ea:4f:df:98:8e:c5:
         b2:54:35:4e:49:6c:0a:27:80:c1:4d:3d:1c:05:67:38:22:ba:
         54:36:16:9d:f1:df:6a:15:99:46:03:ee:98:77:01:b2:ff:24:
         3f:7f:5d:b2:44:01:cd:82:5f:37:2e:01:eb:26:44:78:02:8e:
         a1:49:05:f3:9d:9c:64:ba:41:11:f5:9c:29:71:74:3e:95:6d:
         73:4c:c8:db:86:63:26:26:8d:13:e1:42:a6:03:1f:4a:59:5d:
         fd:70:89:98:b0:b5:c4:68:7c:a2:9e:1b:3f:26:39:f0:dd:6f:
         31:2b:ef:42:9b:a9:62:7b:e2:35:86:84:45:c6:53:18:88:3f:
         95:66:8d:4c:cd:74:cf:62:1d:46:a1:5c:5c:af:f6:d9:f0:5f:
         6e:38:25:64:32:3c:6d:58:ed:45:97:f8:0d:3d:7c:78:95:a4:
         a1:69:dc:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbs0OQZ7irqdCMjtd3vTHWJrSSF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC
OTA4NDU0QTAeFw0yNjAyMDUwOTQ1NDhaFw0yNzAyMDQwOTUwNDhaMDMxMTAvBgNV
BAMTKEMzMzA3NERDRUVGMzRFNDkzOTA0OTQwRjkzQzkxNjMxNjk3MzJFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr2TEqux5lAg9cC4sumz8W5xMc
Xy22QgKLe47oCVmfWrHdE/yL6SWkFOSMuR1lYMLzciLTeo+20473y42bBw5qbTis
mH/ASbXKVnCfLXwdV/RkTsGIpXCT+9l2hK0Qto+EzE3P442QeM5h+3gi2TUwIJDr
v/PbVWmv55sV8AewofvAh8P5gSn3yPtcUEZM7NCzRPRpmONPZ0RhjXqYruhEADE/
kmdorrDVLr8pwoqR/3yfR55QFqaPjBG7AkLQ3hoHkquXUZJ5j3YSWz+giC8/X3Lj
iom9rq9kWDbWQkARWgRXddMX9/vyrzOUnGU4U9EKaE4qLedUwvw1JhYUOLeJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwzB03O7zTkk5BJQPk8kWMWlzLsswHwYDVR0j
BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq
b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy
NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRwSEIxTlduYmVXQWhCS0tVb2RSa3AxVXoxWnI1UFQyQUpVeGttQTMxam9rLzEv
MzIzMDMxMmUzMTM1MzAyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlpgwDQYJKoZIhvcNAQELBQADggEBAGCNf3TR
4jH5oozxoaeuLDQs5l7Sj7pkvMAs8JqN6Esc0n7/0U4fbKrbpCSI1VuXBq1CZhur
+FSLC8XfB1NYjpDGmbmSyfx6KLrVPwjbVIesB8x3JOpP35iOxbJUNU5JbAongMFN
PRwFZzgiulQ2Fp3x32oVmUYD7ph3AbL/JD9/XbJEAc2CXzcuAesmRHgCjqFJBfOd
nGS6QRH1nClxdD6VbXNMyNuGYyYmjRPhQqYDH0pZXf1wiZiwtcRofKKeGz8mOfDd
bzEr70KbqWJ74jWGhEXGUxiIP5VmjUzNdM9iHUahXFyv9tnwX244JWQyPG1Y7UWX
+A09fHiVpKFp3Ko=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:14:01 2026 by rpki-client