Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
File:                     3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier:          sLhknc3VLzCgxt/F98q+Qx3+UE59YA0bqQ3W22FQbgA=
Subject key identifier:   08:FD:9A:1C:07:38:8E:34:8D:A0:7B:E2:92:AA:D9:18:73:4B:AD:8A
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       4DD8B6D77EC60735F08C3BD82EE3D9C72381DF89
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa
Signing time:             Thu 05 Feb 2026 04:46:13 +0000
ROA not before:           Thu 05 Feb 2026 04:41:13 +0000
ROA not after:            Thu 04 Feb 2027 04:46:13 +0000
asID:                     52858
IP address blocks:        170.247.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d8:b6:d7:7e:c6:07:35:f0:8c:3b:d8:2e:e3:d9:c7:23:81:df:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Feb  5 04:41:13 2026 GMT
            Not After : Feb  4 04:46:13 2027 GMT
        Subject: CN=08FD9A1C07388E348DA07BE292AAD918734BAD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:5f:05:b6:d2:28:8d:58:ab:df:cf:fe:a4:
                    68:21:b2:a9:2f:c6:7c:42:34:7f:5f:d1:03:03:16:
                    55:27:e6:5d:54:55:7b:99:c3:56:a8:59:1d:91:9a:
                    bb:5f:c6:ca:27:21:b1:38:3b:8f:00:4a:ae:1c:78:
                    40:a4:3b:91:22:27:86:5e:59:56:31:4f:68:b3:9c:
                    e8:7d:02:e2:c0:53:62:20:30:f6:21:58:d5:b5:96:
                    e8:d7:94:ff:6d:87:1d:82:37:05:72:71:f8:25:42:
                    cb:d1:34:64:65:3a:3b:48:6a:e5:3a:39:44:05:86:
                    86:22:30:6e:72:0a:dd:5a:65:48:59:ea:ba:9e:38:
                    f0:19:cb:7e:1e:14:e7:29:8a:1f:7a:ee:22:ef:4f:
                    5b:58:c0:8f:8b:a3:2e:71:f5:d5:44:ad:b2:86:1c:
                    d2:a3:7c:05:ce:86:a6:13:8b:2b:19:fc:2b:dd:48:
                    d7:8b:d0:ef:2a:45:4b:51:4f:fd:4f:d5:65:bc:b5:
                    1c:01:90:8f:27:ad:a8:be:7b:38:54:d2:23:f3:90:
                    39:d6:bf:b0:64:45:da:32:8d:4a:f2:e5:33:f1:6d:
                    de:72:aa:79:f0:e5:65:79:9e:ef:17:a0:00:3e:f3:
                    9e:03:9e:16:fa:02:08:aa:2d:80:ee:05:af:f6:c4:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:9A:1C:07:38:8E:34:8D:A0:7B:E2:92:AA:D9:18:73:4B:AD:8A
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137302e3234372e3233322e302f32322d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:16:05:97:63:b5:ec:06:53:b7:2a:41:77:d2:20:b8:e5:ac:
         f8:6a:cd:07:c5:b7:8b:4e:08:45:82:2c:6b:0f:1d:ca:ab:32:
         ef:f3:da:b5:fd:24:5a:bd:f8:e9:35:e5:26:b5:89:7d:0c:f1:
         6c:98:14:ee:70:e3:91:88:39:e6:09:2a:83:64:87:c7:db:e9:
         a4:bb:ac:79:b5:00:3d:cc:80:59:b2:d5:00:bf:00:17:2b:7b:
         84:b8:cc:c9:62:13:63:26:e5:5d:a1:e0:ce:bd:ed:01:f8:94:
         43:4b:02:20:58:e9:ff:13:a3:e3:f0:e4:9e:41:8d:e1:19:40:
         12:f1:58:7e:72:20:f6:d4:ca:de:df:42:25:58:23:7d:3a:5c:
         17:fa:1c:7c:1b:02:b9:21:7e:fe:7a:8b:a6:03:69:2f:46:fd:
         8e:98:cd:66:ec:93:e3:b5:98:a2:c0:06:ce:97:75:e5:8e:de:
         42:65:a1:bf:ec:09:98:2d:85:a4:50:91:48:2e:01:1d:85:12:
         05:1e:21:b7:82:3d:b0:e0:8d:c1:67:21:b3:34:bf:71:e5:2d:
         09:88:42:cd:97:76:8f:62:de:b7:d2:9f:0a:3c:30:7f:16:99:
         2b:69:f9:54:e9:3e:29:98:da:53:42:11:10:49:b5:5c:56:02:
         b4:31:70:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTdi2137GBzXwjDvYLuPZxyOB34kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NURGODMzNjk3MjBFRTFBRjUxNEM3Q0E2NjYwQTQ3
NUQxODU5MjAeFw0yNjAyMDUwNDQxMTNaFw0yNzAyMDQwNDQ2MTNaMDMxMTAvBgNV
BAMTKDA4RkQ5QTFDMDczODhFMzQ4REEwN0JFMjkyQUFEOTE4NzM0QkFEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwV8FttIojVir38/+pGghsqkv
xnxCNH9f0QMDFlUn5l1UVXuZw1aoWR2RmrtfxsonIbE4O48ASq4ceECkO5EiJ4Ze
WVYxT2iznOh9AuLAU2IgMPYhWNW1lujXlP9thx2CNwVycfglQsvRNGRlOjtIauU6
OUQFhoYiMG5yCt1aZUhZ6rqeOPAZy34eFOcpih967iLvT1tYwI+Loy5x9dVErbKG
HNKjfAXOhqYTiysZ/CvdSNeL0O8qRUtRT/1P1WW8tRwBkI8nrai+ezhU0iPzkDnW
v7BkRdoyjUry5TPxbd5yqnnw5WV5nu8XoAA+854Dnhb6AgiqLYDuBa/2xCUZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCP2aHAc4jjSNoHvikqrZGHNLrYowHwYDVR0j
BBgwFoAUR2XfgzaXIO4a9RTHymZgpHXRhZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJwa2hrSm10VWZZQXV2YnltVEpQOVEzVTRlS2ZFcEVISmlDcXdNVFNk
REMvMS80NzY1REY4MzM2OTcyMEVFMUFGNTE0QzdDQTY2NjBBNDc1RDE4NTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NjVERjgzMzY5NzIwRUUx
QUY1MTRDN0NBNjY2MEE0NzVEMTg1OTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCcGtoa0ptdFVmWUF1dmJ5bVRKUDlRM1U0ZUtmRXBFSEppQ3F3TVRTZERDLzEv
MzEzNzMwMmUzMjM0MzcyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9+gwDQYJKoZIhvcNAQELBQADggEBADYWBZdj
tewGU7cqQXfSILjlrPhqzQfFt4tOCEWCLGsPHcqrMu/z2rX9JFq9+Ok15Sa1iX0M
8WyYFO5w45GIOeYJKoNkh8fb6aS7rHm1AD3MgFmy1QC/ABcre4S4zMliE2Mm5V2h
4M697QH4lENLAiBY6f8To+Pw5J5BjeEZQBLxWH5yIPbUyt7fQiVYI306XBf6HHwb
Arkhfv56i6YDaS9G/Y6YzWbsk+O1mKLABs6XdeWO3kJlob/sCZgthaRQkUguAR2F
EgUeIbeCPbDgjcFnIbM0v3HlLQmIQs2Xdo9i3rfSnwo8MH8WmStp+VTpPimY2lNC
ERBJtVxWArQxcIs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:35 2026 by rpki-client