Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
File:                     3138362e3139342e36342e302f32302d3234203d3e203238333334.roa (raw, json)
Hash identifier:          GeJwwH524xmuouS1CboFWIKYfCk+7V5Z/kQBN1NO3bw=
Subject key identifier:   5B:7B:10:87:48:67:33:C1:37:3F:2E:7F:C0:3D:85:6F:CA:C6:9C:84
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       75F70C72422760527AD1326C9E440C3CF832F309
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     28334
IP address blocks:        186.194.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:0c:72:42:27:60:52:7a:d1:32:6c:9e:44:0c:3c:f8:32:f3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=5B7B1087486733C1373F2E7FC03D856FCAC69C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:41:69:80:79:e8:93:d4:0c:46:88:66:0d:
                    33:92:e0:cf:d0:64:2a:44:5a:af:45:f3:1d:ee:72:
                    ba:7d:58:8a:b6:6a:07:c3:51:b8:59:da:c8:35:83:
                    79:b6:3c:a9:94:12:fa:03:c1:c0:8a:ff:07:d4:72:
                    91:bd:70:5d:ce:59:a9:dc:f1:dd:63:9e:7f:ba:b7:
                    38:18:8a:e2:d5:d1:79:e8:be:20:f4:b3:f3:65:2a:
                    33:6b:77:03:30:d8:a1:64:79:9a:35:32:05:08:d7:
                    66:bf:07:af:16:f6:88:b6:f1:87:90:cf:4a:de:c3:
                    82:a3:7a:7b:85:e8:af:ec:cf:b2:81:0a:34:f6:f1:
                    31:46:3f:cf:0f:eb:15:65:d1:ea:e9:a6:73:e3:ac:
                    d3:ac:09:f2:f6:c7:ad:4d:31:7d:81:1c:c3:d7:ae:
                    e9:3a:20:e3:fb:32:b4:ab:36:e5:f4:96:c8:d9:1f:
                    bb:8a:5f:43:99:ef:95:99:f4:9b:7a:41:ca:9b:f0:
                    8b:f7:b9:38:b2:fe:c3:43:be:79:c8:d4:94:32:35:
                    78:e1:85:8b:d5:63:20:43:a8:52:49:f3:d5:07:ed:
                    27:83:db:bd:11:d3:a7:ca:ed:bf:ca:b7:20:0b:96:
                    fb:a4:95:5c:9c:64:a1:69:ba:80:40:ea:6b:5a:6b:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:10:87:48:67:33:C1:37:3F:2E:7F:C0:3D:85:6F:CA:C6:9C:84
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3138362e3139342e36342e302f32302d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:74:64:7e:6f:dc:57:77:cb:15:4f:04:aa:f5:72:99:2c:
         5b:6c:3d:69:74:56:31:98:bb:3f:6f:37:f4:cd:7b:5f:ff:fa:
         f5:0f:92:45:9f:a5:f2:ae:92:ba:4f:63:2e:aa:22:f6:b0:de:
         20:20:cf:46:fc:37:b1:79:a2:45:06:c4:54:cd:6e:b8:b7:ef:
         12:16:ab:cf:35:e3:49:9b:16:59:ac:7c:8e:6e:b6:76:0f:f3:
         a4:05:5e:6f:cd:40:fa:4c:f7:5a:fc:6d:ee:31:cb:c9:d0:00:
         98:ad:bb:77:98:17:07:bd:4d:1c:fd:d7:08:b5:50:53:08:a2:
         df:2c:12:a6:b1:1f:20:6f:3f:29:5b:0a:ff:c5:97:ac:ee:ba:
         b5:0e:44:77:8a:8b:51:db:a3:ef:82:42:1a:0d:69:da:f2:ba:
         1e:29:a7:06:39:ea:38:cf:03:9c:a6:89:ad:f7:19:c5:70:cb:
         ac:6b:53:fd:67:8f:59:90:61:50:01:96:fc:c7:50:50:a7:98:
         1c:6b:1e:b9:44:c4:07:58:9e:3f:38:34:4a:ba:f5:1e:76:f6:
         a5:ff:4c:85:b9:ca:d9:12:30:98:93:68:d5:5f:34:b3:7f:52:
         76:4d:80:af:94:af:31:c3:e8:05:89:8f:a0:f6:b5:3c:ea:71:
         d4:c3:64:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdfcMckInYFJ60TJsnkQMPPgy8wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy
Q0M0NzZFMTAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKDVCN0IxMDg3NDg2NzMzQzEzNzNGMkU3RkMwM0Q4NTZGQ0FDNjlDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhkFpgHnok9QMRohmDTOS4M/Q
ZCpEWq9F8x3ucrp9WIq2agfDUbhZ2sg1g3m2PKmUEvoDwcCK/wfUcpG9cF3OWanc
8d1jnn+6tzgYiuLV0XnoviD0s/NlKjNrdwMw2KFkeZo1MgUI12a/B68W9oi28YeQ
z0rew4KjenuF6K/sz7KBCjT28TFGP88P6xVl0erppnPjrNOsCfL2x61NMX2BHMPX
ruk6IOP7MrSrNuX0lsjZH7uKX0OZ75WZ9Jt6Qcqb8Iv3uTiy/sNDvnnI1JQyNXjh
hYvVYyBDqFJJ89UH7SeD270R06fK7b/KtyALlvuklVycZKFpuoBA6mtaa4xHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUW3sQh0hnM8E3Py5/wD2Fb8rGnIQwHwYDVR0j
BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy
QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzEv
MzEzODM2MmUzMTM5MzQyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEusJAMA0GCSqGSIb3DQEBCwUAA4IBAQBF93Rkfm/c
V3fLFU8EqvVymSxbbD1pdFYxmLs/bzf0zXtf//r1D5JFn6XyrpK6T2MuqiL2sN4g
IM9G/DexeaJFBsRUzW64t+8SFqvPNeNJmxZZrHyObrZ2D/OkBV5vzUD6TPda/G3u
McvJ0ACYrbt3mBcHvU0c/dcItVBTCKLfLBKmsR8gbz8pWwr/xZes7rq1DkR3iotR
26PvgkIaDWna8roeKacGOeo4zwOcpomt9xnFcMusa1P9Z49ZkGFQAZb8x1BQp5gc
ax65RMQHWJ4/ODRKuvUedval/0yFucrZEjCYk2jVXzSzf1J2TYCvlK8xw+gFiY+g
9rU86nHUw2Q/
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:50:54 2026 by rpki-client