Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa
File:                     3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa (raw, json)
Hash identifier:          N2i/qBjBq5/TJnBxu2abDlDhuFcVTp1FhoYaGw4HyrY=
Subject key identifier:   BF:F8:58:70:63:B0:16:04:B6:E1:BF:3C:E8:D4:C2:67:A5:5F:4A:07
Certificate issuer:       /CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
Certificate serial:       56C461C3D2504439F9328C742A2285FABD9A92E7
Authority key identifier: CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa
Signing time:             Thu 05 Feb 2026 14:58:13 +0000
ROA not before:           Thu 05 Feb 2026 14:53:13 +0000
ROA not after:            Thu 04 Feb 2027 14:58:13 +0000
asID:                     273788
IP address blocks:        170.233.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl
                          rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c4:61:c3:d2:50:44:39:f9:32:8c:74:2a:22:85:fa:bd:9a:92:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2
        Validity
            Not Before: Feb  5 14:53:13 2026 GMT
            Not After : Feb  4 14:58:13 2027 GMT
        Subject: CN=BFF8587063B01604B6E1BF3CE8D4C267A55F4A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:64:d7:5b:ec:90:81:61:65:37:a1:c9:4c:
                    01:e1:ce:a8:28:fb:97:60:a1:ad:2d:0a:07:71:c0:
                    6a:95:53:42:6b:0b:49:15:17:ec:81:be:d9:fe:c8:
                    38:7e:68:bc:2d:6c:04:a0:a1:2c:24:f8:05:4b:dd:
                    00:fc:09:ae:e4:c3:65:27:94:82:f0:34:61:07:56:
                    1f:5d:6c:56:d8:d4:6c:c4:52:4f:08:1d:c1:94:50:
                    7d:e9:4c:f1:2f:8f:74:ff:b0:e4:d4:ed:c4:4f:4d:
                    7e:3c:07:e3:e6:d5:5f:af:ba:d7:76:15:d4:4f:51:
                    e6:19:30:a7:b0:77:03:19:4f:a2:c1:cf:25:a5:9f:
                    0e:88:47:d2:e3:ec:04:36:fc:4b:05:b6:92:7d:3c:
                    ca:67:50:8f:76:56:09:9a:1e:f2:2b:2e:ef:60:bd:
                    d4:0e:b2:64:da:30:f3:8c:12:5f:1f:46:a4:cb:38:
                    41:ea:64:5b:63:fb:8d:0b:18:34:2b:04:d6:8f:d6:
                    53:85:4f:5b:44:01:35:f8:67:36:d9:36:57:39:0a:
                    0b:7b:73:9d:a6:d4:f0:0b:79:a3:9d:49:a5:2c:19:
                    bc:0f:3d:b7:1c:0a:23:a5:69:78:4e:18:4d:3c:e6:
                    7b:48:ef:4f:b3:7b:c4:09:ca:a7:54:dd:03:cf:4a:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:58:70:63:B0:16:04:B6:E1:BF:3C:E8:D4:C2:67:A5:5F:4A:07
            X509v3 Authority Key Identifier:
                keyid:CE:9E:7D:4F:B6:64:E3:CF:2F:C9:0E:96:04:FA:E1:98:A1:A3:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE9E7D4FB664E3CF2FC90E9604FAE198A1A302B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6b5tdFKyN45w3ipdkdRA7HWJyFu4FoEhcUnYRP5WsTv/1/3137302e3233332e3131332e302f32342d3234203d3e20323733373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:3e:de:da:94:ce:33:1f:e6:d5:5c:43:1f:5a:58:ac:06:
         74:e0:96:18:ec:b1:0e:3a:ca:74:a4:8b:16:9f:73:c5:44:9b:
         e0:83:c2:f4:d5:6d:db:c5:98:d1:0f:81:65:e9:f8:e0:54:69:
         83:22:23:c9:78:19:a0:5a:74:23:d2:62:3b:bd:e4:41:7d:1f:
         15:22:79:55:08:05:ff:ff:9a:40:6b:a0:10:69:2d:d9:b2:33:
         fe:d1:04:19:8b:db:e2:e2:95:3d:e1:b3:88:20:91:8e:6c:65:
         e6:69:5a:1f:0d:0d:83:f5:11:45:8e:3f:2a:c4:fa:80:13:15:
         40:9c:6e:8f:e3:9e:21:74:82:55:49:74:8f:80:bb:1d:22:be:
         cf:ca:3e:ed:92:01:42:00:ea:22:5f:43:bb:e1:be:0f:f0:a0:
         bc:63:80:65:76:6c:a7:92:0e:4f:83:e8:09:2b:69:4d:1d:79:
         76:c7:05:76:54:4b:c8:22:b5:bc:d9:a5:a7:cb:0b:0b:74:ee:
         dc:80:28:8e:65:5e:1c:1b:ae:1c:f8:d2:48:ee:46:8d:7e:2c:
         cb:7b:c3:c4:83:1a:a9:53:59:57:29:45:32:ed:ba:05:c7:8b:
         c3:63:45:30:e6:51:94:f8:f5:25:de:79:75:77:45:69:93:71:
         c9:1b:66:b4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVsRhw9JQRDn5Mox0KiKF+r2akucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U5RTdENEZCNjY0RTNDRjJGQzkwRTk2MDRGQUUxOThB
MUEzMDJCMjAeFw0yNjAyMDUxNDUzMTNaFw0yNzAyMDQxNDU4MTNaMDMxMTAvBgNV
BAMTKEJGRjg1ODcwNjNCMDE2MDRCNkUxQkYzQ0U4RDRDMjY3QTU1RjRBMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiWTXW+yQgWFlN6HJTAHhzqgo
+5dgoa0tCgdxwGqVU0JrC0kVF+yBvtn+yDh+aLwtbASgoSwk+AVL3QD8Ca7kw2Un
lILwNGEHVh9dbFbY1GzEUk8IHcGUUH3pTPEvj3T/sOTU7cRPTX48B+Pm1V+vutd2
FdRPUeYZMKewdwMZT6LBzyWlnw6IR9Lj7AQ2/EsFtpJ9PMpnUI92VgmaHvIrLu9g
vdQOsmTaMPOMEl8fRqTLOEHqZFtj+40LGDQrBNaP1lOFT1tEATX4ZzbZNlc5Cgt7
c52m1PALeaOdSaUsGbwPPbccCiOlaXhOGE085ntI70+ze8QJyqdU3QPPSu47AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUv/hYcGOwFgS24b886NTCZ6VfSgcwHwYDVR0j
BBgwFoAUzp59T7Zk488vyQ6WBPrhmKGjArIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDZiNXRkRkt5TjQ1dzNpcGRrZFJBN0hXSnlGdTRGb0VoY1VuWVJQNVdz
VHYvMS9DRTlFN0Q0RkI2NjRFM0NGMkZDOTBFOTYwNEZBRTE5OEExQTMwMkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFOUU3RDRGQjY2NEUzQ0Yy
RkM5MEU5NjA0RkFFMTk4QTFBMzAyQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q2YjV0ZEZLeU40NXczaXBka2RSQTdIV0p5RnU0Rm9FaGNVbllSUDVXc1R2LzEv
MzEzNzMwMmUzMjMzMzMyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMzM3MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpcTANBgkqhkiG9w0BAQsFAAOCAQEAhOQ+
3tqUzjMf5tVcQx9aWKwGdOCWGOyxDjrKdKSLFp9zxUSb4IPC9NVt28WY0Q+BZen4
4FRpgyIjyXgZoFp0I9JiO73kQX0fFSJ5VQgF//+aQGugEGkt2bIz/tEEGYvb4uKV
PeGziCCRjmxl5mlaHw0Ng/URRY4/KsT6gBMVQJxuj+OeIXSCVUl0j4C7HSK+z8o+
7ZIBQgDqIl9Du+G+D/CgvGOAZXZsp5IOT4PoCStpTR15dscFdlRLyCK1vNmlp8sL
C3Tu3IAojmVeHBuuHPjSSO5GjX4sy3vDxIMaqVNZVylFMu26BceLw2NFMOZRlPj1
Jd55dXdFaZNxyRtmtA==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:19 2026 by rpki-client