Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          hMRUyvsmY7W0EhlSRIqa507Bmp6ZvpUByLqkXo3l5uc=
Subject key identifier:   F0:A2:42:62:A9:72:C2:D4:5D:BA:C1:CB:4F:4A:C6:2F:54:DA:17:C0
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       5E519B3F83667E83E396AB0DAA8B4AEFC0CB7E02
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa
Signing time:             Wed 04 Feb 2026 20:00:09 +0000
ROA not before:           Wed 04 Feb 2026 19:55:09 +0000
ROA not after:            Wed 03 Feb 2027 20:00:09 +0000
asID:                     270836
IP address blocks:        189.14.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:51:9b:3f:83:66:7e:83:e3:96:ab:0d:aa:8b:4a:ef:c0:cb:7e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Feb  4 19:55:09 2026 GMT
            Not After : Feb  3 20:00:09 2027 GMT
        Subject: CN=F0A24262A972C2D45DBAC1CB4F4AC62F54DA17C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:11:70:da:a1:36:43:b1:7d:eb:30:89:d3:
                    5c:5b:8f:6c:c6:f8:4d:7d:61:ca:e7:d0:ff:0e:b8:
                    a4:6a:9b:6b:3c:59:ad:02:39:a0:6c:fe:b1:de:f8:
                    84:47:6f:f5:fc:df:7b:c5:f9:78:6e:21:5f:f1:e7:
                    b8:87:37:77:b8:e6:75:d3:08:a2:c7:b9:2c:01:17:
                    4b:56:52:ab:7a:2a:5e:cb:de:d5:3d:09:22:2a:12:
                    43:78:92:94:ce:82:54:d2:86:1b:26:45:b9:06:c1:
                    de:f6:0b:a2:69:db:8a:69:c2:88:d9:3b:9a:15:6c:
                    69:00:3f:fb:23:5d:36:a7:b4:c2:89:75:0b:b1:8b:
                    70:b7:da:7d:00:ad:c9:f6:cb:98:55:5d:64:46:90:
                    13:57:99:c4:85:65:9f:de:9a:16:5f:dd:d5:67:d5:
                    4d:4a:f3:8c:e6:e1:88:f4:a1:c6:1b:1f:5b:4f:0f:
                    d6:2c:93:ca:0f:01:9b:22:cf:e3:a5:0e:ff:ae:82:
                    54:5e:6d:9c:66:16:f0:91:b7:8e:82:54:52:3b:3f:
                    e7:54:03:25:21:ac:70:e4:c1:35:2f:39:3e:8b:ab:
                    bd:14:5b:23:63:6d:e0:e2:65:12:09:ff:8f:d6:9f:
                    6c:da:d6:db:c2:35:25:d4:99:cb:8d:45:f3:18:00:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:42:62:A9:72:C2:D4:5D:BA:C1:CB:4F:4A:C6:2F:54:DA:17:C0
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131332e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:13:91:7a:49:90:a4:d0:83:29:13:1d:bc:12:35:f2:c2:00:
         9e:1c:11:06:59:f0:c0:90:35:5e:b7:9a:44:0c:ed:ba:f9:b0:
         ad:58:78:90:5c:0a:3b:61:5d:11:40:d3:6f:12:e9:85:19:66:
         d0:81:7a:0f:01:88:1a:f4:dc:85:c3:92:43:92:6a:54:74:15:
         c4:5f:11:89:a2:e4:1a:d7:66:f9:0d:af:fa:eb:62:ca:cd:30:
         2f:1d:29:34:73:b7:3e:08:b4:25:c5:b3:63:6e:f3:13:ac:cf:
         46:a8:79:d0:4a:9e:2e:42:e9:04:20:7c:0e:76:47:06:b3:b7:
         3c:03:83:72:52:fd:e5:b3:a1:cb:78:00:7e:20:09:3b:a8:15:
         f8:93:86:c9:53:d5:39:3a:19:01:ad:04:4f:87:31:50:d5:44:
         79:a0:5d:8f:a9:ef:57:74:16:08:6c:25:d0:3f:2e:03:45:ed:
         6a:e4:b0:60:62:5c:6a:2c:34:8c:fb:17:86:3d:fc:c9:be:af:
         e7:47:c4:bb:fc:7e:42:b0:0e:be:a1:60:7e:c2:c8:ed:7d:a9:
         71:f7:2a:c9:86:ab:f8:ad:fc:ea:91:e6:83:ba:a8:dd:27:88:
         8b:20:15:a5:53:37:17:2e:c7:a7:01:bf:76:e7:db:c0:96:29:
         af:c9:32:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXlGbP4NmfoPjlqsNqotK78DLfgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdCNTMxMTI1QjQyQjQ4OThFMDE4RjFENUYyODM3Q0NB
ODc0RUI4QjAeFw0yNjAyMDQxOTU1MDlaFw0yNzAyMDMyMDAwMDlaMDMxMTAvBgNV
BAMTKEYwQTI0MjYyQTk3MkMyRDQ1REJBQzFDQjRGNEFDNjJGNTREQTE3QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzRFw2qE2Q7F96zCJ01xbj2zG
+E19Ycrn0P8OuKRqm2s8Wa0COaBs/rHe+IRHb/X833vF+XhuIV/x57iHN3e45nXT
CKLHuSwBF0tWUqt6Kl7L3tU9CSIqEkN4kpTOglTShhsmRbkGwd72C6Jp24ppwojZ
O5oVbGkAP/sjXTantMKJdQuxi3C32n0Arcn2y5hVXWRGkBNXmcSFZZ/emhZf3dVn
1U1K84zm4Yj0ocYbH1tPD9Ysk8oPAZsiz+OlDv+uglRebZxmFvCRt46CVFI7P+dU
AyUhrHDkwTUvOT6Lq70UWyNjbeDiZRIJ/4/Wn2za1tvCNSXUmcuNRfMYAFvRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8KJCYqlywtRdusHLT0rGL1TaF8AwHwYDVR0j
BBgwFoAUZ7UxEltCtImOAY8dXyg3zKh064swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRhUm5VU2I2WXY2aXhxdW9mQ2lXNXp2RWZXVmo0OWJFVW5FbzhMS2V4
c0MvMS82N0I1MzExMjVCNDJCNDg5OEUwMThGMUQ1RjI4MzdDQ0E4NzRFQjhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QjUzMTEyNUI0MkI0ODk4
RTAxOEYxRDVGMjgzN0NDQTg3NEVCOEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0YVJuVVNiNll2Nml4cXVvZkNpVzV6dkVmV1ZqNDliRVVuRW84TEtleHNDLzEv
MzEzODM5MmUzMTM0MmUzMTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzODMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9DnEwDQYJKoZIhvcNAQELBQADggEBAAkTkXpJ
kKTQgykTHbwSNfLCAJ4cEQZZ8MCQNV63mkQM7br5sK1YeJBcCjthXRFA028S6YUZ
ZtCBeg8BiBr03IXDkkOSalR0FcRfEYmi5BrXZvkNr/rrYsrNMC8dKTRztz4ItCXF
s2Nu8xOsz0aoedBKni5C6QQgfA52RwaztzwDg3JS/eWzoct4AH4gCTuoFfiThslT
1Tk6GQGtBE+HMVDVRHmgXY+p71d0FghsJdA/LgNF7WrksGBiXGosNIz7F4Y9/Mm+
r+dHxLv8fkKwDr6hYH7CyO19qXH3KsmGq/it/OqR5oO6qN0niIsgFaVTNxcux6cB
v3bn28CWKa/JMp4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:25 2026 by rpki-client