Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e36332e302e302f32302d3234203d3e203238363538.roa
File:                     3138372e36332e302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          i3Nj6EH8lhKCLBDwJEEaXO1QVNYQs3bmvQ5RB13/ee4=
Subject key identifier:   7E:97:CD:3A:72:11:7A:18:1A:45:04:D1:60:A9:76:F3:1B:E1:09:63
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       05D9D13F722CD64788DC8BA3285FBAC81F31A6
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e36332e302e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:29 +0000
ROA not before:           Thu 05 Feb 2026 11:00:29 +0000
ROA not after:            Thu 04 Feb 2027 11:05:29 +0000
asID:                     28658
IP address blocks:        187.63.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d9:d1:3f:72:2c:d6:47:88:dc:8b:a3:28:5f:ba:c8:1f:31:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:29 2026 GMT
            Not After : Feb  4 11:05:29 2027 GMT
        Subject: CN=7E97CD3A72117A181A4504D160A976F31BE10963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:eb:62:5c:87:85:61:fd:4e:f8:3f:7d:67:
                    bd:d1:2b:39:4a:5d:16:46:27:b6:0f:a4:7d:25:e5:
                    50:ad:02:d9:ac:ba:8a:ab:d2:d7:e3:30:7f:23:fb:
                    97:45:79:a1:6e:18:c0:9b:5f:39:3f:f2:9d:60:4f:
                    f1:d0:a4:cd:79:7e:09:e8:4e:46:83:8f:01:bc:9e:
                    35:c5:77:c2:e7:6a:b5:e5:16:10:d9:1d:a4:45:bb:
                    cb:aa:b9:73:7c:e3:cc:3b:06:4d:7c:d4:4c:15:75:
                    53:0b:84:34:7a:41:4d:8f:97:02:ba:3b:4e:f4:4c:
                    a8:1f:17:f7:fb:ad:da:9a:d2:c2:ae:6d:7c:fc:e4:
                    60:86:69:5e:7c:26:3f:49:54:29:c4:8c:9a:ef:7e:
                    99:ad:d5:fb:71:e6:c9:ca:18:03:56:e2:40:8b:98:
                    b9:3a:56:45:4a:fc:3a:4c:c1:4a:8f:45:ad:9a:41:
                    5c:bf:c3:c6:4b:d8:75:81:92:a5:31:fb:53:7f:37:
                    8e:7d:12:70:c8:6a:54:cc:e5:3b:dc:79:cd:7b:ec:
                    5a:80:09:0f:08:81:f4:83:73:3d:49:2b:8b:82:74:
                    94:9b:49:13:6a:c8:16:08:2c:ca:48:b0:ee:81:fc:
                    21:c3:3c:62:eb:5c:05:eb:c8:41:75:1a:46:80:3e:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:CD:3A:72:11:7A:18:1A:45:04:D1:60:A9:76:F3:1B:E1:09:63
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e36332e302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:ab:b5:61:41:93:45:01:22:c7:f0:69:5f:38:c4:c4:d1:
         f4:b9:45:b8:01:0c:80:99:b3:af:b9:ee:4c:41:64:c7:c7:fc:
         00:41:48:9f:03:37:d3:be:a2:25:bc:ac:44:0e:7c:c6:fb:a5:
         c4:26:4e:07:8a:21:9d:4a:4c:99:55:d3:42:14:31:4a:72:3c:
         b9:8c:07:1a:36:64:7a:67:99:e0:da:ac:90:ed:da:94:06:aa:
         e0:60:21:07:de:28:56:00:4d:79:c5:6c:e2:2a:1f:21:c5:5d:
         37:06:6d:24:1b:32:de:3d:02:c4:03:85:aa:fc:4b:62:32:27:
         60:de:e2:e9:7a:47:77:d8:d9:cb:a8:67:82:74:28:9c:22:29:
         85:80:53:39:0e:52:ca:07:66:14:1b:17:90:99:c1:3c:9c:33:
         2d:00:f3:49:01:1e:19:1d:af:4a:61:00:12:cd:29:7f:5d:2e:
         3b:eb:17:0b:38:a3:ba:a1:b8:92:a1:f4:ff:09:ed:13:45:b0:
         66:ed:e9:d9:d9:9a:3c:9f:63:1d:04:28:be:54:4b:e3:12:11:
         98:92:8d:6a:e3:67:bc:31:8b:ad:ea:68:99:b6:4d:b6:5b:84:
         17:58:06:a0:0c:5c:f2:01:5b:0a:f7:00:0d:17:cb:18:09:f0:
         12:e4:b4:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgITBdnRP3Is1keI3IujKF+6yB8xpjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg1OUQ5NzM2ODkzMEEyOEE0MzYyMUQzMjAyMEMzRTcwQjI2
RTc5NzA4MB4XDTI2MDIwNTExMDAyOVoXDTI3MDIwNDExMDUyOVowMzExMC8GA1UE
AxMoN0U5N0NEM0E3MjExN0ExODFBNDUwNEQxNjBBOTc2RjMxQkUxMDk2MzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJnB62Jch4Vh/U74P31nvdErOUpd
FkYntg+kfSXlUK0C2ay6iqvS1+MwfyP7l0V5oW4YwJtfOT/ynWBP8dCkzXl+CehO
RoOPAbyeNcV3wudqteUWENkdpEW7y6q5c3zjzDsGTXzUTBV1UwuENHpBTY+XAro7
TvRMqB8X9/ut2prSwq5tfPzkYIZpXnwmP0lUKcSMmu9+ma3V+3HmycoYA1biQIuY
uTpWRUr8OkzBSo9FrZpBXL/DxkvYdYGSpTH7U383jn0ScMhqVMzlO9x5zXvsWoAJ
DwiB9INzPUkri4J0lJtJE2rIFggsykiw7oH8IcM8YutcBevIQXUaRoA+4t8CAwEA
AaOCAkswggJHMB0GA1UdDgQWBBR+l806chF6GBpFBNFgqXbzG+EJYzAfBgNVHSME
GDAWgBRZ2XNokwoopDYh0yAgw+cLJueXCDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DeHJ4OTluYWhmcDVoQ29Gazg4QzZwNHhGTlp2aXJwN3JianAzS0FSR2p3
Uy8xLzU5RDk3MzY4OTMwQTI4QTQzNjIxRDMyMDIwQzNFNzBCMjZFNzk3MDguY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNTlEOTczNjg5MzBBMjhBNDM2
MjFEMzIwMjBDM0U3MEIyNkU3OTcwOC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Q3hyeDk5bmFoZnA1aENvRms4OEM2cDR4Rk5admlycDdyYmpwM0tBUkdqd1MvMS8z
MTM4MzcyZTM2MzMyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2MzUz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBLs/ADANBgkqhkiG9w0BAQsFAAOCAQEAqBSrtWFBk0UBIsfw
aV84xMTR9LlFuAEMgJmzr7nuTEFkx8f8AEFInwM3076iJbysRA58xvulxCZOB4oh
nUpMmVXTQhQxSnI8uYwHGjZkemeZ4NqskO3alAaq4GAhB94oVgBNecVs4iofIcVd
NwZtJBsy3j0CxAOFqvxLYjInYN7i6XpHd9jZy6hngnQonCIphYBTOQ5SygdmFBsX
kJnBPJwzLQDzSQEeGR2vSmEAEs0pf10uO+sXCzijuqG4kqH0/wntE0WwZu3p2dma
PJ9jHQQovlRL4xIRmJKNauNnvDGLrepombZNtluEF1gGoAxc8gFbCvcADRfLGAnw
EuS0cA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:23 2026 by rpki-client