Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32322d3232203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32322d3232203d3e20323632373133.roa (raw, json)
Hash identifier:          IZe3vcsjju3bBZrYEsJQocFFx0pOkqSG/GjpsQHQbEs=
Subject key identifier:   E4:BA:29:D9:C0:0D:29:39:A4:94:DF:81:7F:D0:EA:0A:AE:6A:A7:44
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       12B24249B6ADDD348F8CC961133033BD43D6A2F4
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32322d3232203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:45 +0000
ROA not before:           Thu 22 Jan 2026 18:57:45 +0000
ROA not after:            Thu 21 Jan 2027 19:02:45 +0000
asID:                     262713
IP address blocks:        186.208.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b2:42:49:b6:ad:dd:34:8f:8c:c9:61:13:30:33:bd:43:d6:a2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:45 2026 GMT
            Not After : Jan 21 19:02:45 2027 GMT
        Subject: CN=E4BA29D9C00D2939A494DF817FD0EA0AAE6AA744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:80:e8:16:09:41:29:db:42:d7:40:7f:81:
                    10:1e:ce:77:35:cf:8c:91:8b:f4:da:40:70:6b:2d:
                    16:da:f7:d2:b6:73:06:8c:81:57:6a:ff:99:a8:65:
                    2f:07:f2:f3:ec:93:f8:5f:a5:86:32:57:4c:cd:e7:
                    4f:9d:28:a5:1d:72:24:45:95:7f:b3:bc:85:1d:13:
                    6c:d4:9f:62:ce:0a:77:e7:43:40:0e:a0:ca:c9:6b:
                    4c:c3:1d:1f:74:97:78:55:12:8b:20:f8:52:b2:f6:
                    be:a5:1c:7b:87:00:12:67:67:84:68:2e:7c:e2:a7:
                    a7:2f:09:d4:86:94:ca:c0:5c:cc:3f:7c:d6:f8:92:
                    83:8b:e6:f7:9f:fa:c7:47:21:cf:de:55:46:89:65:
                    f4:f1:5d:df:d0:35:37:57:17:b0:9d:77:ca:97:7d:
                    7b:da:a8:ad:cf:bd:7d:e1:9b:8d:90:da:94:7e:21:
                    72:3c:f6:e5:11:e2:ff:a3:28:a1:b9:fc:ac:64:f8:
                    2a:a7:40:af:22:74:f8:0a:5a:ec:96:40:56:c2:67:
                    8a:fc:be:8e:b2:0b:d8:ba:1f:0d:d0:18:ab:14:59:
                    0e:91:16:cb:ee:a4:0c:b0:8b:55:76:13:6f:17:c3:
                    94:d7:52:e1:f1:fe:18:77:3d:22:af:bc:4b:6f:a4:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BA:29:D9:C0:0D:29:39:A4:94:DF:81:7F:D0:EA:0A:AE:6A:A7:44
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32322d3232203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:33:4b:b8:79:38:d8:e7:70:d2:fc:df:4c:48:fa:fa:41:
         34:03:ef:cd:2a:9d:cf:77:ba:3f:72:7e:e3:92:2f:4e:be:2b:
         cb:43:ca:ab:56:a7:63:ff:90:66:1f:ee:50:a1:96:85:f2:f2:
         9a:09:36:90:85:81:b0:d7:e3:04:ec:4b:34:c0:ba:e5:ed:18:
         4a:a4:8d:01:eb:e4:73:4a:2b:2a:d3:a5:ec:7d:9f:11:bd:06:
         38:2b:16:20:b1:1b:a0:e8:4a:90:50:00:3a:1a:f8:42:9b:26:
         ec:f3:78:19:e4:2e:00:3a:79:2f:63:93:c6:13:4b:55:fa:04:
         1e:5a:22:a4:65:a1:3e:59:0e:ad:14:60:58:b8:3f:fd:a2:df:
         99:70:b4:aa:de:e9:a2:8f:a5:42:73:f5:28:c5:d6:a6:5c:aa:
         79:0e:c6:54:b8:fa:82:87:da:ee:2f:eb:5c:8c:b7:aa:4d:52:
         92:ed:5b:78:41:63:30:a8:f8:9d:ad:4f:58:ff:12:16:22:8e:
         23:2f:f1:e7:33:64:30:79:0e:0d:a8:2d:a8:44:2a:48:94:ca:
         37:a5:4a:ce:9d:25:b4:2e:27:45:22:c1:b5:cd:33:4a:dc:8e:
         43:bf:3d:f2:c7:54:8e:1c:f3:47:0a:24:b2:28:fc:49:96:6b:
         b5:9b:8d:75
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUErJCSbat3TSPjMlhEzAzvUPWovQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkzMjY4QTM3MTQwOTZGQ0REQzEyQThFRUVBMzkzNTI0
MDIxQzg3QjAeFw0yNjAxMjIxODU3NDVaFw0yNzAxMjExOTAyNDVaMDMxMTAvBgNV
BAMTKEU0QkEyOUQ5QzAwRDI5MzlBNDk0REY4MTdGRDBFQTBBQUU2QUE3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjoDoFglBKdtC10B/gRAeznc1
z4yRi/TaQHBrLRba99K2cwaMgVdq/5moZS8H8vPsk/hfpYYyV0zN50+dKKUdciRF
lX+zvIUdE2zUn2LOCnfnQ0AOoMrJa0zDHR90l3hVEosg+FKy9r6lHHuHABJnZ4Ro
Lnzip6cvCdSGlMrAXMw/fNb4koOL5vef+sdHIc/eVUaJZfTxXd/QNTdXF7Cdd8qX
fXvaqK3PvX3hm42Q2pR+IXI89uUR4v+jKKG5/Kxk+CqnQK8idPgKWuyWQFbCZ4r8
vo6yC9i6Hw3QGKsUWQ6RFsvupAywi1V2E28Xw5TXUuHx/hh3PSKvvEtvpFLHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5Lop2cANKTmklN+Bf9DqCq5qp0QwHwYDVR0j
BBgwFoAU6TJoo3FAlvzdwSqO7qOTUkAhyHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN043aVRUNHFHNTRvcmFTY3RlODFja1ZRWThxTWF3QjJwRjMxWDU1RTZY
OTEvMC9FOTMyNjhBMzcxNDA5NkZDRERDMTJBOEVFRUEzOTM1MjQwMjFDODdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5MzI2OEEzNzE0MDk2RkNE
REMxMkE4RUVFQTM5MzUyNDAyMUM4N0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdON2lUVDRxRzU0b3JhU2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAv
MzEzODM2MmUzMjMwMzgyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCutAAMA0GCSqGSIb3DQEBCwUAA4IBAQAEezNLuHk4
2Odw0vzfTEj6+kE0A+/NKp3Pd7o/cn7jki9OvivLQ8qrVqdj/5BmH+5QoZaF8vKa
CTaQhYGw1+ME7Es0wLrl7RhKpI0B6+RzSisq06XsfZ8RvQY4KxYgsRug6EqQUAA6
GvhCmybs83gZ5C4AOnkvY5PGE0tV+gQeWiKkZaE+WQ6tFGBYuD/9ot+ZcLSq3umi
j6VCc/UoxdamXKp5DsZUuPqCh9ruL+tcjLeqTVKS7Vt4QWMwqPidrU9Y/xIWIo4j
L/HnM2QweQ4NqC2oRCpIlMo3pUrOnSW0LidFIsG1zTNK3I5Dvz3yx1SOHPNHCiSy
KPxJlmu1m411
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:15:42 2026 by rpki-client