Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
File:                     3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa (raw, json)
Hash identifier:          jhSIufzDuozlAnbWeCxzbRWa5ykBW/ma9zkKnS9QARg=
Subject key identifier:   59:87:70:CE:25:67:E1:09:D9:C0:E5:55:34:71:C8:E4:38:CE:4D:36
Certificate issuer:       /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial:       206CA59E401D67CF23C972FC9926955102B2FEED
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa
Signing time:             Thu 05 Feb 2026 11:27:22 +0000
ROA not before:           Thu 05 Feb 2026 11:22:22 +0000
ROA not after:            Thu 04 Feb 2027 11:27:22 +0000
asID:                     53022
IP address blocks:        177.221.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl
                          rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6c:a5:9e:40:1d:67:cf:23:c9:72:fc:99:26:95:51:02:b2:fe:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
        Validity
            Not Before: Feb  5 11:22:22 2026 GMT
            Not After : Feb  4 11:27:22 2027 GMT
        Subject: CN=598770CE2567E109D9C0E5553471C8E438CE4D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:ed:34:24:58:1e:9f:90:73:66:68:6b:ba:
                    cf:3a:49:99:49:1c:41:5e:3f:cb:07:31:f5:bd:9b:
                    eb:f9:c0:b2:27:e9:08:0b:c2:21:6a:2c:e2:df:fe:
                    b1:e5:6e:ee:95:61:da:5e:57:07:08:a5:ed:af:4b:
                    f2:35:3e:7c:6a:55:79:23:fc:84:a7:9b:cc:03:c1:
                    15:94:cf:60:ec:0f:dd:ae:34:e5:64:35:5c:02:27:
                    83:4e:0d:b4:81:c7:57:03:f5:69:ed:50:9a:b5:7f:
                    de:df:19:2b:f6:34:27:f2:a2:0a:16:7a:83:31:49:
                    35:23:4e:12:47:af:e2:96:5a:d7:6c:a9:7f:1f:b9:
                    df:d0:e6:b6:07:db:7d:bd:b7:89:79:7c:a2:e0:97:
                    8f:f8:d1:d6:5e:a3:6a:5a:0e:1f:0f:89:2b:d8:27:
                    be:b2:a6:d5:c0:6e:c3:e7:a6:dd:7b:96:e1:c3:46:
                    70:33:f0:dd:e3:63:01:de:23:56:ae:38:0d:ae:f4:
                    6b:14:46:52:b1:fa:5d:d3:e9:58:58:b7:94:a2:da:
                    7c:c7:94:78:64:bc:0e:a6:45:9b:cb:e7:6a:ba:96:
                    81:f2:4d:13:5d:8e:c6:9b:3d:ee:1d:2d:b4:03:e0:
                    e5:4a:9e:dc:58:6c:a3:f2:27:3f:4a:e4:49:19:68:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:70:CE:25:67:E1:09:D9:C0:E5:55:34:71:C8:E4:38:CE:4D:36
            X509v3 Authority Key Identifier:
                keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e3232312e3232342e302f32302d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:69:90:2c:05:7c:5f:93:8d:eb:8a:69:85:a4:90:95:7d:d2:
         f7:1a:e2:f0:cb:46:d0:d9:ca:37:e3:d6:5d:d3:3d:8d:a3:47:
         33:f5:86:16:0b:a0:0f:e7:c6:f6:d7:87:5f:f3:52:68:89:f1:
         6b:de:91:c2:a6:9d:fe:dd:7f:0a:4f:fa:ca:90:49:e3:ca:af:
         1a:d6:d6:ad:39:d3:06:28:57:a2:59:39:ab:98:50:d8:62:96:
         43:5c:bc:99:5f:ef:e5:07:22:d4:22:3c:e0:00:db:b0:aa:26:
         a5:9e:9d:ab:32:89:7c:91:70:7f:a3:3d:8f:38:7e:4a:91:06:
         48:05:e9:4b:0c:b2:bd:44:4b:8e:f6:11:74:bf:cd:8f:fc:2a:
         09:e3:d6:0e:24:22:34:8e:86:41:5c:d9:53:d4:9d:8b:c5:2b:
         cd:57:d2:dc:9d:aa:0d:4a:9f:0c:58:51:b7:50:10:ff:a4:e1:
         6d:1b:09:0a:07:0f:cf:4b:16:63:58:c9:69:73:6d:4b:a2:99:
         32:b3:c0:2d:75:fd:7b:9c:5f:80:95:c0:f3:76:16:65:6f:ae:
         15:9e:90:8a:46:b8:59:54:6c:7f:ee:e6:0c:e6:22:23:2a:32:
         a0:b5:c1:06:c1:ec:45:5c:38:db:26:3d:e1:24:fb:13:42:23:
         cb:21:a1:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIGylnkAdZ88jyXL8mSaVUQKy/u0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFNEJBNzZFQzYwREE5OERFOTgxMDNENEM4ODEzMUI0
MjlGMzMyNjAeFw0yNjAyMDUxMTIyMjJaFw0yNzAyMDQxMTI3MjJaMDMxMTAvBgNV
BAMTKDU5ODc3MENFMjU2N0UxMDlEOUMwRTU1NTM0NzFDOEU0MzhDRTREMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIe00JFgen5BzZmhrus86SZlJ
HEFeP8sHMfW9m+v5wLIn6QgLwiFqLOLf/rHlbu6VYdpeVwcIpe2vS/I1PnxqVXkj
/ISnm8wDwRWUz2DsD92uNOVkNVwCJ4NODbSBx1cD9WntUJq1f97fGSv2NCfyogoW
eoMxSTUjThJHr+KWWtdsqX8fud/Q5rYH2329t4l5fKLgl4/40dZeo2paDh8PiSvY
J76yptXAbsPnpt17luHDRnAz8N3jYwHeI1auOA2u9GsURlKx+l3T6VhYt5Si2nzH
lHhkvA6mRZvL52q6loHyTRNdjsabPe4dLbQD4OVKntxYbKPyJz9K5EkZaHAxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWYdwziVn4QnZwOVVNHHI5DjOTTYwHwYDVR0j
BBgwFoAUk+S6duxg2pjemBA9TIgTG0KfMyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERGRmFXSnJaUXpBazFvNFM1b1ZZNXYycEV4RkFFUldmUWNwbjJhSHpB
YVcvMS85M0U0QkE3NkVDNjBEQTk4REU5ODEwM0Q0Qzg4MTMxQjQyOUYzMzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzRTRCQTc2RUM2MERBOThE
RTk4MTAzRDRDODgxMzFCNDI5RjMzMjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhERkZhV0pyWlF6QWsxbzRTNW9WWTV2MnBFeEZBRVJXZlFjcG4yYUh6QWFXLzEv
MzEzNzM3MmUzMjMyMzEyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASx3eAwDQYJKoZIhvcNAQELBQADggEBADVpkCwF
fF+TjeuKaYWkkJV90vca4vDLRtDZyjfj1l3TPY2jRzP1hhYLoA/nxvbXh1/zUmiJ
8WvekcKmnf7dfwpP+sqQSePKrxrW1q050wYoV6JZOauYUNhilkNcvJlf7+UHItQi
POAA27CqJqWenasyiXyRcH+jPY84fkqRBkgF6UsMsr1ES472EXS/zY/8Kgnj1g4k
IjSOhkFc2VPUnYvFK81X0tydqg1KnwxYUbdQEP+k4W0bCQoHD89LFmNYyWlzbUui
mTKzwC11/XucX4CVwPN2FmVvrhWekIpGuFlUbH/u5gzmIiMqMqC1wQbB7EVcONsm
PeEk+xNCI8shocw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:35 2026 by rpki-client