Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier:          2u84EM5AYvQ+8v+rwbPeZ1hbqfGxWzoiepFfeZTfgrM=
Subject key identifier:   4E:AA:20:BB:E5:ED:F3:90:1C:BD:92:5E:45:27:77:F2:5B:2C:5B:54
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       24EB2B17C552790BA329F30769F513CC37F13AD1
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa
Signing time:             Thu 05 Feb 2026 00:09:35 +0000
ROA not before:           Thu 05 Feb 2026 00:04:35 +0000
ROA not after:            Thu 04 Feb 2027 00:09:35 +0000
asID:                     203
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:eb:2b:17:c5:52:79:0b:a3:29:f3:07:69:f5:13:cc:37:f1:3a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Feb  5 00:04:35 2026 GMT
            Not After : Feb  4 00:09:35 2027 GMT
        Subject: CN=4EAA20BBE5EDF3901CBD925E452777F25B2C5B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b5:2c:f1:60:54:dd:39:0f:db:1a:2b:77:cc:
                    85:58:a0:f1:d2:13:67:4a:28:a2:de:92:cc:86:4d:
                    24:8b:01:c6:16:6c:68:d0:53:38:11:e5:ff:43:0a:
                    e1:58:b8:b8:0d:98:9d:a5:06:c7:d1:00:06:ce:a5:
                    0e:9c:03:23:b9:70:8c:6e:fb:9b:8f:9f:0d:60:a7:
                    89:b1:13:78:71:c8:e4:c2:0d:bb:2d:aa:76:1e:2b:
                    53:7f:45:39:93:0d:af:7a:7f:2c:c7:72:45:3c:4a:
                    80:e1:89:d8:f2:b7:92:7c:cc:89:9f:a0:e0:cc:5a:
                    23:6e:34:b6:d7:14:c8:84:64:07:6a:76:a1:53:7c:
                    25:f2:ad:2d:4a:b1:3f:c6:ef:9f:10:91:53:a8:f2:
                    8b:f5:61:ef:66:32:de:34:56:35:ad:c3:32:5b:5b:
                    ce:b1:ac:1e:4f:a6:44:34:fc:90:d9:7c:12:c2:cd:
                    34:72:c8:16:f8:4a:d2:62:cb:cf:51:92:88:25:8a:
                    41:67:65:6f:b0:79:8c:eb:bd:5d:52:ca:fa:40:d1:
                    aa:49:07:36:f2:3c:2e:c8:50:78:25:ce:b3:e0:80:
                    b8:c2:4d:7f:41:14:b7:81:14:4b:5b:be:e6:df:d8:
                    72:95:61:00:eb:04:95:7f:f6:c5:bb:7b:d8:89:db:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AA:20:BB:E5:ED:F3:90:1C:BD:92:5E:45:27:77:F2:5B:2C:5B:54
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:b4:76:92:2f:cb:54:56:9f:00:ad:ee:91:e3:bf:10:9b:a8:
         a2:aa:76:60:2d:53:24:a2:42:35:b5:a8:63:17:3b:de:82:94:
         d8:a7:72:b5:3b:bb:d2:99:b5:23:8b:34:a9:72:22:5a:d1:ed:
         2f:f5:9a:e9:00:2a:f3:41:99:4e:44:fb:db:67:04:cf:e7:28:
         e5:c1:85:20:9e:1e:2c:a9:cd:a8:f5:ce:1d:84:6d:a2:ad:69:
         f4:34:a0:3b:26:b5:a3:98:93:33:94:a2:d4:a6:b8:e8:00:a4:
         b5:cd:b6:88:8d:e2:b2:76:df:f0:72:56:fb:94:73:a1:d8:cd:
         4a:a3:39:ce:dc:08:df:6d:8d:10:6e:90:ef:0b:99:ae:28:e0:
         b3:5f:84:8b:33:66:66:3d:b2:dd:51:db:e5:4f:7a:a1:f5:e6:
         8b:e7:7a:ba:72:cb:63:b9:c3:8f:44:45:ba:7b:be:5e:65:0e:
         78:f8:2f:83:30:13:82:76:85:e9:0a:f0:a3:62:9a:c6:fc:5f:
         43:18:20:59:ca:04:37:b8:94:84:77:9a:f3:a9:cb:88:06:d5:
         5d:75:4b:c0:10:ec:84:b5:e3:3b:e2:ea:e2:cc:7b:0a:d2:c8:
         ff:d2:53:91:a3:82:78:88:3a:ff:ef:eb:fd:6f:80:cd:d6:f2:
         a4:a1:e6:1e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUJOsrF8VSeQujKfMHafUTzDfxOtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY0NUY1NDQyMDQ5NzkzNDkwRTQ4NEUxOEFEMTUxNkM4
RkRDODA4NzAeFw0yNjAyMDUwMDA0MzVaFw0yNzAyMDQwMDA5MzVaMDMxMTAvBgNV
BAMTKDRFQUEyMEJCRTVFREYzOTAxQ0JEOTI1RTQ1Mjc3N0YyNUIyQzVCNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstSzxYFTdOQ/bGit3zIVYoPHS
E2dKKKLeksyGTSSLAcYWbGjQUzgR5f9DCuFYuLgNmJ2lBsfRAAbOpQ6cAyO5cIxu
+5uPnw1gp4mxE3hxyOTCDbstqnYeK1N/RTmTDa96fyzHckU8SoDhidjyt5J8zImf
oODMWiNuNLbXFMiEZAdqdqFTfCXyrS1KsT/G758QkVOo8ov1Ye9mMt40VjWtwzJb
W86xrB5PpkQ0/JDZfBLCzTRyyBb4StJiy89RkoglikFnZW+weYzrvV1SyvpA0apJ
BzbyPC7IUHglzrPggLjCTX9BFLeBFEtbvubf2HKVYQDrBJV/9sW7e9iJ24X1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUTqogu+Xt85AcvZJeRSd38lssW1QwHwYDVR0j
BBgwFoAUv0X1RCBJeTSQ5IThitFRbI/cgIcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0M0S1F0QlFXeFRqMW5ZYTdUTmhVdng5eG1hN1pyeUYxVWt6TnZhclNY
RWkvMS9CRjQ1RjU0NDIwNDk3OTM0OTBFNDg0RTE4QUQxNTE2QzhGREM4MDg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGNDVGNTQ0MjA0OTc5MzQ5
MEU0ODRFMThBRDE1MTZDOEZEQzgwODcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDNEtRdEJRV3hUajFuWWE3VE5oVXZ4OXhtYTdacnlGMVVrek52YXJTWEVpLzEv
MzEzNzM5MmUzNDM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjMw
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKzMZAwDQYJKoZIhvcNAQELBQADggEBAEa0dpIvy1RWnwCt
7pHjvxCbqKKqdmAtUySiQjW1qGMXO96ClNincrU7u9KZtSOLNKlyIlrR7S/1mukA
KvNBmU5E+9tnBM/nKOXBhSCeHiypzaj1zh2EbaKtafQ0oDsmtaOYkzOUotSmuOgA
pLXNtoiN4rJ23/ByVvuUc6HYzUqjOc7cCN9tjRBukO8Lma4o4LNfhIszZmY9st1R
2+VPeqH15ovnerpyy2O5w49ERbp7vl5lDnj4L4MwE4J2hekK8KNimsb8X0MYIFnK
BDe4lIR3mvOpy4gG1V11S8AQ7IS14zvi6uLMewrSyP/SU5GjgniIOv/v6/1vgM3W
8qSh5h4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:06:22 2026 by rpki-client