Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa
File:                     3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          8HB+zauS7rg18e8AsAz+SJZCtcokz5uwCwQSZ2d8ucY=
Subject key identifier:   B4:90:A8:CE:B2:3E:F1:21:62:12:E9:A5:91:A8:3E:63:93:A5:51:85
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       195BE10FDBD3596E6ADA0B837EB41AB05375C977
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:05 +0000
ROA not before:           Thu 05 Feb 2026 05:25:05 +0000
ROA not after:            Thu 04 Feb 2027 05:30:05 +0000
asID:                     22177
IP address blocks:        131.100.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5b:e1:0f:db:d3:59:6e:6a:da:0b:83:7e:b4:1a:b0:53:75:c9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:05 2026 GMT
            Not After : Feb  4 05:30:05 2027 GMT
        Subject: CN=B490A8CEB23EF1216212E9A591A83E6393A55185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:dd:79:a6:c5:13:1a:c4:e6:43:75:92:21:
                    48:42:d9:a1:8f:13:dd:1a:5f:ff:4d:30:6b:56:94:
                    31:ac:20:31:7a:b9:73:73:a3:3e:0c:02:53:03:1a:
                    60:2d:a1:49:62:8d:14:70:bb:a6:fc:ea:27:69:ef:
                    95:43:e9:6f:56:b1:d5:79:e1:f4:11:b2:f0:4d:2e:
                    5d:f4:9f:4b:ce:2a:c8:18:f2:08:31:93:3b:ac:3a:
                    49:6b:8e:75:7b:c3:64:67:36:80:6d:4b:f8:54:2d:
                    c2:8c:a9:b1:da:01:8b:43:67:6b:19:76:a3:1e:34:
                    8e:80:23:7c:37:30:50:87:54:46:aa:e2:fc:bc:9c:
                    60:30:9b:7f:f0:cf:ee:a5:52:93:56:0d:59:32:34:
                    be:3f:26:c5:a4:af:73:90:0f:db:a3:fe:b6:6f:2b:
                    34:ca:b9:f6:37:d0:5d:54:a9:3f:10:c3:1f:7a:e4:
                    a0:99:ba:6f:c4:59:c0:b3:a9:54:66:cb:15:1a:92:
                    71:4f:a0:2d:fc:99:b8:ff:7a:3f:04:3e:5a:c1:de:
                    4a:a5:77:bc:a0:47:92:a8:1b:16:65:ce:34:e5:24:
                    85:13:fb:6c:79:92:96:3d:e1:84:e3:a5:5c:00:79:
                    20:3e:f0:5a:d2:6c:d6:58:b0:d0:ed:37:0b:9c:ae:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:90:A8:CE:B2:3E:F1:21:62:12:E9:A5:91:A8:3E:63:93:A5:51:85
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:e3:b0:d5:8b:c9:be:a5:d3:68:94:7f:ca:c9:18:f6:dc:
         c2:72:66:ce:24:28:ad:8a:c5:26:75:ce:ba:68:9a:8e:9f:4d:
         c7:e2:33:d3:1e:b9:75:a0:5c:6f:c4:e1:71:cd:27:d9:fd:e0:
         bb:a3:f7:4c:23:3d:23:38:06:06:53:84:9f:42:5d:11:fa:0e:
         a1:f4:09:a2:4c:cd:c2:d1:0a:8f:88:90:db:37:d8:2c:69:1e:
         a8:5a:8b:f8:a4:78:71:96:0c:8c:f5:ff:83:26:fd:0a:f9:3e:
         8a:27:17:38:ce:38:20:d7:0f:f2:5d:c2:e0:d9:ae:87:1a:33:
         a1:7b:20:0e:0b:c6:00:b3:e3:7b:06:b6:b8:cf:48:b4:07:15:
         ce:10:05:4d:2b:b4:b5:5b:58:d7:51:4f:61:2f:02:14:3e:ba:
         3d:13:49:aa:b8:b3:c9:9c:b2:8f:66:14:3c:b4:29:71:bd:94:
         ee:61:28:f0:2e:49:1a:28:3e:ed:d0:85:9e:fb:7b:16:fb:da:
         37:10:67:1e:a7:22:c7:c3:25:d2:1a:89:6b:d2:7b:12:00:84:
         88:c8:5e:c0:88:f5:1e:48:87:89:fc:97:e4:aa:c4:8e:a6:af:
         b3:08:84:10:22:4e:8a:28:d6:dc:19:57:3f:8c:58:ed:1a:6a:
         e9:4f:5f:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGVvhD9vTWW5q2guDfrQasFN1yXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNjAyMDUwNTI1MDVaFw0yNzAyMDQwNTMwMDVaMDMxMTAvBgNV
BAMTKEI0OTBBOENFQjIzRUYxMjE2MjEyRTlBNTkxQTgzRTYzOTNBNTUxODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+d15psUTGsTmQ3WSIUhC2aGP
E90aX/9NMGtWlDGsIDF6uXNzoz4MAlMDGmAtoUlijRRwu6b86idp75VD6W9WsdV5
4fQRsvBNLl30n0vOKsgY8ggxkzusOklrjnV7w2RnNoBtS/hULcKMqbHaAYtDZ2sZ
dqMeNI6AI3w3MFCHVEaq4vy8nGAwm3/wz+6lUpNWDVkyNL4/JsWkr3OQD9uj/rZv
KzTKufY30F1UqT8Qwx965KCZum/EWcCzqVRmyxUaknFPoC38mbj/ej8EPlrB3kql
d7ygR5KoGxZlzjTlJIUT+2x5kpY94YTjpVwAeSA+8FrSbNZYsNDtNwucrq2BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtJCozrI+8SFiEumlkag+Y5OlUYUwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDZK8wDQYJKoZIhvcNAQELBQADggEBAIbh47DV
i8m+pdNolH/KyRj23MJyZs4kKK2KxSZ1zrpomo6fTcfiM9MeuXWgXG/E4XHNJ9n9
4Luj90wjPSM4BgZThJ9CXRH6DqH0CaJMzcLRCo+IkNs32CxpHqhai/ikeHGWDIz1
/4Mm/Qr5PoonFzjOOCDXD/JdwuDZrocaM6F7IA4LxgCz43sGtrjPSLQHFc4QBU0r
tLVbWNdRT2EvAhQ+uj0TSaq4s8mcso9mFDy0KXG9lO5hKPAuSRooPu3QhZ77exb7
2jcQZx6nIsfDJdIaiWvSexIAhIjIXsCI9R5Ih4n8l+SqxI6mr7MIhBAiTooo1twZ
Vz+MWO0aaulPXx8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:58:42 2026 by rpki-client