Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
File:                     3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa (raw, json)
Hash identifier:          z+krIo1TBJcSDrgSUcYa2NyBpwg5GVp/blfy7Cu8S8c=
Subject key identifier:   45:68:A7:99:23:62:39:1C:E3:79:2C:B6:11:9C:29:43:A9:EB:BD:F9
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       0BB3783C5ED51578F8FADD1584E063430AF9B634
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:39 +0000
ROA not before:           Thu 05 Feb 2026 11:35:39 +0000
ROA not after:            Thu 04 Feb 2027 11:40:39 +0000
asID:                     262868
IP address blocks:        177.20.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b3:78:3c:5e:d5:15:78:f8:fa:dd:15:84:e0:63:43:0a:f9:b6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:39 2026 GMT
            Not After : Feb  4 11:40:39 2027 GMT
        Subject: CN=4568A7992362391CE3792CB6119C2943A9EBBDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:29:44:68:0e:35:f5:a8:1a:95:75:f7:ab:
                    11:8e:a6:98:06:45:19:42:8f:a2:2b:98:b3:39:6a:
                    e0:9a:50:f8:97:21:f5:b0:60:67:fe:37:23:43:7f:
                    38:fd:6f:02:e6:99:01:0b:51:43:29:70:7a:97:4a:
                    85:81:41:04:ab:72:38:01:17:26:10:a4:9f:4d:39:
                    27:cf:20:90:0c:12:cd:00:fe:c6:50:57:87:0d:48:
                    12:4e:40:1a:be:49:98:b0:b6:42:00:eb:54:50:6e:
                    e2:3d:6f:7b:6d:3d:b7:8a:7a:e5:17:1b:9f:d8:77:
                    8c:75:70:8a:04:4a:51:cd:89:91:cb:bf:f9:17:13:
                    ef:15:80:b4:8b:c0:9c:30:d8:0b:09:4e:36:63:33:
                    57:5e:06:41:d7:b5:e6:7d:f5:72:4d:c0:f5:b5:b2:
                    59:7f:fe:f7:9d:e5:26:20:21:07:70:bd:f0:8f:71:
                    92:74:81:cf:c2:55:1f:b3:f8:3c:61:45:12:95:cd:
                    9f:32:29:f6:0a:39:d0:46:36:0b:eb:df:cd:7a:8c:
                    f7:1e:70:a6:5f:5a:5b:6f:f5:43:05:22:3d:1d:d0:
                    9b:71:38:83:e1:f9:c5:2e:32:60:b6:6d:7d:42:d1:
                    96:e1:7c:09:c3:8a:86:33:5e:3b:61:de:d0:c5:61:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:A7:99:23:62:39:1C:E3:79:2C:B6:11:9C:29:43:A9:EB:BD:F9
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:a1:d7:3f:c1:fa:11:9e:18:e0:75:79:b5:a5:08:a0:b1:f6:
         40:89:a4:1a:ad:33:72:ce:99:5c:d9:af:69:1e:7c:61:d6:a1:
         78:af:fd:f5:db:85:0b:ab:9b:62:4b:bc:1c:54:e8:3c:b0:b5:
         34:7c:dc:df:27:82:2e:85:5d:0a:2f:bb:28:d5:66:08:76:54:
         38:81:72:8e:3e:8b:0c:84:c2:02:9e:f1:c9:24:cc:5b:b0:68:
         14:ce:25:65:dc:08:27:21:a5:79:07:fd:d0:a3:57:c5:47:15:
         23:66:d8:8e:b1:44:59:d4:5d:f4:2a:6e:d1:bd:5d:52:75:b2:
         bd:f2:e6:e2:68:5b:d4:8d:20:92:d0:6e:65:c3:d1:d1:06:d5:
         be:ac:a7:17:17:d2:2e:9d:93:86:16:9a:b5:fe:9d:6d:25:54:
         5e:95:50:af:c3:01:bc:3b:a9:2a:39:6f:a0:cf:8f:cf:a3:c8:
         6c:90:15:86:32:ed:0f:41:fb:52:0f:37:86:43:da:6c:e0:7e:
         17:4b:76:f5:04:93:a6:99:4b:ff:1c:1c:be:a7:0b:a1:39:ad:
         8d:6e:ec:20:97:6d:fe:91:aa:33:73:27:88:79:8f:23:8d:27:
         5a:a1:aa:93:6d:5c:10:cb:7f:f4:fc:16:6e:dd:44:ba:2d:20:
         f4:14:a8:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC7N4PF7VFXj4+t0VhOBjQwr5tjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1MzlaFw0yNzAyMDQxMTQwMzlaMDMxMTAvBgNV
BAMTKDQ1NjhBNzk5MjM2MjM5MUNFMzc5MkNCNjExOUMyOTQzQTlFQkJERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIilEaA419agalXX3qxGOppgG
RRlCj6IrmLM5auCaUPiXIfWwYGf+NyNDfzj9bwLmmQELUUMpcHqXSoWBQQSrcjgB
FyYQpJ9NOSfPIJAMEs0A/sZQV4cNSBJOQBq+SZiwtkIA61RQbuI9b3ttPbeKeuUX
G5/Yd4x1cIoESlHNiZHLv/kXE+8VgLSLwJww2AsJTjZjM1deBkHXteZ99XJNwPW1
sll//ved5SYgIQdwvfCPcZJ0gc/CVR+z+DxhRRKVzZ8yKfYKOdBGNgvr3816jPce
cKZfWltv9UMFIj0d0JtxOIPh+cUuMmC2bX1C0ZbhfAnDioYzXjth3tDFYTBBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURWinmSNiORzjeSy2EZwpQ6nrvfkwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNzM3MmUzMjMwMmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxFNAwDQYJKoZIhvcNAQELBQADggEBAJGh1z/B
+hGeGOB1ebWlCKCx9kCJpBqtM3LOmVzZr2kefGHWoXiv/fXbhQurm2JLvBxU6Dyw
tTR83N8ngi6FXQovuyjVZgh2VDiBco4+iwyEwgKe8ckkzFuwaBTOJWXcCCchpXkH
/dCjV8VHFSNm2I6xRFnUXfQqbtG9XVJ1sr3y5uJoW9SNIJLQbmXD0dEG1b6spxcX
0i6dk4YWmrX+nW0lVF6VUK/DAbw7qSo5b6DPj8+jyGyQFYYy7Q9B+1IPN4ZD2mzg
fhdLdvUEk6aZS/8cHL6nC6E5rY1u7CCXbf6RqjNzJ4h5jyONJ1qhqpNtXBDLf/T8
Fm7dRLotIPQUqMM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:08 2026 by rpki-client