Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa (raw, json)
Hash identifier:          SN5eWsErC4wmI7arDan/qJK+cYSMyOkpuJ5h12BAB9I=
Subject key identifier:   1E:7A:08:94:F6:09:F5:3B:1F:D1:4A:BC:31:01:14:3A:FE:31:D3:DC
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       05542B6DAE12391B4DA0ED1CD3156F1D7D50954E
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:29:00 +0000
ROA not before:           Thu 05 Feb 2026 00:24:00 +0000
ROA not after:            Thu 04 Feb 2027 00:29:00 +0000
asID:                     262798
IP address blocks:        186.236.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:54:2b:6d:ae:12:39:1b:4d:a0:ed:1c:d3:15:6f:1d:7d:50:95:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:24:00 2026 GMT
            Not After : Feb  4 00:29:00 2027 GMT
        Subject: CN=1E7A0894F609F53B1FD14ABC3101143AFE31D3DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:9c:b0:80:a4:7e:f6:6e:f2:62:3c:95:f7:
                    d8:ca:9a:35:89:ad:ec:c4:8d:60:09:95:12:8f:4c:
                    0c:8b:27:92:78:80:96:da:97:11:35:10:e0:c2:e1:
                    9f:b2:36:68:46:46:8e:d4:cd:13:e8:48:0b:2d:ab:
                    5e:24:a4:47:92:82:bf:0e:4d:51:26:be:46:f0:81:
                    a5:b1:93:a8:24:cb:bb:67:27:b8:f4:45:0a:f2:bc:
                    f0:14:98:06:af:7f:03:21:59:24:38:b5:2c:30:e7:
                    c0:f4:e1:42:5c:2a:dd:18:31:61:7e:56:21:db:0f:
                    9b:45:73:8e:28:50:f9:a4:38:6d:fa:d5:51:bb:13:
                    35:0f:82:ef:cd:9a:bf:b8:44:7a:36:c2:e3:da:7b:
                    ab:4f:17:0b:6a:15:5d:a7:38:91:72:43:ec:27:d4:
                    76:1f:da:68:2d:0c:c8:f4:0b:df:80:74:87:6c:c6:
                    14:05:9f:b0:a6:8f:2a:68:46:7d:9c:ee:8c:03:75:
                    74:79:cd:2c:a4:03:53:db:3e:22:c4:16:e2:93:59:
                    c2:d9:26:81:51:5a:69:b4:ad:81:60:45:75:d9:f3:
                    e5:87:d2:ea:6d:a5:33:77:2f:4e:e4:1e:de:89:da:
                    f3:64:6c:33:5c:0c:55:55:8d:d7:7b:e6:77:78:69:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7A:08:94:F6:09:F5:3B:1F:D1:4A:BC:31:01:14:3A:FE:31:D3:DC
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:0f:14:0d:bc:2a:b8:27:f1:99:f6:78:87:69:36:6e:dd:
         80:97:ef:8a:d0:b1:1e:71:ba:74:37:0e:ef:a7:4e:a3:81:34:
         10:64:13:31:c5:43:4f:58:89:f2:c4:39:2e:65:e0:20:12:f6:
         98:11:50:16:0f:c6:96:8c:7d:a5:83:cc:71:d2:2d:36:13:b1:
         57:77:e6:14:5d:d3:be:c4:55:1a:98:be:90:ac:bc:91:98:ac:
         fa:b5:1d:50:42:88:0f:59:5b:bb:cc:ae:c0:1d:d3:49:2d:ce:
         8a:96:be:e2:c8:b0:9d:91:00:00:28:9e:45:7e:85:1b:8f:69:
         50:2f:62:ae:51:c2:97:5e:f4:24:32:fc:d9:3e:54:2d:6c:f0:
         32:59:95:62:ef:18:4d:f2:b8:4c:83:ad:11:01:d3:e9:3b:41:
         31:3b:78:8c:fd:08:b0:39:9b:9b:ec:58:44:7f:d1:b6:f3:c0:
         c9:21:0b:fb:c1:12:f9:69:3e:77:92:f9:94:cc:b7:e4:aa:9a:
         fb:e9:74:14:c6:82:db:7d:60:e2:5a:ef:f9:53:b6:85:26:e8:
         a6:ac:6f:5d:1c:db:f2:69:af:b8:b6:2f:a9:a9:99:98:5e:c3:
         db:27:f8:2a:ac:31:73:24:27:ce:ec:f7:a6:77:40:39:f0:88:
         e9:1a:2e:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBVQrba4SORtNoO0c0xVvHX1QlU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNjAyMDUwMDI0MDBaFw0yNzAyMDQwMDI5MDBaMDMxMTAvBgNV
BAMTKDFFN0EwODk0RjYwOUY1M0IxRkQxNEFCQzMxMDExNDNBRkUzMUQzREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp55ywgKR+9m7yYjyV99jKmjWJ
rezEjWAJlRKPTAyLJ5J4gJbalxE1EODC4Z+yNmhGRo7UzRPoSAstq14kpEeSgr8O
TVEmvkbwgaWxk6gky7tnJ7j0RQryvPAUmAavfwMhWSQ4tSww58D04UJcKt0YMWF+
ViHbD5tFc44oUPmkOG361VG7EzUPgu/Nmr+4RHo2wuPae6tPFwtqFV2nOJFyQ+wn
1HYf2mgtDMj0C9+AdIdsxhQFn7CmjypoRn2c7owDdXR5zSykA1PbPiLEFuKTWcLZ
JoFRWmm0rYFgRXXZ8+WH0uptpTN3L07kHt6J2vNkbDNcDFVVjdd75nd4afSFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHnoIlPYJ9Tsf0Uq8MQEUOv4x09wwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzODM2MmUzMjMzMzYyZTM0MzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS67DAwDQYJKoZIhvcNAQELBQADggEBAE+DDxQN
vCq4J/GZ9niHaTZu3YCX74rQsR5xunQ3Du+nTqOBNBBkEzHFQ09YifLEOS5l4CAS
9pgRUBYPxpaMfaWDzHHSLTYTsVd35hRd077EVRqYvpCsvJGYrPq1HVBCiA9ZW7vM
rsAd00ktzoqWvuLIsJ2RAAAonkV+hRuPaVAvYq5Rwpde9CQy/Nk+VC1s8DJZlWLv
GE3yuEyDrREB0+k7QTE7eIz9CLA5m5vsWER/0bbzwMkhC/vBEvlpPneS+ZTMt+Sq
mvvpdBTGgtt9YOJa7/lTtoUm6Kasb10c2/Jpr7i2L6mpmZhew9sn+CqsMXMkJ87s
96Z3QDnwiOkaLnw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:43:14 2026 by rpki-client