Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa
File:                     3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          qyQZrDSsXbEYCT059PnfCV3M0uf4H2C/yszPqN7XCL4=
Subject key identifier:   12:AC:31:45:5C:2C:85:0D:3D:94:10:D1:C2:A9:7F:0B:C8:95:29:A3
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       356C13B2E55F670FCAF8C3ED00D5A16C3F37B9A9
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa
Signing time:             Wed 04 Feb 2026 12:15:01 +0000
ROA not before:           Wed 04 Feb 2026 12:10:01 +0000
ROA not after:            Wed 03 Feb 2027 12:15:01 +0000
asID:                     263665
IP address blocks:        170.150.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6c:13:b2:e5:5f:67:0f:ca:f8:c3:ed:00:d5:a1:6c:3f:37:b9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Feb  4 12:10:01 2026 GMT
            Not After : Feb  3 12:15:01 2027 GMT
        Subject: CN=12AC31455C2C850D3D9410D1C2A97F0BC89529A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:0f:8c:2d:2a:f3:2b:39:83:ab:cc:c7:c3:
                    09:9d:e3:85:71:85:90:94:cd:80:3b:45:f5:d3:53:
                    55:45:b2:23:65:27:5c:47:c4:48:e1:bb:66:2a:ed:
                    a1:a3:12:6a:ab:85:f4:ec:4d:7d:16:d7:59:1f:7e:
                    99:48:5c:47:d1:76:ad:63:50:50:c0:f0:fb:5c:91:
                    92:b2:66:e9:01:b9:66:8b:c6:cc:ed:c8:56:9b:d2:
                    c6:f3:35:fc:12:8c:27:7a:52:a4:83:0b:07:05:09:
                    4d:8f:75:2c:da:0b:42:70:24:d8:75:92:5b:42:68:
                    fb:67:15:15:37:a0:6d:d0:29:b6:46:0e:92:f7:c7:
                    99:26:c7:dc:79:73:f2:b0:56:88:a5:4a:cb:50:82:
                    c0:a8:24:76:5b:bd:91:19:55:18:ca:41:19:51:03:
                    18:7d:03:c8:85:78:a9:4c:46:d8:b3:fd:85:80:5b:
                    89:4a:fe:17:11:5c:20:8f:b9:b8:12:d4:b5:ef:78:
                    bb:f7:c3:88:79:4b:6f:72:a8:2f:2b:1a:9a:95:b9:
                    04:76:49:cd:29:bd:8e:5f:cd:ca:c5:a9:87:40:93:
                    50:f5:59:f8:d9:f7:d1:d2:8e:a7:90:45:7d:c1:99:
                    20:d6:28:24:1d:f4:86:cb:e7:ba:77:08:41:ca:da:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AC:31:45:5C:2C:85:0D:3D:94:10:D1:C2:A9:7F:0B:C8:95:29:A3
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3137302e3135302e3131322e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:5c:d7:99:49:56:f8:2e:a4:fb:a6:df:ab:b6:1e:d8:a8:
         a8:ec:5e:1f:4c:fa:84:1d:bb:f5:23:68:b2:3b:95:2a:8f:d8:
         a6:7c:56:37:63:40:90:0c:38:12:b5:7a:10:ce:3f:12:1e:d0:
         ee:28:ad:99:39:ff:31:36:ae:d8:dd:15:46:23:80:b9:d4:f5:
         a7:f5:47:12:f6:b0:05:1c:95:f5:0f:0f:15:07:b8:5c:1c:47:
         8b:f7:5c:21:8a:2d:8f:c7:3c:78:0e:f5:3b:47:ea:56:ed:cb:
         b8:c7:bc:c8:3c:7c:c4:ce:fc:65:fb:49:ed:d0:2b:56:5c:f2:
         14:75:2a:4b:fa:02:b9:4a:c1:12:56:ec:75:14:b6:07:ab:71:
         7e:95:73:9c:89:a3:97:96:40:b9:b4:5e:33:d6:8e:f8:a9:79:
         13:d6:53:50:40:20:e9:4a:00:25:bf:59:8d:40:4d:be:66:87:
         d2:42:65:e1:20:4b:d5:3f:48:50:8f:36:d2:ae:f5:ef:f0:39:
         ca:09:1e:06:2a:94:93:fb:fa:08:fe:e0:d5:bc:22:62:0c:44:
         a8:0f:66:ed:20:a1:3c:b6:16:4e:c4:d7:8a:a1:99:f7:bd:7c:
         ba:5b:59:ba:cc:f1:7e:91:f3:cf:95:a5:08:a0:f7:f1:da:30:
         ba:0b:56:b9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNWwTsuVfZw/K+MPtANWhbD83uakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5RDUyQjRBMjY1QTU5OTE4NzEzMzhFRENENTBDMUQx
REVDRTZEMTAeFw0yNjAyMDQxMjEwMDFaFw0yNzAyMDMxMjE1MDFaMDMxMTAvBgNV
BAMTKDEyQUMzMTQ1NUMyQzg1MEQzRDk0MTBEMUMyQTk3RjBCQzg5NTI5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFHw+MLSrzKzmDq8zHwwmd44Vx
hZCUzYA7RfXTU1VFsiNlJ1xHxEjhu2Yq7aGjEmqrhfTsTX0W11kffplIXEfRdq1j
UFDA8PtckZKyZukBuWaLxsztyFab0sbzNfwSjCd6UqSDCwcFCU2PdSzaC0JwJNh1
kltCaPtnFRU3oG3QKbZGDpL3x5kmx9x5c/KwVoilSstQgsCoJHZbvZEZVRjKQRlR
Axh9A8iFeKlMRtiz/YWAW4lK/hcRXCCPubgS1LXveLv3w4h5S29yqC8rGpqVuQR2
Sc0pvY5fzcrFqYdAk1D1WfjZ99HSjqeQRX3BmSDWKCQd9IbL57p3CEHK2sF5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEqwxRVwshQ09lBDRwql/C8iVKaMwHwYDVR0j
BBgwFoAUGZ1StKJlpZkYcTOO3NUMHR3s5tEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC8xOTlENTJCNEEyNjVBNTk5MTg3MTMzOEVEQ0Q1MEMxRDFERUNFNkQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5OUQ1MkI0QTI2NUE1OTkx
ODcxMzM4RURDRDUwQzFEMURFQ0U2RDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzNzMwMmUzMTM1MzAyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM2MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWcDANBgkqhkiG9w0BAQsFAAOCAQEAHCRc
15lJVvgupPum36u2HtioqOxeH0z6hB279SNosjuVKo/YpnxWN2NAkAw4ErV6EM4/
Eh7Q7iitmTn/MTau2N0VRiOAudT1p/VHEvawBRyV9Q8PFQe4XBxHi/dcIYotj8c8
eA71O0fqVu3LuMe8yDx8xM78ZftJ7dArVlzyFHUqS/oCuUrBElbsdRS2B6txfpVz
nImjl5ZAubReM9aO+Kl5E9ZTUEAg6UoAJb9ZjUBNvmaH0kJl4SBL1T9IUI820q71
7/A5ygkeBiqUk/v6CP7g1bwiYgxEqA9m7SChPLYWTsTXiqGZ9718ultZuszxfpHz
z5WlCKD38dowugtWuQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:13 2026 by rpki-client