Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa
File:                     3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa (raw, json)
Hash identifier:          rV/cB5rtyYxjJLJFiLM3FHQQ3q+cUAn49wRVFVV+fg4=
Subject key identifier:   67:66:D0:8E:C9:08:C9:57:FA:09:5F:55:6E:12:E7:61:BC:2B:45:DD
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       6274F2E5DA3916F4D3400095D98438714776B0A1
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa
Signing time:             Thu 05 Feb 2026 07:00:30 +0000
ROA not before:           Thu 05 Feb 2026 06:55:30 +0000
ROA not after:            Thu 04 Feb 2027 07:00:30 +0000
asID:                     263474
IP address blocks:        191.242.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:74:f2:e5:da:39:16:f4:d3:40:00:95:d9:84:38:71:47:76:b0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Feb  5 06:55:30 2026 GMT
            Not After : Feb  4 07:00:30 2027 GMT
        Subject: CN=6766D08EC908C957FA095F556E12E761BC2B45DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:3f:ab:ac:45:57:c9:38:ff:9b:cb:a2:c4:
                    8b:48:55:71:07:9d:e5:e0:8c:a5:9f:14:7e:d2:5a:
                    80:d3:be:7b:cd:23:cc:2a:3d:03:a8:24:33:b5:f7:
                    5c:6b:b6:f5:8d:54:0a:b2:57:58:b0:03:53:5b:2f:
                    0f:a3:72:aa:b2:51:5a:63:a4:bb:f1:9b:64:cf:b7:
                    ef:89:90:c4:24:38:b8:67:df:6d:66:7b:c5:fb:c9:
                    99:bd:e0:b0:b4:bb:aa:83:c7:ae:9c:37:d4:c7:ab:
                    83:5a:e6:66:b0:09:46:88:0e:36:b9:9f:05:ad:94:
                    fd:5d:33:37:ea:ea:65:a7:63:fa:60:1f:59:95:c4:
                    d0:cf:bc:39:fa:d9:97:41:19:6d:c1:6d:df:e6:5a:
                    e0:2f:67:df:f4:dd:fd:8e:be:14:88:15:d2:d8:1f:
                    20:3e:74:e7:8d:c1:97:59:e1:4d:8b:fd:5d:f9:7e:
                    6e:ce:1e:fe:1f:5e:7b:d0:0a:6d:22:a3:1a:26:05:
                    f1:fc:80:21:a7:87:76:ef:d6:59:04:bf:ed:3a:fd:
                    53:6a:67:e9:ea:42:8f:03:c8:94:55:f9:0d:f0:bb:
                    d9:5c:2d:c8:70:36:07:04:d6:f6:b2:1c:d4:08:cf:
                    8e:71:ff:4c:be:19:7d:80:fa:ed:9d:18:ba:0e:8b:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:D0:8E:C9:08:C9:57:FA:09:5F:55:6E:12:E7:61:BC:2B:45:DD
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37362e302f32332d3233203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:f6:aa:23:76:0e:bc:9b:91:77:2d:25:5f:94:43:84:1b:
         98:f0:76:ed:bd:e7:19:9e:2f:bc:49:1d:72:04:12:f6:29:c8:
         9d:07:8e:e1:d7:c6:63:a7:f0:e3:74:d0:4e:4e:ba:75:1c:f5:
         a2:a4:f6:64:9f:42:59:8a:72:23:48:53:4d:9f:37:db:ce:a9:
         bb:53:63:3d:be:04:da:3f:54:0e:67:27:cf:f6:2a:73:80:f4:
         04:49:f7:87:39:e3:88:de:32:1f:7f:1f:b8:13:c7:63:a9:ee:
         3c:1f:c2:dd:07:b3:99:fe:e1:d4:40:99:84:6b:0d:10:98:c5:
         78:7c:6e:52:47:a0:1a:b2:05:b0:75:3d:c0:4a:cc:a4:3d:4a:
         98:ba:23:45:de:5d:5a:a1:21:c0:44:3a:60:ce:70:8e:b8:2c:
         6a:e5:a2:c3:b0:fb:d4:51:20:83:0e:23:ac:04:a0:03:eb:ce:
         1d:bf:3e:8c:b2:dd:3d:3a:f0:8b:e3:c4:d0:29:ab:60:c9:30:
         39:bc:f9:66:10:80:90:67:49:ce:79:2e:a9:c5:03:05:43:5d:
         61:dc:35:b3:6e:05:06:67:31:2a:31:9d:db:8d:36:c2:32:99:
         75:9f:42:ce:9a:32:f6:83:a5:6b:ea:cc:d6:a5:35:74:57:ed:
         b1:95:a1:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYnTy5do5FvTTQACV2YQ4cUd2sKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2NDIyN0YwRjI3ODUyQUVFQTc2OTQ4QTExOEQzOEYw
MUQ3NjQ1RTAeFw0yNjAyMDUwNjU1MzBaFw0yNzAyMDQwNzAwMzBaMDMxMTAvBgNV
BAMTKDY3NjZEMDhFQzkwOEM5NTdGQTA5NUY1NTZFMTJFNzYxQkMyQjQ1REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhcD+rrEVXyTj/m8uixItIVXEH
neXgjKWfFH7SWoDTvnvNI8wqPQOoJDO191xrtvWNVAqyV1iwA1NbLw+jcqqyUVpj
pLvxm2TPt++JkMQkOLhn321me8X7yZm94LC0u6qDx66cN9THq4Na5mawCUaIDja5
nwWtlP1dMzfq6mWnY/pgH1mVxNDPvDn62ZdBGW3Bbd/mWuAvZ9/03f2OvhSIFdLY
HyA+dOeNwZdZ4U2L/V35fm7OHv4fXnvQCm0ioxomBfH8gCGnh3bv1lkEv+06/VNq
Z+nqQo8DyJRV+Q3wu9lcLchwNgcE1vayHNQIz45x/0y+GX2A+u2dGLoOixKlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ2bQjskIyVf6CV9VbhLnYbwrRd0wHwYDVR0j
BBgwFoAU5WQifw8nhSrup2lIoRjTjwHXZF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tvdkZaYXg1VWg5VzlqNGE3akZuQWUzNGhHcm9mTjVvWjZDeEFzQWhi
ek4vMS9FNTY0MjI3RjBGMjc4NTJBRUVBNzY5NDhBMTE4RDM4RjAxRDc2NDVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NjQyMjdGMEYyNzg1MkFF
RUE3Njk0OEExMThEMzhGMDFENzY0NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdLb3ZGWmF4NVVoOVc5ajRhN2pGbkFlMzRoR3JvZk41b1o2Q3hBc0FoYnpOLzEv
MzEzOTMxMmUzMjM0MzIyZTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/8kwwDQYJKoZIhvcNAQELBQADggEBAAWd9qoj
dg68m5F3LSVflEOEG5jwdu295xmeL7xJHXIEEvYpyJ0HjuHXxmOn8ON00E5OunUc
9aKk9mSfQlmKciNIU02fN9vOqbtTYz2+BNo/VA5nJ8/2KnOA9ARJ94c544jeMh9/
H7gTx2Op7jwfwt0Hs5n+4dRAmYRrDRCYxXh8blJHoBqyBbB1PcBKzKQ9Spi6I0Xe
XVqhIcBEOmDOcI64LGrlosOw+9RRIIMOI6wEoAPrzh2/Poyy3T068IvjxNApq2DJ
MDm8+WYQgJBnSc55LqnFAwVDXWHcNbNuBQZnMSoxnduNNsIymXWfQs6aMvaDpWvq
zNalNXRX7bGVoS0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:06 2026 by rpki-client