Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
File:                     3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa (raw, json)
Hash identifier:          d4TWux07kE6TN2HA10zeQ6xzSeoY9AK9CCZM+aznfyE=
Subject key identifier:   12:22:02:1E:13:9E:3C:9E:A3:72:06:10:F3:09:45:EF:27:B4:4E:58
Certificate issuer:       /CN=E116A9492035CFBB15FA99D51C520F4FAD579530
Certificate serial:       143B227887EA0EE33E884D7EACF183193EE65C1C
Authority key identifier: E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
Signing time:             Wed 04 Feb 2026 20:34:20 +0000
ROA not before:           Wed 04 Feb 2026 20:29:20 +0000
ROA not after:            Wed 03 Feb 2027 20:34:20 +0000
asID:                     271031
IP address blocks:        186.250.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3b:22:78:87:ea:0e:e3:3e:88:4d:7e:ac:f1:83:19:3e:e6:5c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E116A9492035CFBB15FA99D51C520F4FAD579530
        Validity
            Not Before: Feb  4 20:29:20 2026 GMT
            Not After : Feb  3 20:34:20 2027 GMT
        Subject: CN=1222021E139E3C9EA3720610F30945EF27B44E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:3c:c5:f1:91:a1:02:26:1d:fb:be:c3:09:
                    09:f7:a8:bc:d3:b0:89:ca:02:ff:36:9f:92:a1:66:
                    6f:57:a3:e4:ff:8b:ab:c0:25:de:32:9a:b8:1d:c4:
                    ef:7f:77:a1:ec:80:b1:53:de:7a:67:86:e3:09:8b:
                    46:0d:37:81:48:e3:a4:7b:99:1e:52:7a:6e:f4:fd:
                    6d:d1:f8:06:27:6c:d7:58:07:1a:64:0a:97:62:b1:
                    86:d4:71:ae:f8:01:3b:fe:fe:d3:62:4b:70:4f:ef:
                    7b:80:2e:c5:19:12:02:19:e7:7e:dd:b4:7e:fb:82:
                    38:af:29:5b:0b:ee:9a:a0:96:d6:08:ed:d6:c5:3f:
                    b0:98:c7:bb:ab:00:fd:8f:14:44:c2:93:b6:ab:2c:
                    c2:78:72:45:00:bc:ea:3c:6a:f7:22:a1:2b:b5:b7:
                    80:bc:ed:1e:ee:d3:8c:7a:f6:88:32:62:de:47:3c:
                    74:16:e1:56:2c:10:a5:d8:92:a6:35:48:1b:88:9f:
                    b6:56:54:82:b4:fa:f5:c0:76:af:3a:68:18:43:81:
                    7e:0e:6f:08:b8:46:25:ec:fa:82:35:56:df:3a:19:
                    ef:75:9b:28:79:f7:d9:9e:bb:a0:25:d5:71:89:63:
                    08:ed:d0:36:19:36:77:5e:98:dd:e4:76:9a:3f:5d:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:22:02:1E:13:9E:3C:9E:A3:72:06:10:F3:09:45:EF:27:B4:4E:58
            X509v3 Authority Key Identifier:
                keyid:E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:0c:13:ba:70:55:e5:53:ef:36:51:87:12:0a:4b:de:d4:
         3f:5d:b5:4e:0f:dd:ca:42:e6:8d:f4:2a:53:c5:8e:ee:7e:b9:
         03:48:6a:97:9e:ae:9f:b6:f0:91:11:21:4a:bd:3d:35:61:67:
         d2:98:98:cc:f3:cf:5d:8b:a9:a9:e6:1d:c9:a3:69:28:18:50:
         32:d5:27:a9:21:64:ed:1c:40:c8:73:d4:31:d1:e5:e4:a7:b5:
         8e:4c:69:d7:f9:ac:44:3f:94:5a:59:2c:95:b5:00:53:06:b9:
         e7:5d:6c:9c:31:5a:a5:ed:e9:3c:fd:2d:50:e1:c2:16:51:e4:
         c0:c6:43:69:37:f3:d7:19:f1:10:56:16:03:b8:e7:ac:0f:56:
         6d:23:33:37:94:72:5b:ba:6a:02:5b:3d:2f:38:8b:73:d5:95:
         03:31:e2:73:5a:5b:7f:e6:8b:47:13:ad:41:ce:92:b6:02:be:
         d6:fb:27:f4:12:28:c9:57:62:8d:7f:80:c9:1d:22:c7:fb:0c:
         71:6e:25:c2:24:e9:00:7d:40:0c:7c:2c:f0:40:64:b0:0f:b4:
         0a:74:2f:c4:68:32:77:6c:2e:b1:a2:8d:13:9f:59:60:b5:87:
         f4:f8:7c:c8:0d:a5:9e:e2:8f:1c:60:06:97:e8:33:3b:d1:20:
         d4:87:24:f6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFDsieIfqDuM+iE1+rPGDGT7mXBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTExNkE5NDkyMDM1Q0ZCQjE1RkE5OUQ1MUM1MjBGNEZB
RDU3OTUzMDAeFw0yNjAyMDQyMDI5MjBaFw0yNzAyMDMyMDM0MjBaMDMxMTAvBgNV
BAMTKDEyMjIwMjFFMTM5RTNDOUVBMzcyMDYxMEYzMDk0NUVGMjdCNDRFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsDzF8ZGhAiYd+77DCQn3qLzT
sInKAv82n5KhZm9Xo+T/i6vAJd4ymrgdxO9/d6HsgLFT3npnhuMJi0YNN4FI46R7
mR5Sem70/W3R+AYnbNdYBxpkCpdisYbUca74ATv+/tNiS3BP73uALsUZEgIZ537d
tH77gjivKVsL7pqgltYI7dbFP7CYx7urAP2PFETCk7arLMJ4ckUAvOo8avcioSu1
t4C87R7u04x69ogyYt5HPHQW4VYsEKXYkqY1SBuIn7ZWVIK0+vXAdq86aBhDgX4O
bwi4RiXs+oI1Vt86Ge91myh599meu6Al1XGJYwjt0DYZNndemN3kdpo/Xdg5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEiICHhOePJ6jcgYQ8wlF7ye0TlgwHwYDVR0j
BBgwFoAU4RapSSA1z7sV+pnVHFIPT61XlTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0dVN3pieXBXSFNOUnZ4d3FidkczQm01Q0ZSNHF1ZGZMY2VvZ0RYYXFB
M00vMS9FMTE2QTk0OTIwMzVDRkJCMTVGQTk5RDUxQzUyMEY0RkFENTc5NTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxMTZBOTQ5MjAzNUNGQkIx
NUZBOTlENTFDNTIwRjRGQUQ1Nzk1MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHVTd6YnlwV0hTTlJ2eHdxYnZHM0JtNUNGUjRxdWRmTGNlb2dEWGFxQTNNLzEv
MzEzODM2MmUzMjM1MzAyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+jwwDQYJKoZIhvcNAQELBQADggEBADy+DBO6
cFXlU+82UYcSCkve1D9dtU4P3cpC5o30KlPFju5+uQNIapeerp+28JERIUq9PTVh
Z9KYmMzzz12LqanmHcmjaSgYUDLVJ6khZO0cQMhz1DHR5eSntY5Madf5rEQ/lFpZ
LJW1AFMGueddbJwxWqXt6Tz9LVDhwhZR5MDGQ2k389cZ8RBWFgO456wPVm0jMzeU
clu6agJbPS84i3PVlQMx4nNaW3/mi0cTrUHOkrYCvtb7J/QSKMlXYo1/gMkdIsf7
DHFuJcIk6QB9QAx8LPBAZLAPtAp0L8RoMndsLrGijROfWWC1h/T4fMgNpZ7ijxxg
BpfoMzvRINSHJPY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:03 2026 by rpki-client