Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3230302e302e382e302f32312d3234203d3e20323636323131.roa
File:                     3230302e302e382e302f32312d3234203d3e20323636323131.roa (raw, json)
Hash identifier:          8RD0lskzXk7jh4VZqacSmwpYf9dq8sTfWRiVNpWpDZs=
Subject key identifier:   1B:EE:49:75:8A:17:24:16:F1:2C:8D:43:36:30:49:F2:BA:19:16:AB
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       6D62CEE59F6216CE826FF6C4ECC6C8F54A3DAB3D
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3230302e302e382e302f32312d3234203d3e20323636323131.roa
Signing time:             Fri 23 Jan 2026 16:47:55 +0000
ROA not before:           Fri 23 Jan 2026 16:42:55 +0000
ROA not after:            Fri 22 Jan 2027 16:47:55 +0000
asID:                     266211
IP address blocks:        200.0.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:62:ce:e5:9f:62:16:ce:82:6f:f6:c4:ec:c6:c8:f5:4a:3d:ab:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Jan 23 16:42:55 2026 GMT
            Not After : Jan 22 16:47:55 2027 GMT
        Subject: CN=3082010A02820101009F98DBD4580EB212B6B4FC4B9B574F85803FD1C7999F0C22F974B00342996329F025AA399F83F70956314BE1937AE08F219141FBA7156DA1E41AC3CDCF6EF2C70211D9E1894956DC7992FA1F20247B3C59D3F2EBFFF5DC853834D8030E723DA2716CCE3FDE2DC0E6150041E929893D5B09DB16CF3204B396A3AD57904EC6F9692CDED789BB46C23AAF851842BADBF2F492B1CA659FAC74C7252177D44EC094DBD342B835BA19047D9632FAAD25C3E052C6FC2B2034A4849456F00B7444F6421B1060C1109AA93B4D27C27B90D87C09636DF40357C29D5839EFFAFF0FC80BCB2EB8222337F5F1EDB7D809C8BE00DD376E93B8AB8531D8BC00945F578A502588C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:db:d4:58:0e:b2:12:b6:b4:fc:4b:9b:57:
                    4f:85:80:3f:d1:c7:99:9f:0c:22:f9:74:b0:03:42:
                    99:63:29:f0:25:aa:39:9f:83:f7:09:56:31:4b:e1:
                    93:7a:e0:8f:21:91:41:fb:a7:15:6d:a1:e4:1a:c3:
                    cd:cf:6e:f2:c7:02:11:d9:e1:89:49:56:dc:79:92:
                    fa:1f:20:24:7b:3c:59:d3:f2:eb:ff:f5:dc:85:38:
                    34:d8:03:0e:72:3d:a2:71:6c:ce:3f:de:2d:c0:e6:
                    15:00:41:e9:29:89:3d:5b:09:db:16:cf:32:04:b3:
                    96:a3:ad:57:90:4e:c6:f9:69:2c:de:d7:89:bb:46:
                    c2:3a:af:85:18:42:ba:db:f2:f4:92:b1:ca:65:9f:
                    ac:74:c7:25:21:77:d4:4e:c0:94:db:d3:42:b8:35:
                    ba:19:04:7d:96:32:fa:ad:25:c3:e0:52:c6:fc:2b:
                    20:34:a4:84:94:56:f0:0b:74:44:f6:42:1b:10:60:
                    c1:10:9a:a9:3b:4d:27:c2:7b:90:d8:7c:09:63:6d:
                    f4:03:57:c2:9d:58:39:ef:fa:ff:0f:c8:0b:cb:2e:
                    b8:22:23:37:f5:f1:ed:b7:d8:09:c8:be:00:dd:37:
                    6e:93:b8:ab:85:31:d8:bc:00:94:5f:57:8a:50:25:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:49:75:8A:17:24:16:F1:2C:8D:43:36:30:49:F2:BA:19:16:AB
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3230302e302e382e302f32312d3234203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:6c:6d:a2:18:84:76:e4:43:b9:cb:de:67:c0:71:a9:63:28:
         de:a6:39:68:6a:66:21:f0:de:af:f7:36:6d:c7:24:f5:1e:6c:
         18:0f:48:fd:0f:9d:52:c5:6c:30:2b:04:37:b3:f4:a8:32:8c:
         0e:09:76:2c:dc:94:11:bf:df:08:f7:96:3d:85:49:dd:46:ef:
         3c:39:ab:be:60:e4:34:f9:ce:1c:d4:5e:9d:18:53:bf:93:16:
         3a:05:94:9d:8d:f8:9d:37:ff:d8:53:a2:da:4e:7e:d8:35:f2:
         ff:ee:f7:71:ef:5c:ec:f9:ed:ab:88:ca:0e:f4:3e:37:ca:16:
         ed:99:f4:cc:2c:de:79:88:23:c6:b6:1a:79:c2:e1:06:4e:ad:
         37:58:8e:15:6b:22:f7:bf:1f:49:6c:10:c8:9e:5c:38:af:c2:
         7e:1d:05:35:6d:ed:b5:bc:4e:3a:1d:07:3e:25:71:cd:84:0d:
         14:f9:6e:5a:72:9c:40:42:b4:d4:5a:e6:75:56:26:a7:1a:71:
         6c:5e:b6:b9:f8:0a:58:a9:3d:8f:a3:88:19:0c:a4:01:03:28:
         8c:3e:0d:5e:72:70:9e:17:af:d3:7c:1c:82:a3:b7:77:c1:35:
         e7:44:8a:fb:95:28:17:cd:37:0b:4e:e2:7f:20:a6:7e:f0:f9:
         cf:13:d7:61
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUbWLO5Z9iFs6Cb/bE7MbI9Uo9qz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVCM0NDNjk2M0YyOTFEMTFGMDE5M0JEMjdGQzRFODNE
MTQ1OTJCOTAeFw0yNjAxMjMxNjQyNTVaFw0yNzAxMjIxNjQ3NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUY5OERCRDQ1ODBFQjIxMkI2
QjRGQzRCOUI1NzRGODU4MDNGRDFDNzk5OUYwQzIyRjk3NEIwMDM0Mjk5NjMyOUYw
MjVBQTM5OUY4M0Y3MDk1NjMxNEJFMTkzN0FFMDhGMjE5MTQxRkJBNzE1NkRBMUU0
MUFDM0NEQ0Y2RUYyQzcwMjExRDlFMTg5NDk1NkRDNzk5MkZBMUYyMDI0N0IzQzU5
RDNGMkVCRkZGNURDODUzODM0RDgwMzBFNzIzREEyNzE2Q0NFM0ZERTJEQzBFNjE1
MDA0MUU5Mjk4OTNENUIwOURCMTZDRjMyMDRCMzk2QTNBRDU3OTA0RUM2Rjk2OTJD
REVENzg5QkI0NkMyM0FBRjg1MTg0MkJBREJGMkY0OTJCMUNBNjU5RkFDNzRDNzI1
MjE3N0Q0NEVDMDk0REJEMzQyQjgzNUJBMTkwNDdEOTYzMkZBQUQyNUMzRTA1MkM2
RkMyQjIwMzRBNDg0OTQ1NkYwMEI3NDQ0RjY0MjFCMTA2MEMxMTA5QUE5M0I0RDI3
QzI3QjkwRDg3QzA5NjM2REY0MDM1N0MyOUQ1ODM5RUZGQUZGMEZDODBCQ0IyRUI4
MjIyMzM3RjVGMUVEQjdEODA5QzhCRTAwREQzNzZFOTNCOEFCODUzMUQ4QkMwMDk0
NUY1NzhBNTAyNTg4QzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAn5jb1FgOshK2tPxLm1dPhYA/0ceZnwwi+XSwA0KZYynwJao5n4P3
CVYxS+GTeuCPIZFB+6cVbaHkGsPNz27yxwIR2eGJSVbceZL6HyAkezxZ0/Lr//Xc
hTg02AMOcj2icWzOP94twOYVAEHpKYk9WwnbFs8yBLOWo61XkE7G+Wks3teJu0bC
Oq+FGEK62/L0krHKZZ+sdMclIXfUTsCU29NCuDW6GQR9ljL6rSXD4FLG/CsgNKSE
lFbwC3RE9kIbEGDBEJqpO00nwnuQ2HwJY230A1fCnVg57/r/D8gLyy64IiM39fHt
t9gJyL4A3Tduk7irhTHYvACUX1eKUCWIxQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FBvuSXWKFyQW8SyNQzYwSfK6GRarMB8GA1UdIwQYMBaAFPWzzGlj8pHRHwGTvSf8
ToPRRZK5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FWR0h2M2dmUnlCcnJx
c0ZZSFpXa2VuSGo2WXBtd1cyWmNVWVNTZGNVOXh3LzEvRjVCM0NDNjk2M0YyOTFE
MTFGMDE5M0JEMjdGQzRFODNEMTQ1OTJCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GNUIzQ0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5
MkI5LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUha
V2tlbkhqNllwbXdXMlpjVVlTU2RjVTl4dy8xLzMyMzAzMDJlMzAyZTM4MmUzMDJm
MzIzMTJkMzIzNDIwM2QzZTIwMzIzNjM2MzIzMTMxLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyAAIMA0G
CSqGSIb3DQEBCwUAA4IBAQB7bG2iGIR25EO5y95nwHGpYyjepjloamYh8N6v9zZt
xyT1HmwYD0j9D51SxWwwKwQ3s/SoMowOCXYs3JQRv98I95Y9hUndRu88Oau+YOQ0
+c4c1F6dGFO/kxY6BZSdjfidN//YU6LaTn7YNfL/7vdx71zs+e2riMoO9D43yhbt
mfTMLN55iCPGthp5wuEGTq03WI4VayL3vx9JbBDInlw4r8J+HQU1be21vE46HQc+
JXHNhA0U+W5acpxAQrTUWuZ1VianGnFsXra5+ApYqT2Po4gZDKQBAyiMPg1ecnCe
F6/TfByCo7d3wTXnRIr7lSgXzTcLTuJ/IKZ+8PnPE9dh
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:15 2026 by rpki-client