Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa
File:                     3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa (raw, json)
Hash identifier:          QUp2y6XHO4BjQIEmM/bMTbJgd8sdArPH6w5wCEl0LWo=
Subject key identifier:   E8:17:F3:9A:19:5F:9E:39:47:E3:41:0B:50:A4:9B:33:71:0B:A5:55
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       4A9DE4F4C7AAA5C2520BC84DB98245C9953D0D12
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:38 +0000
ROA not before:           Thu 05 Feb 2026 11:35:38 +0000
ROA not after:            Thu 04 Feb 2027 11:40:38 +0000
asID:                     262868
IP address blocks:        177.20.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9d:e4:f4:c7:aa:a5:c2:52:0b:c8:4d:b9:82:45:c9:95:3d:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:38 2026 GMT
            Not After : Feb  4 11:40:38 2027 GMT
        Subject: CN=E817F39A195F9E3947E3410B50A49B33710BA555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:3a:33:ec:a8:cd:bd:82:ac:5c:c6:05:41:
                    37:85:d7:4f:03:e7:65:1f:c7:7e:f1:f5:6d:80:09:
                    8e:1c:02:6f:29:b8:53:13:dc:c4:0f:14:eb:1f:cf:
                    12:ef:43:41:03:1b:78:21:2f:df:69:99:a5:ee:48:
                    21:90:15:be:fc:51:74:9f:e2:8c:c2:4f:29:dd:7d:
                    51:92:b1:32:2e:bc:1b:b6:36:87:b7:c8:5d:e0:0d:
                    18:55:f1:be:ce:90:4d:8f:0f:78:ed:f3:b3:1f:32:
                    87:c6:c6:22:7f:54:4f:cb:76:18:1a:0d:5d:a9:6a:
                    28:8f:1f:cf:ec:50:05:1a:1d:e5:6f:41:7a:82:72:
                    34:71:ba:69:88:6f:14:4b:44:3a:76:f0:c6:b1:d1:
                    04:78:1b:1a:d0:f4:82:22:e9:a0:a2:13:3c:ae:4c:
                    01:6c:fa:03:77:8f:69:f2:13:91:74:5f:f6:66:b6:
                    a9:e7:1e:9b:2f:7b:c9:72:3f:89:0f:6c:3a:62:44:
                    18:7f:8b:09:53:22:f1:91:73:22:f9:6e:28:c4:e5:
                    b0:62:17:c0:11:fb:d5:bd:64:ff:c3:a0:b4:48:0e:
                    ef:1f:06:0f:54:1a:91:93:e5:cf:0d:7b:54:c9:58:
                    60:34:11:2e:39:21:03:96:42:1c:a6:16:53:a2:83:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:F3:9A:19:5F:9E:39:47:E3:41:0B:50:A4:9B:33:71:0B:A5:55
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32312d3231203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:8a:b5:d7:d7:8d:81:3e:58:d7:c5:fa:14:66:54:81:96:41:
         b7:ba:9c:c5:e9:de:7c:87:2f:6d:ae:ed:08:9a:89:e2:34:1f:
         c0:4a:cf:61:49:dc:ff:c9:f8:7b:ad:17:c9:4b:96:74:dd:18:
         d7:46:fd:52:82:63:b4:9f:2d:52:79:e6:d8:bf:32:e5:40:5e:
         e5:fa:52:0b:e5:5a:82:9c:d2:5a:e2:38:61:da:eb:7f:f4:ba:
         4c:55:a4:5f:30:32:33:61:7c:5b:f7:e3:58:ee:e4:a4:e5:46:
         41:e3:3a:6b:3b:4d:ea:a3:84:8b:7f:76:2b:59:03:09:3d:83:
         07:9e:62:b8:7d:0a:71:6d:f7:45:0e:5b:da:d7:1e:48:75:c0:
         9f:85:c3:09:a6:f8:b6:d5:25:12:97:ae:bb:92:78:8a:91:b5:
         ad:fb:f4:55:2e:55:21:e3:bc:7c:64:bc:0e:6a:9f:51:56:5b:
         9a:c3:d5:89:e9:1d:6a:d9:92:a7:52:0e:ad:ce:77:69:a8:38:
         33:5c:5c:8c:f6:73:01:36:28:ba:19:f8:1c:2a:1c:b6:9e:91:
         1a:13:d2:46:cc:98:55:15:93:bc:8a:80:7c:39:19:aa:5b:6c:
         87:93:41:4c:46:8f:2a:38:ce:46:81:40:81:1c:f3:ef:3d:d7:
         0a:6f:ad:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSp3k9MeqpcJSC8hNuYJFyZU9DRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNjAyMDUxMTM1MzhaFw0yNzAyMDQxMTQwMzhaMDMxMTAvBgNV
BAMTKEU4MTdGMzlBMTk1RjlFMzk0N0UzNDEwQjUwQTQ5QjMzNzEwQkE1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJDoz7KjNvYKsXMYFQTeF108D
52Ufx37x9W2ACY4cAm8puFMT3MQPFOsfzxLvQ0EDG3ghL99pmaXuSCGQFb78UXSf
4ozCTyndfVGSsTIuvBu2Noe3yF3gDRhV8b7OkE2PD3jt87MfMofGxiJ/VE/Ldhga
DV2paiiPH8/sUAUaHeVvQXqCcjRxummIbxRLRDp28Max0QR4GxrQ9IIi6aCiEzyu
TAFs+gN3j2nyE5F0X/ZmtqnnHpsve8lyP4kPbDpiRBh/iwlTIvGRcyL5bijE5bBi
F8AR+9W9ZP/DoLRIDu8fBg9UGpGT5c8Ne1TJWGA0ES45IQOWQhymFlOig62JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6BfzmhlfnjlH40ELUKSbM3ELpVUwHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNzM3MmUzMjMwMmUzMjMwMzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxFNAwDQYJKoZIhvcNAQELBQADggEBAAGKtdfX
jYE+WNfF+hRmVIGWQbe6nMXp3nyHL22u7QiaieI0H8BKz2FJ3P/J+HutF8lLlnTd
GNdG/VKCY7SfLVJ55ti/MuVAXuX6UgvlWoKc0lriOGHa63/0ukxVpF8wMjNhfFv3
41ju5KTlRkHjOms7TeqjhIt/ditZAwk9gweeYrh9CnFt90UOW9rXHkh1wJ+Fwwmm
+LbVJRKXrruSeIqRta379FUuVSHjvHxkvA5qn1FWW5rD1YnpHWrZkqdSDq3Od2mo
ODNcXIz2cwE2KLoZ+BwqHLaekRoT0kbMmFUVk7yKgHw5GapbbIeTQUxGjyo4zkaB
QIEc8+891wpvrZw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:06 2026 by rpki-client