Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa
File:                     3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          wqMGH9/IS1GnNDyqY4a8xGW7Q5IbpRBXyJS1yiL3YY4=
Subject key identifier:   C4:AB:21:8A:E7:B8:99:DF:E0:5D:25:A3:00:BD:EE:B4:2A:7C:8B:69
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       7BF41BA0A6A6AC61CDA6C6C3388A7576AEB7888E
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:35 +0000
ROA not before:           Thu 05 Feb 2026 11:35:35 +0000
ROA not after:            Thu 04 Feb 2027 11:40:35 +0000
asID:                     262868
IP address blocks:        164.163.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f4:1b:a0:a6:a6:ac:61:cd:a6:c6:c3:38:8a:75:76:ae:b7:88:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:35 2026 GMT
            Not After : Feb  4 11:40:35 2027 GMT
        Subject: CN=C4AB218AE7B899DFE05D25A300BDEEB42A7C8B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d3:51:b5:8b:07:09:b3:03:ad:5d:db:49:ef:
                    41:d6:d7:40:cc:58:1c:b6:8f:bf:3e:17:8d:6f:7b:
                    a2:df:0d:7b:bc:da:9f:1a:a3:1b:13:4d:d0:91:90:
                    97:2b:b6:54:45:cd:94:f2:c4:0d:e3:99:11:98:3e:
                    8c:39:b0:36:79:1b:8f:fd:8f:86:52:0d:75:13:e1:
                    fb:ac:3d:1d:82:53:df:85:81:da:33:95:b7:35:15:
                    14:d5:ee:80:b8:fc:15:ea:80:2d:55:03:48:4e:d6:
                    8c:a2:ec:2c:7b:12:47:93:31:87:09:3c:cf:97:87:
                    55:3a:5b:e9:c6:62:38:8c:2e:a0:d5:a3:0f:0a:a2:
                    af:6b:85:b4:6e:cc:e0:74:05:32:48:21:d1:4a:ed:
                    bb:ab:d3:c8:de:70:94:2e:b1:fc:30:5d:c8:07:fd:
                    1c:83:e9:32:a9:2d:c5:fa:4e:c3:44:57:6f:c4:e6:
                    3a:06:d4:9e:d3:9c:88:66:63:20:23:ab:1a:a2:6a:
                    28:4f:8c:bf:6b:83:e1:82:b4:0d:be:a8:e2:3a:1f:
                    4a:7c:4b:ad:b4:d5:b3:0c:d7:20:f0:24:d5:d2:3a:
                    30:98:8a:c9:9b:4f:a7:cf:54:e7:7f:b6:c5:55:7e:
                    55:88:c3:12:26:0e:59:a8:54:d0:03:3e:48:4a:7a:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AB:21:8A:E7:B8:99:DF:E0:5D:25:A3:00:BD:EE:B4:2A:7C:8B:69
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:a2:85:c4:a4:4b:31:fc:00:45:b6:c5:94:44:40:d3:6d:
         36:65:af:cd:77:4b:6c:07:ec:17:d3:03:20:91:fc:21:66:e1:
         79:99:49:1b:7e:f2:54:ae:d5:a7:e1:51:1a:d2:8d:2e:f4:1b:
         01:60:69:7d:71:c7:8b:f3:75:99:93:c4:5b:76:e4:39:11:5e:
         76:d1:d2:8c:69:70:90:58:59:5a:4d:a7:58:80:cd:93:0b:3f:
         c6:68:c6:61:21:65:08:17:e6:fc:71:a5:7d:9a:21:67:05:6e:
         c9:07:36:91:de:71:88:6f:f7:a1:a2:1d:6c:38:56:09:e7:1c:
         f3:fb:45:4d:2e:0d:e7:28:ad:1d:2f:4a:f7:f6:95:e7:23:46:
         87:91:4c:09:eb:80:88:b8:f8:7f:2e:4f:f5:f9:92:5d:5d:fc:
         d8:34:0f:be:30:a7:34:f8:9c:f2:89:eb:14:cb:b4:76:79:92:
         8d:ae:34:00:97:38:75:e1:30:01:bd:5c:d6:e1:6f:e6:bf:dc:
         26:fd:fe:ec:6c:4c:4e:16:df:cc:ae:f9:c6:5a:08:77:0c:37:
         c9:2e:9b:85:4d:1d:36:d6:f5:c7:2b:20:30:9f:3d:27:99:67:
         6f:38:95:8e:1e:e3:13:4e:b4:79:a4:ab:8c:46:a0:87:fb:ee:
         5e:eb:bf:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUe/QboKamrGHNpsbDOIp1dq63iI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1MzVaFw0yNzAyMDQxMTQwMzVaMDMxMTAvBgNV
BAMTKEM0QUIyMThBRTdCODk5REZFMDVEMjVBMzAwQkRFRUI0MkE3QzhCNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB01G1iwcJswOtXdtJ70HW10DM
WBy2j78+F41ve6LfDXu82p8aoxsTTdCRkJcrtlRFzZTyxA3jmRGYPow5sDZ5G4/9
j4ZSDXUT4fusPR2CU9+Fgdozlbc1FRTV7oC4/BXqgC1VA0hO1oyi7Cx7EkeTMYcJ
PM+Xh1U6W+nGYjiMLqDVow8Koq9rhbRuzOB0BTJIIdFK7bur08jecJQusfwwXcgH
/RyD6TKpLcX6TsNEV2/E5joG1J7TnIhmYyAjqxqiaihPjL9rg+GCtA2+qOI6H0p8
S6201bMM1yDwJNXSOjCYismbT6fPVOd/tsVVflWIwxImDlmoVNADPkhKej35AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxKshiue4md/gXSWjAL3utCp8i2kwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNjM0MmUzMTM2MzMyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSjlDANBgkqhkiG9w0BAQsFAAOCAQEAF82i
hcSkSzH8AEW2xZREQNNtNmWvzXdLbAfsF9MDIJH8IWbheZlJG37yVK7Vp+FRGtKN
LvQbAWBpfXHHi/N1mZPEW3bkORFedtHSjGlwkFhZWk2nWIDNkws/xmjGYSFlCBfm
/HGlfZohZwVuyQc2kd5xiG/3oaIdbDhWCecc8/tFTS4N5yitHS9K9/aV5yNGh5FM
CeuAiLj4fy5P9fmSXV382DQPvjCnNPic8onrFMu0dnmSja40AJc4deEwAb1c1uFv
5r/cJv3+7GxMThbfzK75xloIdww3yS6bhU0dNtb1xysgMJ89J5lnbziVjh7jE060
eaSrjEagh/vuXuu/HQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:01 2026 by rpki-client