Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
File:                     3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa (raw, json)
Hash identifier:          hJl8WU8efctbsmg5i22RUymmIWAJfMjZ4VlayhAjpOA=
Subject key identifier:   9A:B4:BC:24:10:C2:31:02:B9:A2:96:7E:3E:6A:6F:B7:6D:A3:6B:DF
Certificate issuer:       /CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
Certificate serial:       28B0A14D7FCFC30ABBDAFF9D60BBCA57CEAA891F
Authority key identifier: 66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa
Signing time:             Thu 05 Feb 2026 10:08:27 +0000
ROA not before:           Thu 05 Feb 2026 10:03:27 +0000
ROA not after:            Thu 04 Feb 2027 10:08:27 +0000
asID:                     263285
IP address blocks:        186.235.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl
                          rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b0:a1:4d:7f:cf:c3:0a:bb:da:ff:9d:60:bb:ca:57:ce:aa:89:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B93796F42390B681A3DC1CC99F8E8E43CE7BDF
        Validity
            Not Before: Feb  5 10:03:27 2026 GMT
            Not After : Feb  4 10:08:27 2027 GMT
        Subject: CN=9AB4BC2410C23102B9A2967E3E6A6FB76DA36BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:08:c7:f9:25:7b:b9:ad:75:98:f6:0b:aa:
                    59:4c:37:91:94:5b:0f:af:e2:a4:e1:2e:d5:7f:56:
                    27:28:8c:73:3a:a7:49:78:2e:9e:b3:5a:8e:52:d7:
                    0d:9e:d1:38:17:56:9f:ce:e7:a8:e9:cc:ac:fc:dd:
                    64:e7:aa:c2:27:90:50:20:16:8d:54:e5:2a:67:fb:
                    31:4f:39:2b:44:75:a7:57:99:c4:d4:77:2d:55:be:
                    c0:d3:40:c7:92:fd:ad:56:b9:fc:d9:f0:61:dd:f9:
                    d4:b2:11:b5:9f:b7:6f:77:d6:36:ae:17:3a:cd:e9:
                    dc:b6:40:9e:6f:73:8f:1f:61:3d:a9:7e:a1:bc:06:
                    3c:e8:fb:a4:93:1f:96:12:c5:48:c9:3c:c6:10:b8:
                    a0:57:2f:3a:69:24:fd:cb:23:72:72:af:8b:24:c7:
                    9d:d2:ab:89:0d:5d:a7:9e:fe:f8:ea:d8:6e:5f:bc:
                    dd:20:76:ce:14:58:12:fa:46:ab:f3:5f:07:34:95:
                    c3:d6:b8:bc:c0:64:c8:74:64:69:7d:ac:4b:0c:c8:
                    b5:c2:e4:29:f5:92:9a:fd:e4:40:12:07:5a:cf:64:
                    49:9b:49:e8:0b:ba:5b:76:21:cc:b1:63:f1:eb:88:
                    27:d3:38:cd:e1:71:3e:fe:ae:6e:2e:a9:ed:5a:f7:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B4:BC:24:10:C2:31:02:B9:A2:96:7E:3E:6A:6F:B7:6D:A3:6B:DF
            X509v3 Authority Key Identifier:
                keyid:66:B9:37:96:F4:23:90:B6:81:A3:DC:1C:C9:9F:8E:8E:43:CE:7B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66B93796F42390B681A3DC1CC99F8E8E43CE7BDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VWcXNj3KHEE4ayYvh4gEGFhGtNfySbi1XAoVYe6G25w/1/3138362e3233352e3235322e302f32322d3234203d3e20323633323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d3:01:6d:36:ba:20:c3:f2:6e:38:72:ec:e3:f5:82:d7:9d:
         1d:ee:75:16:6d:9f:30:a3:88:30:91:67:1d:81:ef:ea:fb:48:
         cc:42:b8:cb:ac:8f:a9:7f:cd:73:29:74:ce:b9:8a:6c:8c:b9:
         ae:c8:d1:10:6b:d2:b7:0f:fa:5e:76:ff:de:b7:93:f3:8e:83:
         68:41:27:35:94:88:3e:dd:e5:57:3d:c9:b0:fe:30:74:59:3e:
         aa:98:79:11:75:76:3d:dd:4c:e0:a0:2c:10:fb:e4:80:23:46:
         0c:c1:a5:9c:31:d1:4b:5c:87:b9:b2:2a:5e:ea:68:33:09:40:
         9b:e4:fa:35:56:cd:8f:ca:a3:20:4f:69:13:f8:a2:cd:d2:d1:
         e6:fd:36:c7:33:27:86:72:b0:70:1e:aa:d8:04:d8:18:a2:2c:
         9d:ae:9d:b0:75:96:14:d7:76:02:b6:0a:a3:5a:64:bb:be:cd:
         d0:af:20:5a:92:52:e3:da:2d:23:c0:66:50:7a:ee:7f:05:40:
         ff:8a:3e:e2:39:13:0e:a8:72:ce:32:ae:38:aa:a4:81:0f:ab:
         1e:ef:08:8e:81:11:ee:b1:1b:36:f9:b6:3a:bb:a6:eb:6b:87:
         4d:e1:bd:80:80:47:95:f9:51:bb:4f:f2:d2:5a:a8:88:b8:ff:
         d6:92:94:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKLChTX/Pwwq72v+dYLvKV86qiR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZCOTM3OTZGNDIzOTBCNjgxQTNEQzFDQzk5RjhFOEU0
M0NFN0JERjAeFw0yNjAyMDUxMDAzMjdaFw0yNzAyMDQxMDA4MjdaMDMxMTAvBgNV
BAMTKDlBQjRCQzI0MTBDMjMxMDJCOUEyOTY3RTNFNkE2RkI3NkRBMzZCREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS9QjH+SV7ua11mPYLqllMN5GU
Ww+v4qThLtV/VicojHM6p0l4Lp6zWo5S1w2e0TgXVp/O56jpzKz83WTnqsInkFAg
Fo1U5Spn+zFPOStEdadXmcTUdy1VvsDTQMeS/a1WufzZ8GHd+dSyEbWft2931jau
FzrN6dy2QJ5vc48fYT2pfqG8Bjzo+6STH5YSxUjJPMYQuKBXLzppJP3LI3Jyr4sk
x53Sq4kNXaee/vjq2G5fvN0gds4UWBL6RqvzXwc0lcPWuLzAZMh0ZGl9rEsMyLXC
5Cn1kpr95EASB1rPZEmbSegLult2IcyxY/HriCfTOM3hcT7+rm4uqe1a97DRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmrS8JBDCMQK5opZ+Pmpvt22ja98wHwYDVR0j
BBgwFoAUZrk3lvQjkLaBo9wcyZ+OjkPOe98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFZXY1hOajNLSEVFNGF5WXZoNGdFR0ZoR3ROZnlTYmkxWEFvVlllNkcy
NXcvMS82NkI5Mzc5NkY0MjM5MEI2ODFBM0RDMUNDOTlGOEU4RTQzQ0U3QkRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2QjkzNzk2RjQyMzkwQjY4
MUEzREMxQ0M5OUY4RThFNDNDRTdCREYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhWV2NYTmozS0hFRTRheVl2aDRnRUdGaEd0TmZ5U2JpMVhBb1ZZZTZHMjV3LzEv
MzEzODM2MmUzMjMzMzUyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrr/DANBgkqhkiG9w0BAQsFAAOCAQEAqtMB
bTa6IMPybjhy7OP1gtedHe51Fm2fMKOIMJFnHYHv6vtIzEK4y6yPqX/Ncyl0zrmK
bIy5rsjREGvStw/6Xnb/3reT846DaEEnNZSIPt3lVz3JsP4wdFk+qph5EXV2Pd1M
4KAsEPvkgCNGDMGlnDHRS1yHubIqXupoMwlAm+T6NVbNj8qjIE9pE/iizdLR5v02
xzMnhnKwcB6q2ATYGKIsna6dsHWWFNd2ArYKo1pku77N0K8gWpJS49otI8BmUHru
fwVA/4o+4jkTDqhyzjKuOKqkgQ+rHu8IjoER7rEbNvm2Orum62uHTeG9gIBHlflR
u0/y0lqoiLj/1pKUhQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:12 2026 by rpki-client