Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
File:                     3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier:          6pN9+m4jveRgDa6gRW6Q3bqDF0qFv6tyflNcss8wXSo=
Subject key identifier:   D2:36:4A:99:BE:6C:77:61:49:AF:18:0D:75:7C:A0:C2:98:9E:92:2F
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       54D7DA2ECE99366F7B665ABAF1753396755CB1C9
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa
Signing time:             Fri 06 Feb 2026 14:46:33 +0000
ROA not before:           Fri 06 Feb 2026 14:41:33 +0000
ROA not after:            Fri 05 Feb 2027 14:46:33 +0000
asID:                     265485
IP address blocks:        168.197.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d7:da:2e:ce:99:36:6f:7b:66:5a:ba:f1:75:33:96:75:5c:b1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Feb  6 14:41:33 2026 GMT
            Not After : Feb  5 14:46:33 2027 GMT
        Subject: CN=D2364A99BE6C776149AF180D757CA0C2989E922F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:10:a8:e4:5a:c3:a3:be:c1:8c:f3:05:9d:35:
                    cf:83:36:fb:1e:b7:63:58:b0:12:7d:86:c7:c1:0d:
                    6a:4c:ee:90:bd:c4:ea:5d:b9:3a:56:64:29:e9:5b:
                    ce:7e:e9:f2:15:dc:61:83:ce:61:05:94:2b:31:1c:
                    45:49:92:9b:86:c2:52:bf:8a:00:22:b2:3a:0c:1c:
                    ec:1b:46:96:c4:d3:05:03:6c:36:3d:6f:b4:54:e3:
                    a0:79:a1:a4:e2:d4:be:c2:a9:07:04:91:40:20:81:
                    cd:68:5c:bc:a6:ca:59:f4:48:61:6c:5e:50:29:f8:
                    af:e0:b0:bf:87:57:7a:6a:5c:76:42:af:2c:82:6a:
                    d7:e0:4f:3d:bf:00:0f:06:a9:3d:a3:60:26:0d:4d:
                    e0:7c:4c:21:f8:47:b6:8f:75:4f:02:5d:68:02:07:
                    a6:25:d8:7d:1c:03:a7:b6:93:c4:c3:8f:14:44:bb:
                    0c:98:2e:e5:1a:70:3c:f2:e7:51:20:4a:eb:8e:ba:
                    4e:15:60:ef:ad:ca:21:0f:e5:76:5e:18:cf:54:1f:
                    4a:fc:8b:04:28:72:a0:2f:bb:7c:c8:bf:dd:3c:df:
                    8f:c7:b6:50:09:b1:4c:19:ed:06:89:41:37:34:64:
                    39:55:3f:3b:78:bc:10:f5:2a:1a:5a:e9:f3:c9:16:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:4A:99:BE:6C:77:61:49:AF:18:0D:75:7C:A0:C2:98:9E:92:2F
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135382e302f32332d3233203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:c5:0f:02:55:19:8b:7e:06:33:9b:3e:d0:c1:86:d0:94:
         23:63:b2:9d:b3:c8:9b:40:d1:a7:2c:f8:e1:ba:76:6d:41:61:
         1d:cc:3d:85:a4:75:7f:39:5f:62:22:51:62:9b:e8:5c:9f:df:
         df:c6:9a:5c:77:9d:c9:70:b2:13:79:8e:6d:6d:df:95:d0:be:
         04:85:09:90:3a:f6:f7:17:0c:a9:5b:0a:61:74:0a:fd:e2:4f:
         73:59:02:c0:76:45:ec:8d:f3:7c:9c:f9:cb:15:b2:c5:2a:6d:
         a9:ae:01:9c:3e:f3:be:d3:79:cc:b6:e1:bb:bd:23:d3:c0:07:
         c1:5b:6a:9c:5b:27:7c:2d:84:d9:17:18:aa:49:b2:f0:47:5c:
         f5:a4:b5:e6:7c:0c:25:56:aa:c2:75:24:da:14:8b:7b:4f:dc:
         66:a0:0d:f7:3b:e8:e1:7a:07:21:31:57:26:69:3a:7f:08:6b:
         ea:b5:e4:fd:39:52:4e:e1:df:fc:ee:cb:93:f7:08:38:74:2d:
         67:36:d5:b4:d0:3d:a5:7a:d3:f5:04:4f:fc:c9:45:0d:6d:5c:
         87:01:8a:db:fc:bd:b5:be:18:7f:23:b1:b6:d7:e2:31:b3:76:
         f9:dd:9d:6e:63:74:d4:c4:c4:a4:aa:bf:c6:06:9f:4c:b6:3b:
         12:a6:31:b9
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVNfaLs6ZNm97Zlq68XUzlnVcsckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRC
M0I5OUVCRTAeFw0yNjAyMDYxNDQxMzNaFw0yNzAyMDUxNDQ2MzNaMDMxMTAvBgNV
BAMTKEQyMzY0QTk5QkU2Qzc3NjE0OUFGMTgwRDc1N0NBMEMyOTg5RTkyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTEKjkWsOjvsGM8wWdNc+DNvse
t2NYsBJ9hsfBDWpM7pC9xOpduTpWZCnpW85+6fIV3GGDzmEFlCsxHEVJkpuGwlK/
igAisjoMHOwbRpbE0wUDbDY9b7RU46B5oaTi1L7CqQcEkUAggc1oXLymyln0SGFs
XlAp+K/gsL+HV3pqXHZCryyCatfgTz2/AA8GqT2jYCYNTeB8TCH4R7aPdU8CXWgC
B6Yl2H0cA6e2k8TDjxREuwyYLuUacDzy51EgSuuOuk4VYO+tyiEP5XZeGM9UH0r8
iwQocqAvu3zIv90834/HtlAJsUwZ7QaJQTc0ZDlVPzt4vBD1Khpa6fPJFuPvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU0jZKmb5sd2FJrxgNdXygwpieki8wHwYDVR0j
BBgwFoAU8MELy58C2CR6oCo+3qlN1LO5nr4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpq
LzEvRjBDMTBCQ0I5RjAyRDgyNDdBQTAyQTNFREVBOTRERDRCM0I5OUVCRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GMEMxMEJDQjlGMDJEODI0N0FB
MDJBM0VERUE5NERENEIzQjk5RUJFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81
ZGt0d3B0M1FFWG4zb0NXenB0ZkoxTHpQS1JIbUtuS25rb3JLMTd5WWpqLzEvMzEz
NjM4MmUzMTM5MzcyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
NTM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAajFnjANBgkqhkiG9w0BAQsFAAOCAQEABYvFDwJV
GYt+BjObPtDBhtCUI2OynbPIm0DRpyz44bp2bUFhHcw9haR1fzlfYiJRYpvoXJ/f
38aaXHedyXCyE3mObW3fldC+BIUJkDr29xcMqVsKYXQK/eJPc1kCwHZF7I3zfJz5
yxWyxSptqa4BnD7zvtN5zLbhu70j08AHwVtqnFsnfC2E2RcYqkmy8Edc9aS15nwM
JVaqwnUk2hSLe0/cZqAN9zvo4XoHITFXJmk6fwhr6rXk/TlSTuHf/O7Lk/cIOHQt
ZzbVtNA9pXrT9QRP/MlFDW1chwGK2/y9tb4YfyOxttfiMbN2+d2dbmN01MTEpKq/
xgafTLY7EqYxuQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:34 2026 by rpki-client