Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
File:                     3137372e32332e36342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          1O+C4gKehoZbB1bzgM9P5Hl3u1YA7QbbPbBfTZuNlJA=
Subject key identifier:   21:54:11:86:82:D1:0E:2B:EE:A1:5A:08:27:C3:3B:9A:D4:59:4D:D9
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       2F425BF4A836037FE2396FBD02E2A9FF7E0DE8D2
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     262891
IP address blocks:        177.23.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:5b:f4:a8:36:03:7f:e2:39:6f:bd:02:e2:a9:ff:7e:0d:e8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject: CN=2154118682D10E2BEEA15A0827C33B9AD4594DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4f:f8:50:63:1f:fc:5f:b8:0b:93:28:79:fd:
                    09:fe:dc:fc:f8:50:5b:cd:94:c7:f7:2f:94:29:71:
                    9c:65:7c:f4:12:ae:0c:1a:bd:2b:44:ae:96:33:f5:
                    e8:7f:35:c4:97:f5:02:f3:e4:be:6c:b2:06:06:94:
                    35:0a:56:54:91:d4:8c:57:13:20:36:d0:03:a1:38:
                    61:7d:38:20:04:06:a8:d7:e2:1c:c0:c4:59:2e:93:
                    db:3d:2c:29:08:0f:55:85:4b:1c:53:be:79:10:bc:
                    4d:6c:7e:1c:31:9e:22:78:a7:6d:b4:eb:52:83:b2:
                    18:f0:3b:2c:ea:fb:de:6f:1c:54:de:66:60:b1:7f:
                    1c:c4:1d:f2:ba:a2:a3:18:a2:1c:4d:28:57:4e:11:
                    2d:e5:84:de:c2:ac:39:91:4a:96:dc:46:cf:7c:ad:
                    4e:4c:b1:83:70:4f:6d:f4:b6:e9:cf:20:fe:23:b1:
                    8c:72:91:fb:38:a1:19:dd:6d:88:a0:f6:3f:7c:f3:
                    45:14:bf:76:ed:a2:fa:ae:a1:21:aa:f8:2c:53:86:
                    6e:1d:02:c5:62:05:af:37:76:42:4b:c8:ba:e7:70:
                    20:b9:09:82:a5:75:11:0d:96:12:7f:3b:5d:d3:91:
                    c8:39:17:01:3d:21:82:d4:de:28:33:7a:17:3a:82:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:11:86:82:D1:0E:2B:EE:A1:5A:08:27:C3:3B:9A:D4:59:4D:D9
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32332e36342e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:ec:83:8f:be:3d:eb:06:30:62:c8:e9:0c:2e:12:5e:67:53:
         1e:e3:61:78:8d:4b:4d:67:4b:9a:96:a6:e9:14:0a:50:fe:30:
         d6:be:01:6a:c9:e5:8b:59:f4:d3:03:5b:9c:5b:b9:12:e2:fa:
         4e:87:b8:4d:70:3c:18:32:81:10:85:b8:c1:3f:68:ac:54:19:
         89:0d:14:45:6b:bb:fb:18:ab:eb:57:2b:43:46:3a:e5:43:1f:
         17:16:10:9c:9f:01:da:6b:11:24:99:2a:15:a0:19:2e:72:0d:
         8f:80:9e:72:8a:23:e4:c3:64:f2:91:69:c1:7e:10:ee:5b:6c:
         07:11:75:c0:1b:69:50:df:78:a2:8e:fa:74:ba:ec:cf:7b:e2:
         72:0d:1d:85:c0:d2:6e:3b:00:12:ae:c0:d7:4c:4d:6c:96:c7:
         9c:58:cb:42:7e:97:f0:58:40:9d:b6:66:da:01:98:8e:6f:51:
         1e:11:ec:cc:dc:5a:3f:52:c6:69:6f:87:d8:32:27:3f:0d:ed:
         cc:ad:5e:31:c5:63:9c:61:19:de:12:c4:27:e4:9f:f7:7b:06:
         b9:30:e2:f4:7e:b8:95:da:6d:48:14:b9:af:f6:31:22:68:8b:
         a5:7f:98:eb:7d:17:6c:84:9a:7a:ae:ed:db:ee:46:a6:ac:90:
         64:6b:3b:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL0Jb9Kg2A3/iOW+9AuKp/34N6NIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkExNTg1RTQyRTczOEVFNTk2REIyRjJCOTcwQ0MzQ0I3
NDNCRDhGQzAeFw0yNjAyMDQxOTU1MTRaFw0yNzAyMDMyMDAwMTRaMDMxMTAvBgNV
BAMTKDIxNTQxMTg2ODJEMTBFMkJFRUExNUEwODI3QzMzQjlBRDQ1OTRERDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAT/hQYx/8X7gLkyh5/Qn+3Pz4
UFvNlMf3L5QpcZxlfPQSrgwavStErpYz9eh/NcSX9QLz5L5ssgYGlDUKVlSR1IxX
EyA20AOhOGF9OCAEBqjX4hzAxFkuk9s9LCkID1WFSxxTvnkQvE1sfhwxniJ4p220
61KDshjwOyzq+95vHFTeZmCxfxzEHfK6oqMYohxNKFdOES3lhN7CrDmRSpbcRs98
rU5MsYNwT230tunPIP4jsYxykfs4oRndbYig9j9880UUv3btovquoSGq+CxThm4d
AsViBa83dkJLyLrncCC5CYKldRENlhJ/O13Tkcg5FwE9IYLU3igzehc6grunAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIVQRhoLRDivuoVoIJ8M7mtRZTdkwHwYDVR0j
BBgwFoAU+hWF5C5zjuWW2y8rlwzDy3Q72PwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWZjVmZ3YWJUa2d5b2hTTks2cjVOOVZYeHZ3TUFLRzZWWHJDVlJ4a1hQ
YWQvMS9GQTE1ODVFNDJFNzM4RUU1OTZEQjJGMkI5NzBDQzNDQjc0M0JEOEZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMTU4NUU0MkU3MzhFRTU5
NkRCMkYyQjk3MENDM0NCNzQzQkQ4RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmY1Zmd2FiVGtneW9oU05LNnI1TjlWWHh2d01BS0c2VlhyQ1ZSeGtYUGFkLzEv
MzEzNzM3MmUzMjMzMmUzNjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsRdAMA0GCSqGSIb3DQEBCwUAA4IBAQAd7IOPvj3r
BjBiyOkMLhJeZ1Me42F4jUtNZ0ualqbpFApQ/jDWvgFqyeWLWfTTA1ucW7kS4vpO
h7hNcDwYMoEQhbjBP2isVBmJDRRFa7v7GKvrVytDRjrlQx8XFhCcnwHaaxEkmSoV
oBkucg2PgJ5yiiPkw2TykWnBfhDuW2wHEXXAG2lQ33iijvp0uuzPe+JyDR2FwNJu
OwASrsDXTE1slsecWMtCfpfwWECdtmbaAZiOb1EeEezM3Fo/UsZpb4fYMic/De3M
rV4xxWOcYRneEsQn5J/3ewa5MOL0friV2m1IFLmv9jEiaIulf5jrfRdshJp6ru3b
7kamrJBkazvS
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:38 2026 by rpki-client