Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa
File:                     3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa (raw, json)
Hash identifier:          1z4/xMozbUx2CPAp5a1G9mTLfzpvBpA70xbCWwQm3IM=
Subject key identifier:   E9:FA:6C:D4:9C:D2:4A:E9:5F:91:19:03:AE:4C:89:E1:66:21:6C:E1
Certificate issuer:       /CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
Certificate serial:       628CA64B2CDC8A040568B5FBFAABF68E10F59836
Authority key identifier: 57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     265938
IP address blocks:        164.163.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl
                          rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 17:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8c:a6:4b:2c:dc:8a:04:05:68:b5:fb:fa:ab:f6:8e:10:f5:98:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=E9FA6CD49CD24AE95F911903AE4C89E166216CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:09:ef:3b:67:56:71:e7:4d:c4:3c:83:ef:
                    eb:4f:99:1c:76:6a:28:61:cf:16:04:f7:43:3d:c5:
                    aa:23:47:0c:46:22:b4:96:ad:b2:2a:71:b5:8c:f0:
                    12:84:96:78:6d:05:b2:98:3b:2c:ba:85:04:fe:c5:
                    24:91:1c:37:1b:13:e2:0e:12:95:b8:c8:0a:14:4d:
                    22:26:c8:7b:e0:37:5e:4e:27:0f:2c:3b:b5:89:8e:
                    ba:cf:3c:9e:96:cd:37:ac:43:11:56:57:0e:60:af:
                    00:00:b7:5d:9b:93:97:1d:a5:64:73:1b:a6:45:4b:
                    e1:e9:8b:00:c1:5f:2e:3b:4b:35:c6:63:01:b7:ba:
                    74:89:38:cc:e6:e4:d7:bf:25:de:08:eb:73:ec:d6:
                    3b:db:e0:ff:3e:39:54:29:4c:6f:83:0a:ab:36:45:
                    6f:c7:64:dd:05:cb:91:ea:1e:5e:24:61:2f:74:50:
                    7a:a7:97:45:5c:30:75:4f:c2:4e:6e:dc:9d:d6:6e:
                    c2:cf:d1:1f:fb:52:c3:e1:df:9e:f4:b8:0d:85:a5:
                    fc:28:b7:b8:47:a4:b9:73:94:91:82:30:0c:04:53:
                    05:9c:7b:b1:ba:1b:70:fc:89:a5:7f:fa:a8:72:b3:
                    3e:d4:73:50:ea:5c:39:48:50:58:d2:13:80:3a:5d:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:6C:D4:9C:D2:4A:E9:5F:91:19:03:AE:4C:89:E1:66:21:6C:E1
            X509v3 Authority Key Identifier:
                keyid:57:13:5F:33:D3:B8:CA:CE:38:71:4D:FB:9D:70:A5:8A:A9:C1:E7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57135F33D3B8CACE38714DFB9D70A58AA9C1E7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DGhgMYjSJiFCC3VDfTwCAdSkKepuy5Lw6tUBdsPRzGd/1/3136342e3136332e34342e302f32322d3232203d3e20323635393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:48:ac:70:89:14:70:4e:0a:ea:0e:8b:42:d1:86:4a:57:89:
         38:d9:de:0a:1b:a2:87:bb:91:c3:42:6e:48:51:18:5e:97:02:
         0f:aa:c9:85:ce:cb:21:30:4a:ee:4f:0d:7a:05:1d:0e:20:c8:
         4f:f8:69:be:6a:c2:2e:7a:ee:98:21:7d:13:78:31:41:6b:b4:
         14:98:6d:e8:7d:97:45:2a:9c:e7:31:48:e6:06:9c:91:38:0e:
         36:c1:2b:54:26:22:19:d0:93:bb:44:69:5c:3f:4e:bb:c8:64:
         1e:49:2f:43:76:e7:7c:f2:fb:ae:ec:ca:a5:b2:3f:99:1c:78:
         1e:c1:bf:7e:54:8e:17:1b:f1:8d:bf:96:07:4c:73:5b:76:bd:
         c5:fd:95:76:36:05:25:b7:b9:47:0e:ba:8b:7a:cf:90:f7:c9:
         82:54:6c:59:ae:5d:32:07:55:cc:ff:95:15:14:5f:f5:e0:0f:
         f8:ca:b8:e2:5b:a6:e1:ae:4c:14:3a:2f:57:37:73:82:b0:7a:
         a0:59:b3:15:bf:8f:0b:5a:48:ec:96:77:6e:0b:5f:62:be:53:
         af:f2:ba:58:91:37:3a:0a:29:8a:52:4b:f1:be:fb:da:a3:29:
         4d:00:bc:a7:20:50:bf:f9:1c:83:ec:cb:e3:5f:ff:f4:7b:57:
         fa:bb:ea:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYoymSyzcigQFaLX7+qv2jhD1mDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcxMzVGMzNEM0I4Q0FDRTM4NzE0REZCOUQ3MEE1OEFB
OUMxRTdCMzAeFw0yNjAyMDQxOTU1MDFaFw0yNzAyMDMyMDAwMDFaMDMxMTAvBgNV
BAMTKEU5RkE2Q0Q0OUNEMjRBRTk1RjkxMTkwM0FFNEM4OUUxNjYyMTZDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQywnvO2dWcedNxDyD7+tPmRx2
aihhzxYE90M9xaojRwxGIrSWrbIqcbWM8BKElnhtBbKYOyy6hQT+xSSRHDcbE+IO
EpW4yAoUTSImyHvgN15OJw8sO7WJjrrPPJ6WzTesQxFWVw5grwAAt12bk5cdpWRz
G6ZFS+HpiwDBXy47SzXGYwG3unSJOMzm5Ne/Jd4I63Ps1jvb4P8+OVQpTG+DCqs2
RW/HZN0Fy5HqHl4kYS90UHqnl0VcMHVPwk5u3J3WbsLP0R/7UsPh3570uA2Fpfwo
t7hHpLlzlJGCMAwEUwWce7G6G3D8iaV/+qhysz7Uc1DqXDlIUFjSE4A6XfLXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6fps1JzSSulfkRkDrkyJ4WYhbOEwHwYDVR0j
BBgwFoAUVxNfM9O4ys44cU37nXCliqnB57MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURHaGdNWWpTSmlGQ0MzVkRmVHdDQWRTa0tlcHV5NUx3NnRVQmRzUFJ6
R2QvMS81NzEzNUYzM0QzQjhDQUNFMzg3MTRERkI5RDcwQTU4QUE5QzFFN0IzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MTM1RjMzRDNCOENBQ0Uz
ODcxNERGQjlENzBBNThBQTlDMUU3QjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVER2hnTVlqU0ppRkNDM1ZEZlR3Q0FkU2tLZXB1eTVMdzZ0VUJkc1BSekdkLzEv
MzEzNjM0MmUzMTM2MzMyZTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzOTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKkoywwDQYJKoZIhvcNAQELBQADggEBAM1IrHCJ
FHBOCuoOi0LRhkpXiTjZ3gobooe7kcNCbkhRGF6XAg+qyYXOyyEwSu5PDXoFHQ4g
yE/4ab5qwi567pghfRN4MUFrtBSYbeh9l0UqnOcxSOYGnJE4DjbBK1QmIhnQk7tE
aVw/TrvIZB5JL0N253zy+67syqWyP5kceB7Bv35Ujhcb8Y2/lgdMc1t2vcX9lXY2
BSW3uUcOuot6z5D3yYJUbFmuXTIHVcz/lRUUX/XgD/jKuOJbpuGuTBQ6L1c3c4Kw
eqBZsxW/jwtaSOyWd24LX2K+U6/yuliRNzoKKYpSS/G++9qjKU0AvKcgUL/5HIPs
y+Nf//R7V/q76pg=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:52:36 2026 by rpki-client