Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa
File:                     3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          5S9dSm3XJiuCuXqtUfsCEPH2Le3AOlctYnLBhaB9AyY=
Subject key identifier:   EF:B0:4F:9D:8D:4E:75:3C:5A:D9:01:13:8D:F6:B9:FC:8B:37:7B:A9
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       046333143CD395D3F877246EE1A7182635B62B67
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:40 +0000
ROA not before:           Thu 05 Feb 2026 11:35:40 +0000
ROA not after:            Thu 04 Feb 2027 11:40:40 +0000
asID:                     262868
IP address blocks:        168.197.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:63:33:14:3c:d3:95:d3:f8:77:24:6e:e1:a7:18:26:35:b6:2b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:40 2026 GMT
            Not After : Feb  4 11:40:40 2027 GMT
        Subject: CN=EFB04F9D8D4E753C5AD901138DF6B9FC8B377BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:4e:d1:00:da:16:36:3a:5d:94:3b:b3:6f:
                    0c:33:c5:9a:46:c9:94:b5:89:cd:42:49:7f:02:85:
                    84:5f:aa:fd:e2:aa:5f:cb:c1:98:2f:eb:ea:33:7a:
                    ab:8f:2d:aa:de:67:98:5b:d4:9b:a1:50:87:37:48:
                    c3:2d:98:c7:e3:3a:b9:a4:e1:b9:91:c6:ce:16:6f:
                    d9:2b:47:18:a7:1c:db:00:1b:1d:c7:1d:41:72:57:
                    3b:2a:b0:b8:af:c9:37:b0:bf:6b:39:20:b6:36:0d:
                    3a:7f:42:5a:cc:bf:03:e7:30:ac:3b:c8:e0:ab:bc:
                    bd:e3:ec:54:91:3b:79:5e:dd:15:a5:93:22:ae:14:
                    ea:37:8a:fa:e4:5f:7e:87:b4:37:60:2d:fa:04:d6:
                    4c:3d:14:03:04:7f:72:e2:f5:1a:b2:46:6c:43:62:
                    8d:7f:85:8c:80:da:49:d4:42:ee:1d:ec:e9:02:84:
                    a0:c3:64:95:fb:9d:0b:65:b2:e1:63:c7:bb:a5:72:
                    d7:e9:99:52:78:12:c9:78:6a:0d:c0:f4:f2:2c:ca:
                    99:8a:db:78:c9:59:40:55:05:5c:fd:87:9b:10:9a:
                    0b:5c:06:e6:da:93:e3:d7:ff:cc:64:49:04:21:22:
                    d3:9c:05:a8:9f:e2:b7:7b:50:22:f1:93:05:34:db:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B0:4F:9D:8D:4E:75:3C:5A:D9:01:13:8D:F6:B9:FC:8B:37:7B:A9
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:82:5f:45:1c:b1:de:28:31:86:93:29:2d:86:70:17:2b:91:
         a6:fc:df:aa:f1:df:be:4e:49:62:f6:36:ba:ce:e1:47:87:00:
         11:7c:6e:96:01:af:bd:99:35:2b:ab:83:2e:33:fe:be:4a:92:
         8a:4a:ee:4a:3d:f4:13:97:fc:40:ac:f5:6b:53:66:10:23:97:
         8c:28:b7:0b:1c:e1:0c:9d:e1:70:b5:8c:7e:27:7a:c1:16:f8:
         93:ea:d0:17:8f:64:d4:2e:78:43:48:f7:eb:85:58:23:27:11:
         72:0d:cf:0d:e0:9f:29:71:6b:2d:ac:6e:5e:7c:2f:38:f1:64:
         86:29:42:57:01:e6:dc:2a:76:71:00:fc:00:ae:1d:07:50:59:
         a6:70:f0:1c:c6:83:db:8e:21:fc:b4:9f:0b:03:41:68:d8:6a:
         09:36:ac:f6:df:38:32:ed:2e:97:b5:30:4b:dd:42:2b:19:88:
         12:8e:70:1d:78:7f:98:64:ee:a8:0f:b5:95:3d:98:35:30:ad:
         6c:84:6e:1a:39:3f:9d:8b:3e:ed:bc:1b:e4:6e:e0:5a:40:6a:
         8d:70:36:36:79:3f:34:08:27:e3:12:fa:70:77:69:db:e5:82:
         0d:68:71:2f:1d:52:37:20:9a:a0:4e:bd:c2:9b:bd:d4:de:3e:
         51:45:d1:f6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBGMzFDzTldP4dyRu4acYJjW2K2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1NDBaFw0yNzAyMDQxMTQwNDBaMDMxMTAvBgNV
BAMTKEVGQjA0RjlEOEQ0RTc1M0M1QUQ5MDExMzhERjZCOUZDOEIzNzdCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDE7RANoWNjpdlDuzbwwzxZpG
yZS1ic1CSX8ChYRfqv3iql/LwZgv6+ozequPLareZ5hb1JuhUIc3SMMtmMfjOrmk
4bmRxs4Wb9krRxinHNsAGx3HHUFyVzsqsLivyTewv2s5ILY2DTp/QlrMvwPnMKw7
yOCrvL3j7FSRO3le3RWlkyKuFOo3ivrkX36HtDdgLfoE1kw9FAMEf3Li9RqyRmxD
Yo1/hYyA2knUQu4d7OkChKDDZJX7nQtlsuFjx7ulctfpmVJ4Esl4ag3A9PIsypmK
23jJWUBVBVz9h5sQmgtcBubak+PX/8xkSQQhItOcBaif4rd7UCLxkwU02+cBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU77BPnY1OdTxa2QETjfa5/Is3e6kwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNjM4MmUzMTM5MzcyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajF1DANBgkqhkiG9w0BAQsFAAOCAQEAV4Jf
RRyx3igxhpMpLYZwFyuRpvzfqvHfvk5JYvY2us7hR4cAEXxulgGvvZk1K6uDLjP+
vkqSikruSj30E5f8QKz1a1NmECOXjCi3CxzhDJ3hcLWMfid6wRb4k+rQF49k1C54
Q0j364VYIycRcg3PDeCfKXFrLaxuXnwvOPFkhilCVwHm3Cp2cQD8AK4dB1BZpnDw
HMaD244h/LSfCwNBaNhqCTas9t84Mu0ul7UwS91CKxmIEo5wHXh/mGTuqA+1lT2Y
NTCtbIRuGjk/nYs+7bwb5G7gWkBqjXA2Nnk/NAgn4xL6cHdp2+WCDWhxLx1SNyCa
oE69wpu91N4+UUXR9g==
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:02 2026 by rpki-client