Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa
File:                     3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          wuoq60O2TjZf9DOmKhXPCjRLB2ZGoPPI6QRlKHV9MnI=
Subject key identifier:   FC:56:DC:F8:3B:08:0F:0E:0B:93:7E:49:7B:F3:76:AA:5E:70:11:D0
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       14DA4C021BFBB1E27416AC985B6AF5E4DBB92BDB
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:43 +0000
ROA not before:           Thu 05 Feb 2026 11:35:43 +0000
ROA not after:            Thu 04 Feb 2027 11:40:43 +0000
asID:                     262868
IP address blocks:        138.255.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:da:4c:02:1b:fb:b1:e2:74:16:ac:98:5b:6a:f5:e4:db:b9:2b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:43 2026 GMT
            Not After : Feb  4 11:40:43 2027 GMT
        Subject: CN=FC56DCF83B080F0E0B937E497BF376AA5E7011D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:0b:99:59:86:5b:db:6e:2b:90:8b:58:ff:
                    44:6a:8d:c0:e6:c2:8d:e2:5f:a0:c2:b8:c2:f3:fb:
                    26:09:82:06:4d:a5:ec:bb:e9:c9:18:cf:da:0e:70:
                    64:c5:86:12:1e:59:cd:6c:d2:bf:83:93:f4:01:36:
                    4f:8c:56:aa:e6:70:19:20:e5:77:7e:55:f1:af:2c:
                    01:43:c4:4b:18:36:bd:f2:2e:a9:21:c7:4e:e1:79:
                    1b:6d:f0:52:cb:59:83:42:ed:5f:c7:97:67:93:5c:
                    f3:23:48:69:cc:96:a8:fc:06:48:9b:a3:bd:20:9b:
                    b5:ec:bc:54:d5:dd:a6:ff:5a:fd:ef:10:09:b0:65:
                    23:12:82:31:10:7b:0d:d1:ce:04:0f:83:35:77:e4:
                    27:9c:99:c6:85:41:a3:12:6d:02:53:48:8c:a5:c0:
                    3f:4c:a3:67:88:f7:b0:2e:b7:9f:5c:11:bb:66:f5:
                    12:36:58:d9:6d:c5:7f:0b:0e:f8:fc:f1:d5:5f:72:
                    92:d8:ec:33:98:7e:ac:3f:64:aa:9e:97:0b:c9:c4:
                    35:8e:eb:96:fb:0f:71:77:8d:70:2b:82:11:55:70:
                    4d:d6:12:5e:80:9c:29:6f:84:2a:64:18:1f:eb:9a:
                    7b:70:ea:00:72:6b:94:5d:59:61:f0:59:fe:55:64:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:DC:F8:3B:08:0F:0E:0B:93:7E:49:7B:F3:76:AA:5E:70:11:D0
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:dd:fc:9e:6d:cf:4a:97:79:a1:92:33:80:a8:ba:db:a8:
         dd:7b:7d:50:e9:29:28:46:b6:16:8e:0f:81:19:9a:9f:8a:4b:
         e7:b9:0d:46:95:9b:01:d1:46:bf:17:bf:e4:49:18:b3:99:c2:
         e9:37:96:a3:d0:0e:43:a2:d1:ac:dd:1d:a6:1f:93:24:e0:32:
         71:5f:6d:18:ae:59:cd:27:e6:96:2f:a5:1a:33:0a:c9:8f:e3:
         1b:e2:8e:f3:17:1e:df:5a:d0:31:60:ff:9d:98:c9:62:24:8b:
         6d:d1:c3:51:cf:f6:6b:7b:08:20:85:8f:e0:e8:cf:78:c0:e7:
         67:e8:e3:bf:45:fd:0c:0c:79:ee:59:73:f3:2a:3d:a1:b8:34:
         a7:fd:a6:91:f5:ef:60:0d:1f:10:ed:ca:9a:71:24:78:d0:0d:
         54:d2:e2:f3:10:86:4a:b1:fb:8c:54:f7:89:04:6d:36:7d:85:
         4e:57:18:de:19:8d:9a:62:ef:be:6e:b0:8c:2e:d1:78:d3:8d:
         0a:83:3e:29:ad:ed:d7:75:eb:13:b3:93:51:35:c0:88:69:4f:
         3e:b8:8f:0b:1f:72:78:5a:08:84:47:36:66:80:7d:4f:37:e0:
         de:7c:47:eb:00:2b:0a:c0:22:05:86:cf:a5:2c:2d:2d:b5:05:
         19:22:fb:19
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFNpMAhv7seJ0FqyYW2r15Nu5K9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1NDNaFw0yNzAyMDQxMTQwNDNaMDMxMTAvBgNV
BAMTKEZDNTZEQ0Y4M0IwODBGMEUwQjkzN0U0OTdCRjM3NkFBNUU3MDExRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgAuZWYZb224rkItY/0RqjcDm
wo3iX6DCuMLz+yYJggZNpey76ckYz9oOcGTFhhIeWc1s0r+Dk/QBNk+MVqrmcBkg
5Xd+VfGvLAFDxEsYNr3yLqkhx07heRtt8FLLWYNC7V/Hl2eTXPMjSGnMlqj8Bkib
o70gm7XsvFTV3ab/Wv3vEAmwZSMSgjEQew3RzgQPgzV35CecmcaFQaMSbQJTSIyl
wD9Mo2eI97Aut59cEbtm9RI2WNltxX8LDvj88dVfcpLY7DOYfqw/ZKqelwvJxDWO
65b7D3F3jXArghFVcE3WEl6AnClvhCpkGB/rmntw6gBya5RdWWHwWf5VZLdJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/Fbc+DsIDw4Lk35Je/N2ql5wEdAwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzMzM4MmUzMjM1MzUyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/xDANBgkqhkiG9w0BAQsFAAOCAQEAGEzd
/J5tz0qXeaGSM4Coutuo3Xt9UOkpKEa2Fo4PgRman4pL57kNRpWbAdFGvxe/5EkY
s5nC6TeWo9AOQ6LRrN0dph+TJOAycV9tGK5ZzSfmli+lGjMKyY/jG+KO8xce31rQ
MWD/nZjJYiSLbdHDUc/2a3sIIIWP4OjPeMDnZ+jjv0X9DAx57llz8yo9obg0p/2m
kfXvYA0fEO3KmnEkeNANVNLi8xCGSrH7jFT3iQRtNn2FTlcY3hmNmmLvvm6wjC7R
eNONCoM+Ka3t13XrE7OTUTXAiGlPPriPCx9yeFoIhEc2ZoB9Tzfg3nxH6wArCsAi
BYbPpSwtLbUFGSL7GQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:01 2026 by rpki-client