Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230342e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230342e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          jb0auPeGZJGKnJT3VV0eUrNOebUXOms5dTDFKCu34LE=
Subject key identifier:   9F:5B:DE:52:5E:F4:BE:4A:72:EB:9E:72:D3:C6:AD:1E:E8:9E:35:B9
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       370F160BBA79443A94296624A89DAB2C8A52F898
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230342e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:43 +0000
ROA not before:           Fri 30 Jan 2026 13:56:43 +0000
ROA not after:            Fri 29 Jan 2027 14:01:43 +0000
asID:                     262687
IP address blocks:        187.87.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0f:16:0b:ba:79:44:3a:94:29:66:24:a8:9d:ab:2c:8a:52:f8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:43 2026 GMT
            Not After : Jan 29 14:01:43 2027 GMT
        Subject: CN=9F5BDE525EF4BE4A72EB9E72D3C6AD1EE89E35B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:da:00:aa:6d:b4:33:93:a4:5d:1f:7d:b9:
                    86:38:d4:73:1a:86:85:c3:11:d4:c8:82:93:72:0a:
                    ad:b5:8d:a1:e4:69:c6:24:fb:ac:23:3b:95:16:fc:
                    87:67:bc:51:4a:4e:15:26:32:ce:85:c8:1e:21:b4:
                    04:46:13:70:c5:29:f3:21:19:d2:a2:04:fd:9f:c5:
                    c0:c9:fc:a2:ee:10:48:30:40:37:6b:3e:ab:21:17:
                    21:32:8e:fb:2c:95:38:cb:21:3e:a4:91:a1:e4:2d:
                    3b:01:ae:d6:bc:13:fb:25:5e:ed:cb:a5:aa:83:42:
                    49:e6:54:b4:4a:ac:42:5d:bf:5b:12:3b:22:16:78:
                    7d:0a:87:8e:bb:f7:ef:b5:e7:03:c6:91:cc:30:36:
                    0b:ed:d5:6a:7b:67:38:3a:42:7b:64:97:d1:6c:d7:
                    6f:d6:93:59:a9:e3:1c:17:12:ee:50:63:1a:76:d3:
                    c6:73:fe:eb:9f:c9:72:3c:ad:03:7c:96:ac:8e:eb:
                    43:80:de:06:59:f7:fa:82:bd:59:7c:d6:92:5f:9b:
                    39:c0:c0:f3:6c:13:5c:e0:dd:e2:1c:87:78:70:03:
                    30:6c:b2:7c:f4:c8:ac:2b:74:97:af:9c:16:58:dd:
                    cd:5e:eb:1e:85:36:f9:20:34:53:ef:a0:2a:23:1e:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:DE:52:5E:F4:BE:4A:72:EB:9E:72:D3:C6:AD:1E:E8:9E:35:B9
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230342e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:e9:e0:8d:d8:09:07:fe:5c:94:44:0d:ab:cc:4e:e8:26:
         5a:12:4b:33:43:f0:8d:d8:d8:c0:01:91:50:c6:ad:a9:ce:ab:
         2a:00:65:c4:08:d3:10:f8:bc:2b:25:10:b5:6c:ad:6d:52:52:
         6c:55:97:83:b1:b4:05:09:81:94:3a:04:4f:69:b6:04:3e:35:
         aa:05:2e:ac:79:0c:01:50:46:18:b1:33:c7:b9:21:f7:85:6c:
         0b:13:40:26:97:1c:cd:5b:7b:c5:37:7b:85:ff:75:49:cd:7e:
         66:b8:93:34:6d:43:d6:90:ab:91:fa:16:e4:0e:09:40:d2:48:
         b0:63:7d:04:b4:47:20:7f:de:80:7e:3d:22:ba:58:3d:60:15:
         39:9d:50:bf:a0:4a:c3:af:e4:53:02:6c:68:50:bb:11:e8:0b:
         10:70:45:6a:56:b1:8d:1f:5f:45:9d:ae:32:f5:2c:51:25:b3:
         e1:78:b9:36:e7:b4:e4:f0:b7:f8:73:bb:b8:2e:07:34:c6:31:
         97:b1:03:43:61:79:b9:00:98:40:09:c0:63:6f:25:f2:96:21:
         93:53:af:fc:e5:21:fa:31:85:b1:cc:4f:6c:21:2b:5c:cb:dc:
         84:c0:ec:6c:54:bb:9f:3c:0d:62:39:b5:10:f4:24:06:ba:ca:
         98:35:74:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNw8WC7p5RDqUKWYkqJ2rLIpS+JgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGMTIzRjg1MEI2OENBQkQzRDVDNjdEOUIyNjYwRDc4
QzM4NDU1QzAeFw0yNjAxMzAxMzU2NDNaFw0yNzAxMjkxNDAxNDNaMDMxMTAvBgNV
BAMTKDlGNUJERTUyNUVGNEJFNEE3MkVCOUU3MkQzQzZBRDFFRTg5RTM1QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZNoAqm20M5OkXR99uYY41HMa
hoXDEdTIgpNyCq21jaHkacYk+6wjO5UW/IdnvFFKThUmMs6FyB4htARGE3DFKfMh
GdKiBP2fxcDJ/KLuEEgwQDdrPqshFyEyjvsslTjLIT6kkaHkLTsBrta8E/slXu3L
paqDQknmVLRKrEJdv1sSOyIWeH0Kh4679++15wPGkcwwNgvt1Wp7Zzg6Qntkl9Fs
12/Wk1mp4xwXEu5QYxp208Zz/uufyXI8rQN8lqyO60OA3gZZ9/qCvVl81pJfmznA
wPNsE1zg3eIch3hwAzBssnz0yKwrdJevnBZY3c1e6x6FNvkgNFPvoCojHkETAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn1veUl70vkpy655y08atHuieNbkwHwYDVR0j
BBgwFoAU0fEj+FC2jKvT1cZ9myZg14w4RVwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlmQnZ2dXY0NVAxMWJ4MlZualYzb2d0OWpXQmNyTjMyVjFaU2Z5SG9y
NW8vMC9EMUYxMjNGODUwQjY4Q0FCRDNENUM2N0Q5QjI2NjBENzhDMzg0NTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjEyM0Y4NTBCNjhDQUJE
M0Q1QzY3RDlCMjY2MEQ3OEMzODQ1NUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5ZkJ2dnV2NDVQMTFieDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzAv
MzEzODM3MmUzODM3MmUzMjMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7V8wwDQYJKoZIhvcNAQELBQADggEBAC8/6eCN
2AkH/lyURA2rzE7oJloSSzND8I3Y2MABkVDGranOqyoAZcQI0xD4vCslELVsrW1S
UmxVl4OxtAUJgZQ6BE9ptgQ+NaoFLqx5DAFQRhixM8e5IfeFbAsTQCaXHM1be8U3
e4X/dUnNfma4kzRtQ9aQq5H6FuQOCUDSSLBjfQS0RyB/3oB+PSK6WD1gFTmdUL+g
SsOv5FMCbGhQuxHoCxBwRWpWsY0fX0WdrjL1LFEls+F4uTbntOTwt/hzu7guBzTG
MZexA0NhebkAmEAJwGNvJfKWIZNTr/zlIfoxhbHMT2whK1zL3ITA7GxUu588DWI5
tRD0JAa6ypg1dFM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:25:19 2026 by rpki-client