Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa
File:                     3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa (raw, json)
Hash identifier:          FjpeeKe+NY5jISaZxqSfNsI1dPRhN/mFScJMeC2uqGw=
Subject key identifier:   41:3B:77:15:38:73:3F:B3:C7:25:7E:6D:78:B7:83:E0:A9:23:64:7D
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       20533854942A9B7955C6606E13B9C9E25A4848F4
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa
Signing time:             Thu 05 Feb 2026 02:29:11 +0000
ROA not before:           Thu 05 Feb 2026 02:24:11 +0000
ROA not after:            Thu 04 Feb 2027 02:29:11 +0000
asID:                     263101
IP address blocks:        186.225.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:38:54:94:2a:9b:79:55:c6:60:6e:13:b9:c9:e2:5a:48:48:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Feb  5 02:24:11 2026 GMT
            Not After : Feb  4 02:29:11 2027 GMT
        Subject: CN=413B771538733FB3C7257E6D78B783E0A923647D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:7a:8a:7e:37:2d:f8:f5:bc:93:f8:16:c2:
                    f5:53:1d:8e:0b:b7:ee:5b:35:b3:b2:60:de:82:d0:
                    cf:fd:fa:0c:d6:04:68:d8:64:2e:c6:17:33:0d:58:
                    9b:23:26:78:5f:f7:fe:79:9f:12:ef:99:5e:22:e7:
                    70:86:75:5b:96:a0:2e:9e:d4:58:2c:b5:62:4a:a4:
                    96:35:74:fb:3f:6b:38:be:b3:6f:21:50:2d:0d:58:
                    92:9b:fb:20:c8:ea:b9:a1:a1:c8:97:9d:9b:da:31:
                    e3:b5:08:81:8b:2c:a7:8d:af:7c:59:59:a3:39:e6:
                    3b:e4:02:84:91:6e:cb:91:a3:b7:9d:b1:ec:25:00:
                    a9:51:2a:91:47:db:d6:4a:f2:d1:f1:e1:dc:89:c9:
                    63:8a:0d:64:ea:72:b6:6e:a2:10:91:cf:52:66:9c:
                    82:8e:cc:bc:50:c9:ba:77:fe:ea:a9:72:03:7a:e3:
                    a8:1c:0b:62:63:74:22:f8:bd:92:ce:34:2e:01:82:
                    4e:8e:86:60:eb:9d:ea:cb:f2:12:12:f7:d1:a0:ad:
                    63:64:75:01:8d:af:fd:06:e2:d9:cf:b5:e7:96:0d:
                    0a:be:62:8d:c4:7a:9e:25:2f:92:6e:53:f6:2b:37:
                    bc:28:74:36:f6:6b:09:a6:d9:7f:bc:fa:f1:23:3d:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3B:77:15:38:73:3F:B3:C7:25:7E:6D:78:B7:83:E0:A9:23:64:7D
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32332d3233203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:bc:fd:e9:04:0c:7c:57:43:e2:39:bf:65:2b:71:f7:dd:
         4d:af:69:7d:36:dc:cf:52:28:e3:aa:db:d7:8d:2e:c9:0b:83:
         25:03:e9:9b:43:e1:16:26:93:d2:b4:07:1f:80:90:77:d9:1c:
         c5:aa:07:9f:45:0f:79:20:95:10:af:5b:f1:01:19:14:a6:0f:
         a6:25:9c:6e:af:bf:a5:47:96:0a:c9:1f:48:3a:ca:9a:66:b9:
         04:c2:18:c7:2f:3c:59:26:bc:8f:1a:31:de:c8:79:38:53:c2:
         35:b5:14:e9:18:86:42:6e:53:db:bb:60:fe:59:b0:01:97:8b:
         f2:23:ec:90:15:f7:7e:26:79:bc:d4:c6:f0:68:14:c9:fb:1b:
         69:74:2c:b8:b2:19:53:00:cd:47:c7:49:10:f3:d8:9b:89:b3:
         e2:ec:b6:35:97:49:6d:d3:76:8a:35:40:71:b0:01:75:e6:a9:
         ee:d3:b0:35:30:a2:48:f0:88:1f:72:7e:61:ae:95:ca:5a:00:
         32:65:d6:f5:2f:65:3e:65:e7:dc:86:40:13:a7:a5:28:cb:40:
         41:98:b8:0b:bf:8f:10:af:cd:4f:4a:a5:1f:25:70:68:9e:eb:
         f4:99:26:9a:50:22:94:0d:f6:33:f1:88:b6:6a:ce:74:62:5b:
         db:fe:73:ec
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIFM4VJQqm3lVxmBuE7nJ4lpISPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyOTVFOUEwM0JERjdGRjJEMEFCMjNCOEQ3N0VERUNG
OUI1OUM0MzAeFw0yNjAyMDUwMjI0MTFaFw0yNzAyMDQwMjI5MTFaMDMxMTAvBgNV
BAMTKDQxM0I3NzE1Mzg3MzNGQjNDNzI1N0U2RDc4Qjc4M0UwQTkyMzY0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwm3qKfjct+PW8k/gWwvVTHY4L
t+5bNbOyYN6C0M/9+gzWBGjYZC7GFzMNWJsjJnhf9/55nxLvmV4i53CGdVuWoC6e
1FgstWJKpJY1dPs/azi+s28hUC0NWJKb+yDI6rmhociXnZvaMeO1CIGLLKeNr3xZ
WaM55jvkAoSRbsuRo7edsewlAKlRKpFH29ZK8tHx4dyJyWOKDWTqcrZuohCRz1Jm
nIKOzLxQybp3/uqpcgN646gcC2JjdCL4vZLONC4Bgk6OhmDrnerL8hIS99GgrWNk
dQGNr/0G4tnPteeWDQq+Yo3Eep4lL5JuU/YrN7wodDb2awmm2X+8+vEjPQ+9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQTt3FThzP7PHJX5teLeD4KkjZH0wHwYDVR0j
BBgwFoAUDylemgO99/8tCrI7jXft7Pm1nEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRmNUxKRUNhenBEYXZTTkh6d3JtMThoWERYS0pSaExpOUJhTFY2MVZB
YzMvMS8wRjI5NUU5QTAzQkRGN0ZGMkQwQUIyM0I4RDc3RURFQ0Y5QjU5QzQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMjk1RTlBMDNCREY3RkYy
RDBBQjIzQjhENzdFREVDRjlCNTlDNDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0ZjVMSkVDYXpwRGF2U05IendybTE4aFhEWEtKUmhMaTlCYUxWNjFWQWMzLzEv
MzEzODM2MmUzMjMyMzUyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMxMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrh1DANBgkqhkiG9w0BAQsFAAOCAQEALRi8
/ekEDHxXQ+I5v2UrcffdTa9pfTbcz1Io46rb140uyQuDJQPpm0PhFiaT0rQHH4CQ
d9kcxaoHn0UPeSCVEK9b8QEZFKYPpiWcbq+/pUeWCskfSDrKmma5BMIYxy88WSa8
jxox3sh5OFPCNbUU6RiGQm5T27tg/lmwAZeL8iPskBX3fiZ5vNTG8GgUyfsbaXQs
uLIZUwDNR8dJEPPYm4mz4uy2NZdJbdN2ijVAcbABdeap7tOwNTCiSPCIH3J+Ya6V
yloAMmXW9S9lPmXn3IZAE6elKMtAQZi4C7+PEK/NT0qlHyVwaJ7r9JkmmlAilA32
M/GItmrOdGJb2/5z7A==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:05 2026 by rpki-client