Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
File:                     3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa (raw, json)
Hash identifier:          8vMy5LaxiDdWcguOcr+Io8o3+xh1Zgybuh2lvMVmiAY=
Subject key identifier:   10:71:3A:38:00:49:D4:72:E3:6A:D7:A3:65:E6:80:19:EF:D4:22:2C
Certificate issuer:       /CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
Certificate serial:       5801D748DBC7210CFFC8FC01DD6D2E210BFF1C32
Authority key identifier: FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa
Signing time:             Sat 07 Feb 2026 23:15:00 +0000
ROA not before:           Sat 07 Feb 2026 23:10:00 +0000
ROA not after:            Sat 06 Feb 2027 23:15:00 +0000
asID:                     270682
IP address blocks:        200.187.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl
                          rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:01:d7:48:db:c7:21:0c:ff:c8:fc:01:dd:6d:2e:21:0b:ff:1c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC6D87C33255DE718EF9A38A927C4C09C5A2A27
        Validity
            Not Before: Feb  7 23:10:00 2026 GMT
            Not After : Feb  6 23:15:00 2027 GMT
        Subject: CN=10713A380049D472E36AD7A365E68019EFD4222C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:d4:50:97:94:4e:14:2f:b3:b4:9c:25:56:
                    a3:5a:0d:ae:78:65:ab:7e:75:9c:86:c8:ad:70:60:
                    03:d8:cf:7b:49:fc:b7:2b:ae:66:3a:a0:c3:f4:f1:
                    c9:c1:36:df:59:fb:d3:97:b9:08:60:fe:b5:c4:ce:
                    78:bf:c2:5c:40:c0:a2:42:5b:37:aa:35:15:4b:b4:
                    af:ed:8d:de:6d:bc:20:6c:38:db:da:5b:05:1f:5a:
                    c0:f0:c6:2a:7e:7a:8a:83:98:50:f7:54:8f:2b:fb:
                    3d:fc:c2:2d:0c:07:2b:bb:e4:5a:3c:9a:8e:96:ea:
                    26:62:b5:4d:7a:4c:63:62:d0:f4:26:33:04:ed:7b:
                    d3:0c:66:23:31:2e:63:f4:32:d7:14:1e:34:5e:58:
                    92:37:9b:6d:e9:d3:88:2a:a6:23:49:73:04:93:e8:
                    97:fc:05:1a:1a:1d:b7:fe:5a:d4:ee:76:68:81:f3:
                    34:58:5b:b6:b5:92:cc:d4:27:c6:5a:46:74:0a:3a:
                    06:f1:b5:c3:0d:5d:81:ee:36:5d:d2:f8:2e:67:ae:
                    b9:45:b6:4a:3b:1d:7e:a8:b2:f5:8b:74:73:91:62:
                    27:43:9e:60:52:2d:9c:8e:18:ed:c9:3b:fe:b3:c6:
                    4c:41:f0:ac:c7:35:dd:32:13:ba:f2:c1:10:3f:1d:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:71:3A:38:00:49:D4:72:E3:6A:D7:A3:65:E6:80:19:EF:D4:22:2C
            X509v3 Authority Key Identifier:
                keyid:FF:C6:D8:7C:33:25:5D:E7:18:EF:9A:38:A9:27:C4:C0:9C:5A:2A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC6D87C33255DE718EF9A38A927C4C09C5A2A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uoef8oNQrTCLDFNvGuTPY9sqXxK9XXbH4BmwAk11e7b/1/3230302e3138372e39362e302f32322d3234203d3e20323730363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:bf:d0:7f:71:b6:98:97:b1:94:d2:6a:a2:20:ea:14:77:
         77:50:bb:9f:74:6c:2c:f2:9a:00:f7:ed:e6:5c:b8:66:9b:90:
         74:20:1f:35:9a:87:84:78:63:79:4d:4c:eb:b2:39:c1:da:70:
         6d:31:38:e7:b1:df:a4:d5:44:e9:8b:7f:cb:68:4a:35:09:1d:
         38:de:a6:22:e6:30:2a:f0:04:f5:01:d7:a9:7b:2a:28:dc:ea:
         b2:bb:fc:e8:d6:0e:b0:b7:74:21:56:15:f5:9f:63:4c:f8:24:
         f3:df:f2:37:00:82:00:06:1a:b4:73:15:7c:50:90:8f:c0:26:
         b8:b4:73:53:ae:26:c5:f8:bb:55:10:29:d4:eb:0a:7f:8c:6e:
         f1:ec:d9:2d:99:dd:a6:e2:c4:d1:63:d3:99:96:c0:36:dc:f2:
         18:cc:e7:f3:0f:18:ab:a5:fd:fc:bf:58:a6:97:e0:79:a9:54:
         13:f3:f0:24:8b:37:95:5c:0b:f8:33:56:cb:0d:cb:73:25:96:
         13:ca:74:19:24:e2:9f:66:41:01:16:89:e5:d3:3d:27:2d:8c:
         5f:14:96:0d:c2:d7:c4:73:39:47:a9:5c:2a:23:1a:38:a9:82:
         1b:ec:6a:c4:bb:01:8d:13:03:2d:e9:91:89:67:4b:12:01:a4:
         df:bb:89:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWAHXSNvHIQz/yPwB3W0uIQv/HDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZDNkQ4N0MzMzI1NURFNzE4RUY5QTM4QTkyN0M0QzA5
QzVBMkEyNzAeFw0yNjAyMDcyMzEwMDBaFw0yNzAyMDYyMzE1MDBaMDMxMTAvBgNV
BAMTKDEwNzEzQTM4MDA0OUQ0NzJFMzZBRDdBMzY1RTY4MDE5RUZENDIyMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiW9RQl5ROFC+ztJwlVqNaDa54
Zat+dZyGyK1wYAPYz3tJ/LcrrmY6oMP08cnBNt9Z+9OXuQhg/rXEzni/wlxAwKJC
WzeqNRVLtK/tjd5tvCBsONvaWwUfWsDwxip+eoqDmFD3VI8r+z38wi0MByu75Fo8
mo6W6iZitU16TGNi0PQmMwTte9MMZiMxLmP0MtcUHjReWJI3m23p04gqpiNJcwST
6Jf8BRoaHbf+WtTudmiB8zRYW7a1kszUJ8ZaRnQKOgbxtcMNXYHuNl3S+C5nrrlF
tko7HX6osvWLdHORYidDnmBSLZyOGO3JO/6zxkxB8KzHNd0yE7rywRA/HZs5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEHE6OABJ1HLjatejZeaAGe/UIiwwHwYDVR0j
BBgwFoAU/8bYfDMlXecY75o4qSfEwJxaKicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVvZWY4b05RclRDTERGTnZHdVRQWTlzcVh4SzlYWGJINEJtd0FrMTFl
N2IvMS9GRkM2RDg3QzMzMjU1REU3MThFRjlBMzhBOTI3QzRDMDlDNUEyQTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQzZEODdDMzMyNTVERTcx
OEVGOUEzOEE5MjdDNEMwOUM1QTJBMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1b2VmOG9OUXJUQ0xERk52R3VUUFk5c3FYeEs5WFhiSDRCbXdBazExZTdiLzEv
MzIzMDMwMmUzMTM4MzcyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIu2AwDQYJKoZIhvcNAQELBQADggEBAB3av9B/
cbaYl7GU0mqiIOoUd3dQu590bCzymgD37eZcuGabkHQgHzWah4R4Y3lNTOuyOcHa
cG0xOOex36TVROmLf8toSjUJHTjepiLmMCrwBPUB16l7Kijc6rK7/OjWDrC3dCFW
FfWfY0z4JPPf8jcAggAGGrRzFXxQkI/AJri0c1OuJsX4u1UQKdTrCn+MbvHs2S2Z
3abixNFj05mWwDbc8hjM5/MPGKul/fy/WKaX4HmpVBPz8CSLN5VcC/gzVssNy3Ml
lhPKdBkk4p9mQQEWieXTPSctjF8Ulg3C18RzOUepXCojGjipghvsasS7AY0TAy3p
kYlnSxIBpN+7ia8=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:47:15 2026 by rpki-client