Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
File:                     3138362e3232342e302e302f32302d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          tzNQmKtKT7DcMJ5hNaLI9DJwW5AdtT2dIlsCg8gSLJQ=
Subject key identifier:   C7:B9:19:43:CE:0F:6A:4A:C5:4F:78:A5:73:0D:FE:3E:38:03:C3:50
Certificate issuer:       /CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
Certificate serial:       6BF2628BB622C500C477515C6E75708392B25883
Authority key identifier: E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa
Signing time:             Wed 04 Feb 2026 19:00:01 +0000
ROA not before:           Wed 04 Feb 2026 18:55:01 +0000
ROA not after:            Wed 03 Feb 2027 19:00:01 +0000
asID:                     262755
IP address blocks:        186.224.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl
                          rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f2:62:8b:b6:22:c5:00:c4:77:51:5c:6e:75:70:83:92:b2:58:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98018CD2C68060BD13517BC1BB31EAD6E73038A
        Validity
            Not Before: Feb  4 18:55:01 2026 GMT
            Not After : Feb  3 19:00:01 2027 GMT
        Subject: CN=C7B91943CE0F6A4AC54F78A5730DFE3E3803C350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:70:47:25:8d:9e:98:45:e8:a8:a6:75:28:
                    af:43:4d:06:cc:59:e7:02:4e:53:fb:f5:cd:66:03:
                    15:76:6f:27:57:40:cf:9e:82:be:b5:2a:3c:79:cf:
                    9a:52:19:46:f9:41:8b:cc:96:69:d0:1b:9a:0f:1c:
                    d8:20:42:ab:a4:93:58:52:44:f9:b1:5c:d9:75:31:
                    fd:08:9c:3a:4f:9b:7a:0f:85:23:df:30:61:95:da:
                    ca:b9:6d:4d:43:f5:30:e3:c7:9a:67:df:8f:97:c7:
                    7f:72:de:8f:60:fa:34:b9:8b:4e:db:fc:e9:e6:46:
                    e5:49:a8:c0:59:8d:28:f5:b1:70:93:19:13:ee:08:
                    6b:08:38:03:1c:38:87:1f:3c:60:c7:43:0b:67:ce:
                    7a:0b:6f:45:7e:cb:5e:0e:e5:59:d8:92:15:8b:54:
                    60:59:12:3f:fd:43:56:12:fd:bd:15:18:aa:53:cb:
                    2f:26:c2:5f:ca:1f:be:b4:8c:bd:56:47:25:50:19:
                    33:03:3d:6c:f9:53:cc:22:9c:3d:99:64:ab:27:49:
                    1e:39:5b:01:c6:25:06:b3:d1:25:e2:b8:c2:71:10:
                    dc:7b:fa:8d:23:78:8e:7f:21:c2:37:fd:a2:c2:19:
                    ad:f0:29:82:16:0d:dc:23:0e:1f:88:ef:eb:9d:86:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B9:19:43:CE:0F:6A:4A:C5:4F:78:A5:73:0D:FE:3E:38:03:C3:50
            X509v3 Authority Key Identifier:
                keyid:E9:80:18:CD:2C:68:06:0B:D1:35:17:BC:1B:B3:1E:AD:6E:73:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E98018CD2C68060BD13517BC1BB31EAD6E73038A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/1/3138362e3232342e302e302f32302d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:22:72:88:65:a0:cf:3b:7a:cf:7c:4a:3f:58:2c:41:c2:
         17:3b:db:fa:82:40:a0:89:20:29:eb:90:8a:b6:63:41:5b:aa:
         d2:e6:5f:fd:37:45:6c:47:59:4d:ba:bd:91:ea:b3:e0:70:19:
         38:92:6f:c1:85:00:2a:5f:12:84:f8:e2:c8:0d:66:b3:b4:93:
         89:09:6e:20:59:1b:3e:13:dc:0e:9c:9a:c5:4d:94:b4:02:50:
         13:3a:c2:00:29:20:1e:3a:e6:12:a2:15:4e:a8:56:de:d0:04:
         d8:12:bc:65:3a:f1:73:4e:a0:87:b6:ea:4e:09:87:f1:5e:f9:
         01:bd:41:7f:c4:84:a3:f6:a4:09:c7:69:19:22:5e:17:71:c8:
         94:e5:a5:36:9b:5d:a8:21:ab:5b:7f:13:49:f7:a5:93:9d:f1:
         c4:ab:ee:e4:8c:ef:46:85:4c:1e:cf:cc:c2:6f:57:b8:ae:26:
         99:ce:84:58:a0:26:7c:a6:de:da:42:e9:94:24:dd:19:dd:36:
         bc:7d:a5:2a:4d:f2:29:df:50:ae:c8:7e:f2:0e:3a:12:1c:c9:
         5d:10:c4:7d:63:9c:fd:1e:85:70:ca:11:76:cd:bf:17:63:4a:
         82:2d:fe:20:02:96:50:76:6f:70:f2:8b:35:b8:fd:ed:34:d6:
         20:c9:44:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa/Jii7YixQDEd1FcbnVwg5KyWIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk4MDE4Q0QyQzY4MDYwQkQxMzUxN0JDMUJCMzFFQUQ2
RTczMDM4QTAeFw0yNjAyMDQxODU1MDFaFw0yNzAyMDMxOTAwMDFaMDMxMTAvBgNV
BAMTKEM3QjkxOTQzQ0UwRjZBNEFDNTRGNzhBNTczMERGRTNFMzgwM0MzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlnBHJY2emEXoqKZ1KK9DTQbM
WecCTlP79c1mAxV2bydXQM+egr61Kjx5z5pSGUb5QYvMlmnQG5oPHNggQqukk1hS
RPmxXNl1Mf0InDpPm3oPhSPfMGGV2sq5bU1D9TDjx5pn34+Xx39y3o9g+jS5i07b
/OnmRuVJqMBZjSj1sXCTGRPuCGsIOAMcOIcfPGDHQwtnznoLb0V+y14O5VnYkhWL
VGBZEj/9Q1YS/b0VGKpTyy8mwl/KH760jL1WRyVQGTMDPWz5U8winD2ZZKsnSR45
WwHGJQaz0SXiuMJxENx7+o0jeI5/IcI3/aLCGa3wKYIWDdwjDh+I7+udhi9XAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUx7kZQ84PakrFT3ilcw3+PjgDw1AwHwYDVR0j
BBgwFoAU6YAYzSxoBgvRNRe8G7MerW5zA4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1BmMUYxNHFXaVdVa3JmNDJqZWgxczRibVdCMmV6YXNMZ3dqeWpVZDl4
WHMvMS9FOTgwMThDRDJDNjgwNjBCRDEzNTE3QkMxQkIzMUVBRDZFNzMwMzhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5ODAxOENEMkM2ODA2MEJE
MTM1MTdCQzFCQjMxRUFENkU3MzAzOEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NQZjFGMTRxV2lXVWtyZjQyamVoMXM0Ym1XQjJlemFzTGd3anlqVWQ5eFhzLzEv
MzEzODM2MmUzMjMyMzQyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuAAMA0GCSqGSIb3DQEBCwUAA4IBAQAO/SJyiGWg
zzt6z3xKP1gsQcIXO9v6gkCgiSAp65CKtmNBW6rS5l/9N0VsR1lNur2R6rPgcBk4
km/BhQAqXxKE+OLIDWaztJOJCW4gWRs+E9wOnJrFTZS0AlATOsIAKSAeOuYSohVO
qFbe0ATYErxlOvFzTqCHtupOCYfxXvkBvUF/xISj9qQJx2kZIl4XcciU5aU2m12o
IatbfxNJ96WTnfHEq+7kjO9GhUwez8zCb1e4riaZzoRYoCZ8pt7aQumUJN0Z3Ta8
faUqTfIp31CuyH7yDjoSHMldEMR9Y5z9HoVwyhF2zb8XY0qCLf4gApZQdm9w8os1
uP3tNNYgyURH
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:19 2026 by rpki-client