Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3231322e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          K6tRAE6Ctpc/xwWd75Lmsh8v7KZdiZL1/ZPiC9SrfGM=
Subject key identifier:   DF:BE:0B:F6:2E:43:5A:41:54:F5:F7:D1:2D:AD:7D:1E:81:BD:E8:A8
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       30E910A0D163E4D7434614CF92549C4898691AF2
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 05 Feb 2026 02:29:12 +0000
ROA not before:           Thu 05 Feb 2026 02:24:12 +0000
ROA not after:            Thu 04 Feb 2027 02:29:12 +0000
asID:                     263101
IP address blocks:        186.225.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e9:10:a0:d1:63:e4:d7:43:46:14:cf:92:54:9c:48:98:69:1a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Feb  5 02:24:12 2026 GMT
            Not After : Feb  4 02:29:12 2027 GMT
        Subject: CN=DFBE0BF62E435A4154F5F7D12DAD7D1E81BDE8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:ba:ec:e4:1e:35:73:9f:29:c0:89:0f:20:
                    39:44:ce:ea:46:01:ed:7c:81:da:1b:77:64:a9:9d:
                    2c:2b:c7:2c:98:f4:c7:28:b3:4a:cf:52:81:a4:43:
                    3a:49:d2:fc:05:00:d9:e5:1b:65:b5:e2:5a:3e:0c:
                    93:7e:21:40:cf:00:3c:88:a1:7e:47:29:52:98:b0:
                    04:5c:c3:3f:34:3e:39:7d:12:2c:86:67:07:ac:9b:
                    2c:e8:12:ad:9d:b0:ed:fa:63:52:b5:0b:ff:06:80:
                    b4:18:ef:d2:e3:ce:32:e6:e4:c5:57:4c:3d:23:a8:
                    9d:58:db:b1:8b:37:9e:23:9d:09:7e:7a:54:80:ba:
                    7f:80:08:85:79:f9:0f:ff:cb:54:d8:3f:52:37:ee:
                    e6:0f:d7:b8:f4:71:79:e2:6d:5f:8b:58:f3:2c:22:
                    ac:19:bb:1e:ec:d8:66:1e:a0:79:af:a4:0a:08:79:
                    65:9a:ae:1b:a5:85:74:05:4c:b7:df:ee:59:c5:55:
                    6f:78:b0:41:cf:81:24:95:e9:1c:c5:6e:e9:ce:ef:
                    53:3f:2b:c0:0e:b7:3b:cd:69:86:48:50:37:81:31:
                    ba:54:76:02:d5:90:58:7e:67:43:b3:7b:62:f9:f3:
                    4e:54:47:16:d2:da:af:38:f2:8a:0e:85:76:4c:20:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:0B:F6:2E:43:5A:41:54:F5:F7:D1:2D:AD:7D:1E:81:BD:E8:A8
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231322e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:66:bf:52:10:24:e3:ba:e5:73:d6:b8:be:3d:a4:fa:22:
         70:1f:26:b9:b5:d6:ef:39:21:07:f7:1a:30:79:42:e9:91:73:
         89:5a:18:cf:20:1b:ab:ad:53:5b:95:9c:b9:55:d8:26:4e:2c:
         d5:2d:8b:1c:17:8b:d3:f8:4f:34:a2:44:9c:ef:a9:05:a9:a4:
         ad:c5:d2:ef:f0:69:5d:35:d0:84:4f:c4:42:a5:e1:c7:07:27:
         af:c7:7b:09:c0:3a:3f:48:33:79:92:4a:51:8c:f6:35:24:16:
         ff:b5:57:25:00:ac:c1:e3:f7:ed:9d:e0:6d:f1:ab:d2:89:41:
         35:f4:dd:13:02:2c:f1:16:9f:0d:72:f0:59:ee:ba:fb:75:70:
         34:50:e5:12:2a:a0:18:29:24:a3:3e:91:93:2d:e9:6b:28:f9:
         a1:ce:a2:4b:70:f0:f3:d6:a7:bb:57:8e:c8:06:fe:c5:67:69:
         39:94:fb:46:0d:b5:b9:7d:f3:62:c6:4a:d1:e3:14:b2:1f:e4:
         d3:6b:e9:4c:12:c2:4a:e6:ae:d0:10:b2:e3:b4:fb:41:27:d3:
         a4:d7:6b:00:15:6a:b9:7c:7f:f8:ed:9d:47:7a:78:08:64:6c:
         e7:cd:46:de:12:7c:d6:26:81:4a:27:4d:04:d3:4d:2c:7b:9d:
         57:f6:b4:43
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMOkQoNFj5NdDRhTPklScSJhpGvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyOTVFOUEwM0JERjdGRjJEMEFCMjNCOEQ3N0VERUNG
OUI1OUM0MzAeFw0yNjAyMDUwMjI0MTJaFw0yNzAyMDQwMjI5MTJaMDMxMTAvBgNV
BAMTKERGQkUwQkY2MkU0MzVBNDE1NEY1RjdEMTJEQUQ3RDFFODFCREU4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ibrs5B41c58pwIkPIDlEzupG
Ae18gdobd2SpnSwrxyyY9Mcos0rPUoGkQzpJ0vwFANnlG2W14lo+DJN+IUDPADyI
oX5HKVKYsARcwz80Pjl9EiyGZwesmyzoEq2dsO36Y1K1C/8GgLQY79LjzjLm5MVX
TD0jqJ1Y27GLN54jnQl+elSAun+ACIV5+Q//y1TYP1I37uYP17j0cXnibV+LWPMs
IqwZux7s2GYeoHmvpAoIeWWarhulhXQFTLff7lnFVW94sEHPgSSV6RzFbunO71M/
K8AOtzvNaYZIUDeBMbpUdgLVkFh+Z0Oze2L5805URxbS2q848ooOhXZMIE2XAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU374L9i5DWkFU9ffRLa19HoG96KgwHwYDVR0j
BBgwFoAUDylemgO99/8tCrI7jXft7Pm1nEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRmNUxKRUNhenBEYXZTTkh6d3JtMThoWERYS0pSaExpOUJhTFY2MVZB
YzMvMS8wRjI5NUU5QTAzQkRGN0ZGMkQwQUIyM0I4RDc3RURFQ0Y5QjU5QzQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMjk1RTlBMDNCREY3RkYy
RDBBQjIzQjhENzdFREVDRjlCNTlDNDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0ZjVMSkVDYXpwRGF2U05IendybTE4aFhEWEtKUmhMaTlCYUxWNjFWQWMzLzEv
MzEzODM2MmUzMjMyMzUyZTMyMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMxMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrh1DANBgkqhkiG9w0BAQsFAAOCAQEAX6Nm
v1IQJOO65XPWuL49pPoicB8mubXW7zkhB/caMHlC6ZFziVoYzyAbq61TW5WcuVXY
Jk4s1S2LHBeL0/hPNKJEnO+pBamkrcXS7/BpXTXQhE/EQqXhxwcnr8d7CcA6P0gz
eZJKUYz2NSQW/7VXJQCsweP37Z3gbfGr0olBNfTdEwIs8RafDXLwWe66+3VwNFDl
EiqgGCkkoz6Rky3payj5oc6iS3Dw89anu1eOyAb+xWdpOZT7Rg21uX3zYsZK0eMU
sh/k02vpTBLCSuau0BCy47T7QSfTpNdrABVquXx/+O2dR3p4CGRs581G3hJ81iaB
SidNBNNNLHudV/a0Qw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:52 2026 by rpki-client