Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
File:                     3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa (raw, json)
Hash identifier:          OCfathaEnIdm/7F4Okynj9Iokvs+73D5NSRBbIVoihM=
Subject key identifier:   2E:CD:4E:81:82:92:8C:B6:08:89:CE:55:63:54:F8:BE:CE:E2:94:B6
Certificate issuer:       /CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
Certificate serial:       4A0086803FD5E6572FC811A269FA2087B389DA9F
Authority key identifier: 1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa
Signing time:             Thu 05 Feb 2026 09:43:48 +0000
ROA not before:           Thu 05 Feb 2026 09:38:48 +0000
ROA not after:            Thu 04 Feb 2027 09:43:48 +0000
asID:                     266514
IP address blocks:        170.244.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl
                          rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:86:80:3f:d5:e6:57:2f:c8:11:a2:69:fa:20:87:b3:89:da:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D0C885FE378FF90D39EA2875E9F6E513FDCEACA
        Validity
            Not Before: Feb  5 09:38:48 2026 GMT
            Not After : Feb  4 09:43:48 2027 GMT
        Subject: CN=2ECD4E8182928CB60889CE556354F8BECEE294B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:46:d6:b8:ac:7d:19:18:20:8c:6c:23:da:
                    39:cf:22:e2:d0:73:bb:cf:a8:c9:43:59:fd:cb:eb:
                    40:d8:26:9d:5d:cb:11:bb:4b:1b:8a:4f:c5:0c:f0:
                    63:45:55:39:84:38:44:83:eb:14:f1:1e:42:95:2c:
                    ec:d5:6b:6e:4b:a3:88:f8:d9:06:a8:37:07:ce:43:
                    10:75:41:39:14:d0:f6:4a:0e:47:92:34:64:d0:a2:
                    7a:2f:ad:5f:03:cd:8e:e8:eb:ae:b3:54:17:9b:ed:
                    9f:f4:b4:82:ea:de:dc:fc:53:dd:12:58:9a:7b:36:
                    07:c5:26:12:c9:f9:9b:ad:4f:a2:99:98:6c:1e:83:
                    75:35:68:f5:2d:7e:3c:e3:d1:44:80:96:5d:a4:2f:
                    81:ef:60:6b:dc:b0:69:55:29:05:30:42:54:1b:06:
                    46:75:ec:fc:64:3c:a1:04:a7:c2:cc:e4:a7:29:2d:
                    12:c5:b5:60:ed:9f:47:e8:35:2c:b0:9c:90:d5:e9:
                    b3:8f:b0:cf:cf:c4:04:0d:39:e8:f1:75:88:17:8b:
                    fc:9b:c4:13:ef:55:8b:14:7f:66:1c:d9:eb:f8:60:
                    38:a7:55:cf:ba:96:91:61:cc:87:b9:e2:d3:0f:f3:
                    96:d7:5b:b3:9b:99:18:d9:d1:db:d4:c7:76:3d:8c:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CD:4E:81:82:92:8C:B6:08:89:CE:55:63:54:F8:BE:CE:E2:94:B6
            X509v3 Authority Key Identifier:
                keyid:1D:0C:88:5F:E3:78:FF:90:D3:9E:A2:87:5E:9F:6E:51:3F:DC:EA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D0C885FE378FF90D39EA2875E9F6E513FDCEACA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByNmY6qni3FmM5rShmX9wQhRVZ3LCWB3Mdt5z2RCNm8B/1/3137302e3234342e3233342e302f32342d3234203d3e20323636353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:11:5e:4e:bd:45:b9:19:ee:85:4c:32:ba:8f:7c:08:d7:
         9e:58:51:cc:8a:28:e0:64:02:6b:93:7c:5c:7d:a2:8f:f6:72:
         31:f3:f8:dd:f8:09:c3:d5:03:c0:bc:67:7b:1a:93:ae:10:69:
         20:42:80:03:45:79:87:b3:1d:b2:d8:4d:f4:fc:fb:3b:23:aa:
         78:92:6b:4f:3c:bc:47:a3:66:e2:e9:b6:ce:25:95:6f:75:4d:
         f7:a6:18:0b:c3:3d:2a:9d:97:9f:9e:d8:65:c2:84:9c:83:44:
         ce:08:4e:e5:e0:72:c2:7b:a9:7a:a8:4c:96:6f:f8:c8:3a:04:
         bf:b9:f6:3a:de:52:4f:f7:8e:82:bf:45:0c:2a:1a:ea:7e:70:
         48:6b:72:dd:fe:6e:0b:0d:9a:6b:6d:ab:67:3f:66:84:bb:f2:
         d7:4c:46:ab:f5:15:e7:01:44:f3:29:af:fc:3c:05:81:0b:48:
         99:71:84:11:e7:14:6a:c2:32:57:24:b7:47:05:60:40:60:e7:
         20:b0:e4:92:8c:1c:dd:d7:af:8e:91:7a:70:42:bb:2a:7c:fa:
         5c:d5:e7:c0:80:e4:d2:e2:10:41:b1:36:57:9a:51:6b:e7:3b:
         7a:93:8d:55:9c:86:17:ec:cb:29:dd:c5:e1:89:9b:ae:be:c1:
         3d:bd:5c:c0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSgCGgD/V5lcvyBGiafogh7OJ2p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQwQzg4NUZFMzc4RkY5MEQzOUVBMjg3NUU5RjZFNTEz
RkRDRUFDQTAeFw0yNjAyMDUwOTM4NDhaFw0yNzAyMDQwOTQzNDhaMDMxMTAvBgNV
BAMTKDJFQ0Q0RTgxODI5MjhDQjYwODg5Q0U1NTYzNTRGOEJFQ0VFMjk0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6EbWuKx9GRggjGwj2jnPIuLQ
c7vPqMlDWf3L60DYJp1dyxG7SxuKT8UM8GNFVTmEOESD6xTxHkKVLOzVa25Lo4j4
2QaoNwfOQxB1QTkU0PZKDkeSNGTQonovrV8DzY7o666zVBeb7Z/0tILq3tz8U90S
WJp7NgfFJhLJ+ZutT6KZmGweg3U1aPUtfjzj0USAll2kL4HvYGvcsGlVKQUwQlQb
BkZ17PxkPKEEp8LM5KcpLRLFtWDtn0foNSywnJDV6bOPsM/PxAQNOejxdYgXi/yb
xBPvVYsUf2Yc2ev4YDinVc+6lpFhzIe54tMP85bXW7ObmRjZ0dvUx3Y9jDrbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULs1OgYKSjLYIic5VY1T4vs7ilLYwHwYDVR0j
BBgwFoAUHQyIX+N4/5DTnqKHXp9uUT/c6sowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlObVk2cW5pM0ZtTTVyU2htWDl3UWhSVlozTENXQjNNZHQ1ejJSQ05t
OEIvMS8xRDBDODg1RkUzNzhGRjkwRDM5RUEyODc1RTlGNkU1MTNGRENFQUNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMEM4ODVGRTM3OEZGOTBE
MzlFQTI4NzVFOUY2RTUxM0ZEQ0VBQ0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5Tm1ZNnFuaTNGbU01clNobVg5d1FoUlZaM0xDV0IzTWR0NXoyUkNObThCLzEv
MzEzNzMwMmUzMjM0MzQyZTMyMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr06jANBgkqhkiG9w0BAQsFAAOCAQEAMqUR
Xk69RbkZ7oVMMrqPfAjXnlhRzIoo4GQCa5N8XH2ij/ZyMfP43fgJw9UDwLxnexqT
rhBpIEKAA0V5h7MdsthN9Pz7OyOqeJJrTzy8R6Nm4um2ziWVb3VN96YYC8M9Kp2X
n57YZcKEnINEzghO5eBywnupeqhMlm/4yDoEv7n2Ot5ST/eOgr9FDCoa6n5wSGty
3f5uCw2aa22rZz9mhLvy10xGq/UV5wFE8ymv/DwFgQtImXGEEecUasIyVyS3RwVg
QGDnILDkkowc3devjpF6cEK7Knz6XNXnwIDk0uIQQbE2V5pRa+c7epONVZyGF+zL
Kd3F4Ymbrr7BPb1cwA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:00 2026 by rpki-client