Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3138392e37362e38302e302f32302d3332203d3e203532393037.roa
File:                     3138392e37362e38302e302f32302d3332203d3e203532393037.roa (raw, json)
Hash identifier:          9hz4tZHEv8rE+94LII6tfHYeeJlnxOxNb+LK3VcCd7s=
Subject key identifier:   10:0F:BB:05:9B:6A:E1:88:E5:40:98:43:D8:C9:D1:D2:EF:BA:0C:6A
Certificate issuer:       /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial:       3B51D6754AA311F6B1C25487AAA372FFC8700241
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3138392e37362e38302e302f32302d3332203d3e203532393037.roa
Signing time:             Thu 05 Feb 2026 03:59:37 +0000
ROA not before:           Thu 05 Feb 2026 03:54:37 +0000
ROA not after:            Thu 04 Feb 2027 03:59:37 +0000
asID:                     52907
IP address blocks:        189.76.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
                          rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:51:d6:75:4a:a3:11:f6:b1:c2:54:87:aa:a3:72:ff:c8:70:02:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Validity
            Not Before: Feb  5 03:54:37 2026 GMT
            Not After : Feb  4 03:59:37 2027 GMT
        Subject: CN=100FBB059B6AE188E5409843D8C9D1D2EFBA0C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:7e:03:f0:44:5b:28:93:82:3b:2f:c5:a0:
                    6d:61:73:28:41:17:83:6b:c8:35:ca:28:84:56:7a:
                    c2:93:62:8e:c3:39:99:8b:75:26:33:7e:bf:4f:65:
                    65:b5:ab:4c:98:c9:e3:aa:c8:67:ff:d4:8e:2b:9c:
                    41:3b:36:3a:30:ea:df:e6:29:d5:32:f0:9b:ec:b0:
                    fd:a2:75:ac:b2:dc:6d:c8:a5:97:30:0b:2a:ea:81:
                    66:36:8f:1e:6a:5b:36:d1:c9:72:70:36:1e:25:46:
                    41:ef:b9:2b:42:1e:58:1a:4b:0a:b8:96:ff:a3:67:
                    0b:91:84:23:1c:40:60:ef:4a:5d:03:6d:ab:74:c4:
                    df:9b:f2:f7:7d:1d:7a:4b:4c:02:9f:16:9b:ae:42:
                    d9:40:0f:df:d3:64:db:6f:de:96:48:53:95:d4:16:
                    55:c5:b9:13:c8:05:71:6a:17:20:de:5b:10:74:cd:
                    02:03:a9:b5:1c:b0:04:80:00:7d:cf:e7:31:1c:fd:
                    f7:88:89:e2:0e:bd:7a:e1:3b:76:9c:a0:61:1b:17:
                    d9:f2:b3:75:8f:35:05:7f:63:0d:3c:5a:91:a6:31:
                    84:1f:44:68:31:cf:64:30:69:f7:7b:7a:a9:b0:d4:
                    01:85:3f:14:e2:3c:55:5c:2b:c9:ca:b9:f7:39:fe:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0F:BB:05:9B:6A:E1:88:E5:40:98:43:D8:C9:D1:D2:EF:BA:0C:6A
            X509v3 Authority Key Identifier:
                keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/3138392e37362e38302e302f32302d3332203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:be:71:e1:f2:3e:42:3d:22:f5:20:45:05:58:12:c9:22:
         af:84:4f:c0:37:24:a8:bf:cb:41:b6:17:ad:9e:d0:4f:63:45:
         13:af:e2:a1:6b:8c:03:6e:0f:6e:c7:ac:cd:56:87:8e:16:3c:
         0d:72:ec:43:0d:60:eb:9d:f1:65:a3:7f:93:62:da:a0:66:e8:
         03:d8:8d:c1:35:51:f2:f9:40:9c:83:5f:f8:14:09:06:ac:25:
         ff:9e:46:fb:f6:6d:d8:2b:5a:72:ae:94:c4:9a:64:18:e9:28:
         54:ba:6c:c7:7d:a2:86:a9:86:8a:c3:ea:88:1d:f7:b2:17:39:
         53:64:69:a9:92:5a:c9:32:34:55:77:3d:c4:21:34:75:c3:9f:
         74:d6:12:38:09:41:d6:a6:b7:40:d6:92:24:63:6f:55:d5:13:
         c8:3d:b9:80:3b:3d:e8:ae:1b:b9:d6:26:17:15:ed:71:68:b6:
         0a:48:7c:c1:f8:93:54:2e:c6:7b:fa:c5:c4:c5:ac:e6:bc:d1:
         60:7b:f9:3c:f2:56:eb:27:7a:aa:41:b9:51:fd:10:7a:f4:a5:
         5a:e4:92:61:66:c9:14:26:97:e9:4f:9a:e9:58:28:f2:0d:c5:
         53:4f:f1:57:38:d3:79:37:41:b8:9a:92:b1:59:52:94:4e:89:
         37:e2:24:ad
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUO1HWdUqjEfaxwlSHqqNy/8hwAkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0N0QwQzFBODQ3MjVCQ0M4QTA1QjcyNUMyMjI5M0RB
QzQyMEM3OTAeFw0yNjAyMDUwMzU0MzdaFw0yNzAyMDQwMzU5MzdaMDMxMTAvBgNV
BAMTKDEwMEZCQjA1OUI2QUUxODhFNTQwOTg0M0Q4QzlEMUQyRUZCQTBDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSn4D8ERbKJOCOy/FoG1hcyhB
F4NryDXKKIRWesKTYo7DOZmLdSYzfr9PZWW1q0yYyeOqyGf/1I4rnEE7Njow6t/m
KdUy8JvssP2idayy3G3IpZcwCyrqgWY2jx5qWzbRyXJwNh4lRkHvuStCHlgaSwq4
lv+jZwuRhCMcQGDvSl0Dbat0xN+b8vd9HXpLTAKfFpuuQtlAD9/TZNtv3pZIU5XU
FlXFuRPIBXFqFyDeWxB0zQIDqbUcsASAAH3P5zEc/feIieIOvXrhO3acoGEbF9ny
s3WPNQV/Yw08WpGmMYQfRGgxz2Qwafd7eqmw1AGFPxTiPFVcK8nKufc5/qc/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEA+7BZtq4YjlQJhD2MnR0u+6DGowHwYDVR0j
BBgwFoAUhUfQwahHJbzIoFtyXCIpPaxCDHkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUxuY1JDcmNTUHNMeVFwWE4ybThmQ2l2QndKelRKQ25VQUViRlpvZndY
Tm8vMS84NTQ3RDBDMUE4NDcyNUJDQzhBMDVCNzI1QzIyMjkzREFDNDIwQzc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDdEMEMxQTg0NzI1QkND
OEEwNUI3MjVDMjIyOTNEQUM0MjBDNzkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlMbmNSQ3JjU1BzTHlRcFhOMm04ZkNpdkJ3SnpUSkNuVUFFYkZab2Z3WE5vLzEv
MzEzODM5MmUzNzM2MmUzODMwMmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzUzMjM5
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL1MUDANBgkqhkiG9w0BAQsFAAOCAQEAdvu+ceHyPkI9
IvUgRQVYEskir4RPwDckqL/LQbYXrZ7QT2NFE6/ioWuMA24PbseszVaHjhY8DXLs
Qw1g653xZaN/k2LaoGboA9iNwTVR8vlAnINf+BQJBqwl/55G+/Zt2Ctacq6UxJpk
GOkoVLpsx32ihqmGisPqiB33shc5U2RpqZJayTI0VXc9xCE0dcOfdNYSOAlB1qa3
QNaSJGNvVdUTyD25gDs96K4budYmFxXtcWi2Ckh8wfiTVC7Ge/rFxMWs5rzRYHv5
PPJW6yd6qkG5Uf0QevSlWuSSYWbJFCaX6U+a6Vgo8g3FU0/xVzjTeTdBuJqSsVlS
lE6JN+IkrQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:07 2026 by rpki-client