Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32332d3233203d3e20323632373932.roa
File:                     3230312e37362e3130342e302f32332d3233203d3e20323632373932.roa (raw, json)
Hash identifier:          qupWT8Yt1/mJagTz1DIs2eqTHqHRbtxxvZc6+Oc/8Pw=
Subject key identifier:   BE:2E:2E:01:32:1A:AB:21:99:B8:7A:DD:B7:D0:D4:F3:0B:1A:B9:BC
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       6A2C4E31559FA803D729BC05E20DE587DAFFD161
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32332d3233203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2c:4e:31:55:9f:a8:03:d7:29:bc:05:e2:0d:e5:87:da:ff:d1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=BE2E2E01321AAB2199B87ADDB7D0D4F30B1AB9BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:f6:81:ec:e0:3f:6e:03:c0:e5:86:60:dc:
                    ad:80:52:57:91:e2:c0:f4:62:1f:57:4a:7f:30:a8:
                    62:af:78:50:48:10:70:71:53:15:c0:f8:e7:a1:17:
                    c9:64:e2:01:56:6d:cd:34:96:e0:4c:a0:30:ff:6d:
                    dc:a7:f4:7e:cd:99:52:96:31:d7:27:f3:ee:e1:1c:
                    65:58:8a:dc:57:8f:62:8c:68:f0:35:9d:ed:49:72:
                    60:76:1f:a5:65:94:cd:9c:df:95:fa:a4:58:6b:93:
                    3a:95:07:59:d6:73:7b:a2:67:c6:13:77:2c:e4:1a:
                    b5:be:96:ad:cd:e9:1b:da:ad:06:1e:c8:c0:b1:e7:
                    ec:fc:35:9c:2a:cd:f0:11:28:ad:8b:6a:d6:55:b7:
                    42:c5:c2:d4:8e:3f:82:a6:db:bb:07:ac:30:97:38:
                    bb:33:ad:85:8d:87:e1:55:dd:e5:07:e9:0d:85:5b:
                    3c:79:14:68:ce:b3:4c:8e:58:b5:51:70:67:e8:6c:
                    98:74:d6:75:6e:ee:63:23:a4:3b:de:c3:ef:e6:c7:
                    93:9a:71:a9:bc:c2:b9:f0:14:a9:91:1c:ff:b5:cc:
                    73:9b:c7:87:84:f4:fc:c7:20:44:33:68:fb:47:df:
                    83:21:2c:d1:35:be:85:4f:4e:00:d8:dd:a6:40:22:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2E:2E:01:32:1A:AB:21:99:B8:7A:DD:B7:D0:D4:F3:0B:1A:B9:BC
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130342e302f32332d3233203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:47:c1:89:f3:b1:84:69:b9:23:87:83:92:12:f8:3b:ae:49:
         28:07:11:16:6b:32:be:3c:56:17:7f:73:4e:11:44:f0:8d:d5:
         c2:d0:e0:27:58:5d:05:06:b2:32:20:18:84:13:2f:bf:cb:6f:
         23:09:26:95:e0:ed:48:e7:7b:64:9a:7d:9c:57:03:da:0e:2e:
         af:c9:96:b0:22:c6:c3:b5:7d:b0:1b:20:d1:67:a7:1c:85:32:
         ad:07:9d:66:ec:64:16:44:08:2e:52:63:ce:87:ad:16:df:99:
         10:e2:6a:52:a5:ad:5a:0b:6a:40:91:12:55:06:35:2e:1d:e9:
         01:18:59:f7:ea:a3:70:b2:8f:41:66:2f:cc:97:da:17:f3:b2:
         db:47:d0:13:03:82:5f:0a:8c:b4:81:c9:74:8b:81:b8:d8:9a:
         27:ce:33:c9:e2:64:e2:2a:95:9d:d1:b6:94:f0:f4:db:94:bd:
         ad:1d:36:63:29:4f:ad:1d:fc:3f:9c:cd:c4:98:93:67:88:b8:
         b7:dc:50:3d:ce:1a:2d:52:30:15:de:86:d4:5e:e2:2c:0e:9b:
         d9:ed:03:53:40:94:8b:58:1a:43:1a:ab:a2:48:8e:77:aa:12:
         f2:5d:6b:62:86:b9:4a:89:3c:0f:47:a3:f9:2a:bc:b7:c2:0a:
         cf:33:c4:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaixOMVWfqAPXKbwF4g3lh9r/0WEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNjAyMDYyMTQzNDVaFw0yNzAyMDUyMTQ4NDVaMDMxMTAvBgNV
BAMTKEJFMkUyRTAxMzIxQUFCMjE5OUI4N0FEREI3RDBENEYzMEIxQUI5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupfaB7OA/bgPA5YZg3K2AUleR
4sD0Yh9XSn8wqGKveFBIEHBxUxXA+OehF8lk4gFWbc00luBMoDD/bdyn9H7NmVKW
Mdcn8+7hHGVYitxXj2KMaPA1ne1JcmB2H6VllM2c35X6pFhrkzqVB1nWc3uiZ8YT
dyzkGrW+lq3N6RvarQYeyMCx5+z8NZwqzfARKK2LatZVt0LFwtSOP4Km27sHrDCX
OLszrYWNh+FV3eUH6Q2FWzx5FGjOs0yOWLVRcGfobJh01nVu7mMjpDvew+/mx5Oa
cam8wrnwFKmRHP+1zHObx4eE9PzHIEQzaPtH34MhLNE1voVPTgDY3aZAIpEVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvi4uATIaqyGZuHrdt9DU8wsaubwwHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzEv
MzIzMDMxMmUzNzM2MmUzMTMwMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJTGgwDQYJKoZIhvcNAQELBQADggEBABNHwYnz
sYRpuSOHg5IS+DuuSSgHERZrMr48Vhd/c04RRPCN1cLQ4CdYXQUGsjIgGIQTL7/L
byMJJpXg7Ujne2SafZxXA9oOLq/JlrAixsO1fbAbINFnpxyFMq0HnWbsZBZECC5S
Y86HrRbfmRDialKlrVoLakCRElUGNS4d6QEYWffqo3Cyj0FmL8yX2hfzsttH0BMD
gl8KjLSByXSLgbjYmifOM8niZOIqlZ3RtpTw9NuUva0dNmMpT60d/D+czcSYk2eI
uLfcUD3OGi1SMBXehtRe4iwOm9ntA1NAlItYGkMaq6JIjneqEvJda2KGuUqJPA9H
o/kqvLfCCs8zxCY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:13 2026 by rpki-client