Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          5txIhP1egeX3lHpT3emDykeaVa5jGQUfs1jNs2xsz0k=
Subject key identifier:   63:0B:9E:12:1F:A3:4D:E2:AA:F0:28:34:B4:87:A7:01:68:98:B1:DE
Certificate issuer:       /CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
Certificate serial:       211521CE72971F6FC976914597EDD11738FA6580
Authority key identifier: F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa
Signing time:             Thu 05 Feb 2026 09:00:21 +0000
ROA not before:           Thu 05 Feb 2026 08:55:21 +0000
ROA not after:            Thu 04 Feb 2027 09:00:21 +0000
asID:                     265066
IP address blocks:        168.121.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl
                          rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:15:21:ce:72:97:1f:6f:c9:76:91:45:97:ed:d1:17:38:fa:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1884EF6E788EB8A39510CE0A51DB48C6523379E
        Validity
            Not Before: Feb  5 08:55:21 2026 GMT
            Not After : Feb  4 09:00:21 2027 GMT
        Subject: CN=630B9E121FA34DE2AAF02834B487A7016898B1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5f:14:2c:28:1e:5d:cb:79:0a:0f:d9:79:50:
                    75:64:55:ba:c8:91:ad:8e:8d:ee:a6:e7:39:a6:e2:
                    af:3e:b9:c9:7f:86:6c:2d:d4:81:2c:d2:a9:6f:0e:
                    f4:fd:31:17:00:71:cd:30:72:b1:08:a7:a0:03:9f:
                    0d:0c:47:bb:3c:e4:26:ad:0e:a6:12:94:3d:46:20:
                    52:6c:46:10:bf:89:4e:ca:ba:b1:16:04:da:40:ce:
                    36:e4:35:f6:83:05:77:d6:eb:f7:8e:ff:e8:2b:74:
                    d2:2e:44:ed:8c:4b:d2:c8:f9:f4:6e:cb:30:cb:c2:
                    ee:07:56:0f:74:9c:12:9c:ca:57:50:77:7c:e6:64:
                    fd:a8:57:5d:a0:db:bd:b5:ed:cd:36:55:3e:97:bf:
                    2e:e0:cb:ca:46:7e:b5:65:41:b3:c3:1f:33:2b:af:
                    e8:75:73:45:fe:c2:cd:53:6f:14:17:5a:05:6b:6d:
                    75:75:55:d5:64:71:e6:18:e3:a6:f4:0e:62:d1:b2:
                    eb:56:6c:92:67:11:24:94:d7:8d:87:e1:ac:d1:e0:
                    0d:08:e4:67:06:19:7f:c8:59:25:34:82:d8:b1:ca:
                    11:87:27:97:4c:f5:26:b2:ad:1c:ce:02:eb:45:68:
                    56:c8:bb:77:2b:00:6c:6d:77:d3:8c:89:24:cb:36:
                    6c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:9E:12:1F:A3:4D:E2:AA:F0:28:34:B4:87:A7:01:68:98:B1:DE
            X509v3 Authority Key Identifier:
                keyid:F1:88:4E:F6:E7:88:EB:8A:39:51:0C:E0:A5:1D:B4:8C:65:23:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1884EF6E788EB8A39510CE0A51DB48C6523379E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/1/3136382e3132312e3230302e302f32322d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:5c:52:e7:a0:65:1d:6f:5f:c3:bf:1f:43:1b:b8:94:0c:
         e9:be:39:f6:54:e3:12:d1:4b:af:64:ff:21:1b:7e:ce:87:5d:
         49:a3:4e:bb:65:18:fd:50:80:3b:6d:f3:2f:3e:26:37:17:4d:
         c2:98:44:67:a4:f7:22:e8:33:7c:7f:07:49:ff:74:24:79:e0:
         ad:f3:49:7f:4f:74:87:49:f8:a7:36:72:62:0d:a6:2d:83:67:
         f0:92:8c:ff:06:0a:60:26:d2:0c:b5:ae:63:37:7f:1b:d0:88:
         11:13:ce:36:35:bb:d4:64:82:f7:e7:02:5f:1e:7f:bc:73:73:
         04:34:0d:bf:e8:3a:c3:00:bb:66:31:b0:bd:1a:e5:21:38:8e:
         3c:af:48:95:68:cd:c8:d2:f0:14:64:7b:47:92:79:67:1e:30:
         98:f1:f1:d3:c7:bb:1b:31:b6:b4:2a:c1:22:ad:02:45:74:88:
         18:ae:2f:89:5b:f3:97:f1:ec:f6:71:d4:76:40:08:70:93:47:
         09:f5:9a:4d:da:6b:21:e6:b3:c7:9e:4d:61:54:c7:16:83:bd:
         8e:73:89:90:3e:3f:53:b1:f6:6b:9d:e9:56:79:50:f6:88:5e:
         8a:59:53:9a:2c:38:60:56:c9:92:ca:18:9c:5d:30:8c:58:be:
         db:39:49:73
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIRUhznKXH2/JdpFFl+3RFzj6ZYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4ODRFRjZFNzg4RUI4QTM5NTEwQ0UwQTUxREI0OEM2
NTIzMzc5RTAeFw0yNjAyMDUwODU1MjFaFw0yNzAyMDQwOTAwMjFaMDMxMTAvBgNV
BAMTKDYzMEI5RTEyMUZBMzRERTJBQUYwMjgzNEI0ODdBNzAxNjg5OEIxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsXxQsKB5dy3kKD9l5UHVkVbrI
ka2Oje6m5zmm4q8+ucl/hmwt1IEs0qlvDvT9MRcAcc0wcrEIp6ADnw0MR7s85Cat
DqYSlD1GIFJsRhC/iU7KurEWBNpAzjbkNfaDBXfW6/eO/+grdNIuRO2MS9LI+fRu
yzDLwu4HVg90nBKcyldQd3zmZP2oV12g27217c02VT6Xvy7gy8pGfrVlQbPDHzMr
r+h1c0X+ws1TbxQXWgVrbXV1VdVkceYY46b0DmLRsutWbJJnESSU142H4azR4A0I
5GcGGX/IWSU0gtixyhGHJ5dM9SayrRzOAutFaFbIu3crAGxtd9OMiSTLNmyXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUYwueEh+jTeKq8Cg0tIenAWiYsd4wHwYDVR0j
BBgwFoAU8YhO9ueI64o5UQzgpR20jGUjN54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzNVd3RBUkwyZ0dvWHdub3E5VGtYOFZldTNReml1c3NpWGNISlBIMUNY
VGovMS9GMTg4NEVGNkU3ODhFQjhBMzk1MTBDRTBBNTFEQjQ4QzY1MjMzNzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxODg0RUY2RTc4OEVCOEEz
OTUxMENFMEE1MURCNDhDNjUyMzM3OUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzczVXd0QVJMMmdHb1h3bm9xOVRrWDhWZXUzUXppdXNzaVhjSEpQSDFDWFRqLzEv
MzEzNjM4MmUzMTMyMzEyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5yDANBgkqhkiG9w0BAQsFAAOCAQEAMeJc
UuegZR1vX8O/H0MbuJQM6b459lTjEtFLr2T/IRt+zoddSaNOu2UY/VCAO23zLz4m
NxdNwphEZ6T3IugzfH8HSf90JHngrfNJf090h0n4pzZyYg2mLYNn8JKM/wYKYCbS
DLWuYzd/G9CIERPONjW71GSC9+cCXx5/vHNzBDQNv+g6wwC7ZjGwvRrlITiOPK9I
lWjNyNLwFGR7R5J5Zx4wmPHx08e7GzG2tCrBIq0CRXSIGK4viVvzl/Hs9nHUdkAI
cJNHCfWaTdprIeazx55NYVTHFoO9jnOJkD4/U7H2a53pVnlQ9oheillTmiw4YFbJ
ksoYnF0wjFi+2zlJcw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:18 2026 by rpki-client