Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa
File:                     3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa (raw, json)
Hash identifier:          yvbemg5C+bEj6jMij3f7Jq3XO92k+sFG6qvUxumcOow=
Subject key identifier:   AA:0A:C6:79:3E:9B:6C:76:7A:EB:D2:26:F0:DF:2F:26:4D:5B:A9:6C
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       1E5A38E426CFE3B4A9727AB00A6B36AF7E3827FF
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa
Signing time:             Thu 05 Feb 2026 17:00:12 +0000
ROA not before:           Thu 05 Feb 2026 16:55:12 +0000
ROA not after:            Thu 04 Feb 2027 17:00:12 +0000
asID:                     265041
IP address blocks:        170.150.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5a:38:e4:26:cf:e3:b4:a9:72:7a:b0:0a:6b:36:af:7e:38:27:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Feb  5 16:55:12 2026 GMT
            Not After : Feb  4 17:00:12 2027 GMT
        Subject: CN=AA0AC6793E9B6C767AEBD226F0DF2F264D5BA96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:d8:3c:b1:b1:13:b8:a8:0f:f5:9a:21:5f:
                    41:61:cb:83:a5:43:df:3e:23:e5:b1:7d:7f:26:4a:
                    81:7b:57:5b:3d:24:8c:85:e0:7a:fd:dd:7e:a3:ad:
                    0e:eb:1c:d3:70:98:c3:37:ed:13:3e:79:9a:23:67:
                    55:c7:36:f5:2d:f0:ba:42:f2:51:d8:dc:1c:95:67:
                    c4:39:3a:32:ad:9d:5e:ca:d4:68:cb:89:e0:11:52:
                    6d:53:01:96:e5:51:a6:a2:1a:da:f0:ae:9c:8b:6f:
                    de:c7:e7:e9:81:ab:09:05:32:e8:b5:d9:8b:bf:e0:
                    d0:bb:52:bf:9a:c2:07:24:f1:8e:90:d5:6f:f2:70:
                    d6:95:94:19:54:4c:1c:6d:a3:85:6c:b6:6b:39:f0:
                    37:bb:b9:d7:1c:67:8a:4e:88:0c:76:c7:c5:0f:63:
                    68:c6:34:1a:44:75:fe:88:7a:e0:65:72:9a:a4:76:
                    ea:30:d2:53:1c:47:1a:1d:6d:80:83:8a:af:fc:8c:
                    4f:84:64:8a:23:b2:63:92:78:9c:99:48:d3:82:93:
                    6c:0f:fe:3c:02:1a:16:77:3d:c0:b6:2e:d1:02:28:
                    c7:64:2a:ad:c6:e5:0d:f2:6f:47:6f:ec:de:d2:58:
                    9a:46:e2:20:cb:ba:43:40:ec:15:51:5a:b7:6b:3c:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0A:C6:79:3E:9B:6C:76:7A:EB:D2:26:F0:DF:2F:26:4D:5B:A9:6C
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32322d3232203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:08:2f:f5:64:4f:1f:93:77:5a:7d:78:f1:8f:65:9b:a5:6c:
         31:99:00:e6:d2:0f:c2:a8:fd:12:b1:4d:f5:fe:39:9c:c2:ca:
         3d:74:5d:ab:00:3a:e8:46:d2:fb:ff:02:b9:1e:04:41:b8:d2:
         26:cf:99:f6:6f:96:2d:5f:12:60:2f:5d:6e:03:ca:96:5e:a0:
         45:64:b6:2a:8b:ef:fe:7a:a6:60:51:a2:55:58:35:71:ff:c3:
         d8:7e:dc:e9:61:f3:7c:fc:a0:6b:be:cc:7c:91:e9:d8:6c:4c:
         19:5d:0e:78:4c:77:4d:5f:5a:b1:30:b9:4c:69:6d:dd:67:d5:
         97:c6:f3:49:c6:7f:27:81:45:2e:be:1d:09:e8:a3:33:e9:85:
         cc:f9:6c:23:a4:6e:ea:2a:4f:39:6a:4f:28:08:6d:d2:af:69:
         07:1d:b6:1e:f4:08:1c:47:8d:eb:b9:54:ca:24:cb:ec:96:1b:
         44:6d:84:f1:08:95:bb:78:4b:59:4d:e5:ed:cb:fe:30:d4:49:
         41:7f:37:6c:45:1a:18:fa:1c:d1:5a:76:5f:50:09:69:a3:61:
         ec:e2:2e:4d:08:4a:fc:88:a5:11:4f:00:23:4b:cb:ff:a7:d2:
         6d:20:5e:99:9b:aa:35:2d:72:08:e3:75:23:9a:a5:6d:75:82:
         0e:53:d7:bc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHlo45CbP47SpcnqwCms2r344J/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCQzNCREJDMjg3NzFFMjNCNkEzQUY4RkJEMzY2NEFD
NEMwRUNCRjAeFw0yNjAyMDUxNjU1MTJaFw0yNzAyMDQxNzAwMTJaMDMxMTAvBgNV
BAMTKEFBMEFDNjc5M0U5QjZDNzY3QUVCRDIyNkYwREYyRjI2NEQ1QkE5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxtg8sbETuKgP9ZohX0Fhy4Ol
Q98+I+WxfX8mSoF7V1s9JIyF4Hr93X6jrQ7rHNNwmMM37RM+eZojZ1XHNvUt8LpC
8lHY3ByVZ8Q5OjKtnV7K1GjLieARUm1TAZblUaaiGtrwrpyLb97H5+mBqwkFMui1
2Yu/4NC7Ur+awgck8Y6Q1W/ycNaVlBlUTBxto4Vstms58De7udccZ4pOiAx2x8UP
Y2jGNBpEdf6IeuBlcpqkduow0lMcRxodbYCDiq/8jE+EZIojsmOSeJyZSNOCk2wP
/jwCGhZ3PcC2LtECKMdkKq3G5Q3yb0dv7N7SWJpG4iDLukNA7BVRWrdrPApJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqgrGeT6bbHZ669Im8N8vJk1bqWwwHwYDVR0j
BBgwFoAUp7w728KHceI7ajr4+9NmSsTA7L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMS9BN0JDM0JEQkMyODc3MUUyM0I2QTNBRjhGQkQzNjY0QUM0QzBFQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QkMzQkRCQzI4NzcxRTIz
QjZBM0FGOEZCRDM2NjRBQzRDMEVDQkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzEv
MzEzNzMwMmUzMTM1MzAyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTMwMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWiDANBgkqhkiG9w0BAQsFAAOCAQEAhwgv
9WRPH5N3Wn148Y9lm6VsMZkA5tIPwqj9ErFN9f45nMLKPXRdqwA66EbS+/8CuR4E
QbjSJs+Z9m+WLV8SYC9dbgPKll6gRWS2Kovv/nqmYFGiVVg1cf/D2H7c6WHzfPyg
a77MfJHp2GxMGV0OeEx3TV9asTC5TGlt3WfVl8bzScZ/J4FFLr4dCeijM+mFzPls
I6Ru6ipPOWpPKAht0q9pBx22HvQIHEeN67lUyiTL7JYbRG2E8QiVu3hLWU3l7cv+
MNRJQX83bEUaGPoc0Vp2X1AJaaNh7OIuTQhK/IilEU8AI0vL/6fSbSBemZuqNS1y
CON1I5qlbXWCDlPXvA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:54 2026 by rpki-client