Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35372e302f32342d3234203d3e20323731353332.roa
File:                     3138312e3232342e35372e302f32342d3234203d3e20323731353332.roa (raw, json)
Hash identifier:          lbEmcJ718fe2EuQ7x3FufxT6LRGP+DVC5CCYiW/IHZA=
Subject key identifier:   AA:65:B4:45:28:B3:CB:A8:4B:CF:33:B4:54:62:77:CC:4A:5B:1C:2B
Certificate issuer:       /CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
Certificate serial:       32F322847A85EE0A1722C07AE78AC1D760FE3C7D
Authority key identifier: 69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35372e302f32342d3234203d3e20323731353332.roa
Signing time:             Thu 05 Feb 2026 04:23:04 +0000
ROA not before:           Thu 05 Feb 2026 04:18:04 +0000
ROA not after:            Thu 04 Feb 2027 04:23:04 +0000
asID:                     271532
IP address blocks:        181.224.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl
                          rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f3:22:84:7a:85:ee:0a:17:22:c0:7a:e7:8a:c1:d7:60:fe:3c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982D51872DC91BEC06EE371CAE70C62F710F7BA
        Validity
            Not Before: Feb  5 04:18:04 2026 GMT
            Not After : Feb  4 04:23:04 2027 GMT
        Subject: CN=AA65B44528B3CBA84BCF33B4546277CC4A5B1C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:56:df:cd:f9:50:e5:16:10:6d:7d:5f:52:
                    9d:00:5e:93:e4:83:82:67:ee:d3:07:6a:9d:8d:f5:
                    2b:cc:5e:6f:ef:4b:aa:e2:3c:c7:ca:75:67:9b:14:
                    98:57:a6:ad:07:7b:d6:1f:74:99:9f:0f:da:d8:97:
                    17:8d:46:72:58:19:a5:cc:0c:c4:c8:27:7f:6a:59:
                    f5:ba:d9:17:bd:a6:35:c5:83:32:74:61:c1:80:82:
                    57:1f:5b:41:9d:bc:7e:0f:32:af:50:c0:6d:85:7a:
                    50:33:4d:fa:7c:5d:55:8e:73:6f:36:67:5a:95:4a:
                    ac:07:34:26:c2:26:9e:f1:2b:3d:99:fc:98:ee:b2:
                    98:07:1c:4c:2e:c3:ad:4d:55:93:88:00:59:de:3b:
                    65:cb:15:b9:2e:09:26:e4:68:a4:4b:27:68:76:1d:
                    14:4a:75:a6:59:9c:23:49:41:87:56:69:54:9e:8f:
                    8b:8a:35:fc:cf:94:9d:ff:0b:f7:6c:22:c1:49:1c:
                    2c:72:ca:4f:66:f3:ef:7d:62:4d:3f:d3:e4:db:6a:
                    c5:fe:3c:35:4e:85:28:9e:95:20:57:35:7a:6e:7d:
                    46:f9:04:82:26:9b:94:de:09:f2:29:7b:a1:49:40:
                    a2:1b:40:5f:c5:c7:1f:8a:82:74:e5:ed:9a:b8:d4:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:65:B4:45:28:B3:CB:A8:4B:CF:33:B4:54:62:77:CC:4A:5B:1C:2B
            X509v3 Authority Key Identifier:
                keyid:69:82:D5:18:72:DC:91:BE:C0:6E:E3:71:CA:E7:0C:62:F7:10:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6982D51872DC91BEC06EE371CAE70C62F710F7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LRbqsXBEPv3bCu2zA7c4V3w1gzUTQGXHErC2hZ9asY/1/3138312e3232342e35372e302f32342d3234203d3e20323731353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:12:66:2c:f7:60:fa:dc:f8:4a:42:8b:b5:02:65:11:4a:25:
         dc:68:4a:4a:10:7b:2d:34:e7:40:5f:75:eb:94:a5:1e:32:ca:
         0f:6e:18:4e:7a:39:ca:1d:59:ca:9f:58:d0:92:b1:96:5a:be:
         77:74:92:48:b8:97:5a:b6:3b:0d:ad:62:98:4e:62:1c:e3:70:
         46:ba:05:7e:3c:98:46:1e:75:6a:24:b6:ff:60:38:64:a3:39:
         b8:f7:74:8c:e8:fa:79:c8:84:b8:01:df:91:d8:8c:20:da:b0:
         b9:e9:03:06:e0:28:e3:aa:20:2c:a7:27:92:59:b0:7e:99:a3:
         e1:8d:a1:5a:53:f8:55:f0:86:4a:ad:ef:29:a7:cd:0b:6b:00:
         21:9f:fe:c4:d2:f0:e7:f4:48:61:c6:57:4e:12:14:7c:7f:c8:
         81:c3:91:82:0f:ec:af:d5:39:a0:e2:0a:37:44:57:67:39:96:
         76:e3:5f:55:ae:4d:d5:86:da:f1:62:e0:8f:e2:14:4a:f6:22:
         4e:39:f6:fc:ff:4d:08:cc:1e:c5:c6:f1:1d:dd:a2:aa:8f:2d:
         29:63:0d:12:96:47:0a:8d:3f:f2:d9:ca:a8:12:86:b1:e0:8e:
         3d:11:3a:8c:e2:f0:4e:7d:c5:2f:04:11:be:95:9b:ce:c7:50:
         c8:99:97:18
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUMvMihHqF7goXIsB654rB12D+PH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4MkQ1MTg3MkRDOTFCRUMwNkVFMzcxQ0FFNzBDNjJG
NzEwRjdCQTAeFw0yNjAyMDUwNDE4MDRaFw0yNzAyMDQwNDIzMDRaMDMxMTAvBgNV
BAMTKEFBNjVCNDQ1MjhCM0NCQTg0QkNGMzNCNDU0NjI3N0NDNEE1QjFDMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTlbfzflQ5RYQbX1fUp0AXpPk
g4Jn7tMHap2N9SvMXm/vS6riPMfKdWebFJhXpq0He9YfdJmfD9rYlxeNRnJYGaXM
DMTIJ39qWfW62Re9pjXFgzJ0YcGAglcfW0GdvH4PMq9QwG2FelAzTfp8XVWOc282
Z1qVSqwHNCbCJp7xKz2Z/JjuspgHHEwuw61NVZOIAFneO2XLFbkuCSbkaKRLJ2h2
HRRKdaZZnCNJQYdWaVSej4uKNfzPlJ3/C/dsIsFJHCxyyk9m8+99Yk0/0+TbasX+
PDVOhSielSBXNXpufUb5BIImm5TeCfIpe6FJQKIbQF/Fxx+KgnTl7Zq41B5hAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUqmW0RSizy6hLzzO0VGJ3zEpbHCswHwYDVR0j
BBgwFoAUaYLVGHLckb7AbuNxyucMYvcQ97owDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81TFJicXNYQkVQdjNiQ3UyekE3YzRWM3cxZ3pVVFFHWEhFckMyaFo5YXNZ
LzEvNjk4MkQ1MTg3MkRDOTFCRUMwNkVFMzcxQ0FFNzBDNjJGNzEwRjdCQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82OTgyRDUxODcyREM5MUJFQzA2
RUUzNzFDQUU3MEM2MkY3MTBGN0JBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
TFJicXNYQkVQdjNiQ3UyekE3YzRWM3cxZ3pVVFFHWEhFckMyaFo5YXNZLzEvMzEz
ODMxMmUzMjMyMzQyZTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
NTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC14DkwDQYJKoZIhvcNAQELBQADggEBABQSZiz3YPrc
+EpCi7UCZRFKJdxoSkoQey0050BfdeuUpR4yyg9uGE56OcodWcqfWNCSsZZavnd0
kki4l1q2Ow2tYphOYhzjcEa6BX48mEYedWoktv9gOGSjObj3dIzo+nnIhLgB35HY
jCDasLnpAwbgKOOqICynJ5JZsH6Zo+GNoVpT+FXwhkqt7ymnzQtrACGf/sTS8Of0
SGHGV04SFHx/yIHDkYIP7K/VOaDiCjdEV2c5lnbjX1WuTdWG2vFi4I/iFEr2Ik45
9vz/TQjMHsXG8R3doqqPLSljDRKWRwqNP/LZyqgShrHgjj0ROozi8E59xS8EEb6V
m87HUMiZlxg=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:52 2026 by rpki-client