Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
File:                     3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          SlKBpSHtq1faHyfs3Z19Zr5F5RV6ZUfn1JNaiZCeK90=
Subject key identifier:   74:46:B0:BA:C6:7C:12:25:B7:E0:84:BA:A9:DB:3A:F2:C8:1E:0B:0C
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       1A8DDACB668B78F5981F2A8B7E48598EFE4D971A
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa
Signing time:             Thu 05 Feb 2026 17:46:28 +0000
ROA not before:           Thu 05 Feb 2026 17:41:28 +0000
ROA not after:            Thu 04 Feb 2027 17:46:28 +0000
asID:                     61901
IP address blocks:        170.254.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:da:cb:66:8b:78:f5:98:1f:2a:8b:7e:48:59:8e:fe:4d:97:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Feb  5 17:41:28 2026 GMT
            Not After : Feb  4 17:46:28 2027 GMT
        Subject: CN=7446B0BAC67C1225B7E084BAA9DB3AF2C81E0B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:21:40:5f:80:8c:a4:29:2b:0c:34:6a:0f:
                    67:5d:be:7c:ef:47:e7:34:93:f7:9d:c2:fb:ac:11:
                    d6:7c:b5:52:e9:f2:e7:ad:d4:57:d1:8f:91:af:4f:
                    47:a1:0e:c6:10:9a:ab:80:6f:aa:18:ec:93:79:f7:
                    ab:17:53:ca:63:61:38:8f:bc:37:5b:bc:a2:30:2b:
                    ff:ca:21:98:f2:17:78:5f:81:29:7b:d5:af:d7:84:
                    37:2e:5c:c8:e2:0b:84:81:ff:ab:c8:f2:7f:2b:4e:
                    e6:d5:36:fe:25:f3:e2:38:bc:2e:c1:b5:2c:75:1c:
                    61:df:74:72:b2:70:eb:ee:74:f4:e3:85:28:c4:d8:
                    c2:86:2c:3a:ee:49:f6:f4:7a:17:58:18:39:ea:7d:
                    70:8b:e1:c6:9d:36:d6:b8:fc:9a:d8:03:0d:72:54:
                    48:67:d5:8f:7b:db:a3:ba:21:95:9a:e5:e6:8b:f3:
                    7a:48:e2:30:ea:db:4f:52:d4:6a:0c:7a:49:b6:e8:
                    df:7f:f5:32:c4:d6:41:3c:46:70:f3:6c:1c:cf:64:
                    3b:5c:45:ed:2e:22:2b:1a:29:90:2e:84:bc:99:6b:
                    65:d2:41:d5:08:59:a9:b2:19:41:be:af:6c:ac:2b:
                    6b:80:13:be:2c:90:1a:02:07:56:ca:a4:8b:61:24:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:46:B0:BA:C6:7C:12:25:B7:E0:84:BA:A9:DB:3A:F2:C8:1E:0B:0C
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35342e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:71:0c:1c:0d:0c:ef:ae:41:1a:bc:09:8e:e9:aa:0c:c1:
         e4:95:c6:8a:57:6e:d1:cc:7b:32:e0:c8:4c:e0:93:45:2a:40:
         9d:4b:37:97:9c:55:fb:31:0a:d7:8d:df:dc:03:a1:af:27:a4:
         20:8f:c3:4a:3f:38:1c:50:85:a2:11:0e:27:b4:76:63:aa:6b:
         0c:50:b6:b7:c5:83:14:cb:79:2d:63:2c:59:6f:cc:9c:97:eb:
         23:6b:5f:aa:51:df:bd:05:e1:e5:1d:80:9b:9c:17:2b:9b:c4:
         c3:0e:ce:ce:1b:f9:f6:7f:14:a1:2c:58:67:e1:8e:46:55:82:
         94:03:84:de:37:e8:57:a7:c0:92:93:19:bf:49:f7:77:a6:0b:
         81:3b:55:27:a1:dc:66:1f:11:71:a7:53:a1:98:77:92:c7:a9:
         bb:97:04:a7:ee:78:54:07:25:3b:cb:48:87:c6:eb:89:9f:45:
         66:f3:f0:0b:67:ca:b0:e7:de:c6:54:7b:2c:b3:e2:8f:b1:ef:
         1b:b8:40:e1:f2:fe:3c:ad:77:9c:c0:56:37:dc:6e:5f:40:c1:
         09:ce:ee:36:62:7f:a8:f2:46:ec:50:55:dc:cc:ad:6b:fa:e5:
         a2:67:97:93:b0:f5:1f:ba:b6:62:1a:75:6f:87:63:36:dd:ec:
         df:6b:a7:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGo3ay2aLePWYHyqLfkhZjv5NlxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFQjg1MTA4RTg2QTMwN0E5MDAzNDk1MEM3NEM3QTY2
MzA3NjhGNjAeFw0yNjAyMDUxNzQxMjhaFw0yNzAyMDQxNzQ2MjhaMDMxMTAvBgNV
BAMTKDc0NDZCMEJBQzY3QzEyMjVCN0UwODRCQUE5REIzQUYyQzgxRTBCMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oiFAX4CMpCkrDDRqD2ddvnzv
R+c0k/edwvusEdZ8tVLp8uet1FfRj5GvT0ehDsYQmquAb6oY7JN596sXU8pjYTiP
vDdbvKIwK//KIZjyF3hfgSl71a/XhDcuXMjiC4SB/6vI8n8rTubVNv4l8+I4vC7B
tSx1HGHfdHKycOvudPTjhSjE2MKGLDruSfb0ehdYGDnqfXCL4cadNta4/JrYAw1y
VEhn1Y9726O6IZWa5eaL83pI4jDq209S1GoMekm26N9/9TLE1kE8RnDzbBzPZDtc
Re0uIisaKZAuhLyZa2XSQdUIWamyGUG+r2ysK2uAE74skBoCB1bKpIthJJ71AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdEawusZ8EiW34IS6qds68sgeCwwwHwYDVR0j
BBgwFoAUT+uFEI6GowepADSVDHTHpmMHaPYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMS80RkVCODUxMDhFODZBMzA3QTkwMDM0OTUwQzc0QzdBNjYzMDc2OEY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRUI4NTEwOEU4NkEzMDdB
OTAwMzQ5NTBDNzRDN0E2NjMwNzY4RjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxTFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzEv
MzEzNzMwMmUzMjM1MzQyZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqv42MA0GCSqGSIb3DQEBCwUAA4IBAQAr7nEMHA0M
765BGrwJjumqDMHklcaKV27RzHsy4MhM4JNFKkCdSzeXnFX7MQrXjd/cA6GvJ6Qg
j8NKPzgcUIWiEQ4ntHZjqmsMULa3xYMUy3ktYyxZb8ycl+sja1+qUd+9BeHlHYCb
nBcrm8TDDs7OG/n2fxShLFhn4Y5GVYKUA4TeN+hXp8CSkxm/Sfd3pguBO1Unodxm
HxFxp1OhmHeSx6m7lwSn7nhUByU7y0iHxuuJn0Vm8/ALZ8qw597GVHsss+KPse8b
uEDh8v48rXecwFY33G5fQMEJzu42Yn+o8kbsUFXczK1r+uWiZ5eTsPUfurZiGnVv
h2M23ezfa6fl
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:25:06 2026 by rpki-client