Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
File:                     3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa (raw, json)
Hash identifier:          efhhpjU8wCuaC75GsBd+tNnpGpPJgbtvfQzC866G7CA=
Subject key identifier:   D7:A6:65:E4:B1:B6:C2:BD:50:92:33:03:67:50:16:1A:6A:D8:7E:78
Certificate issuer:       /CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
Certificate serial:       2BB38A90A1693F259C118B3B63B6AD0BAD1DDA5A
Authority key identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa
Signing time:             Thu 05 Feb 2026 06:08:22 +0000
ROA not before:           Thu 05 Feb 2026 06:03:22 +0000
ROA not after:            Thu 04 Feb 2027 06:08:22 +0000
asID:                     270466
IP address blocks:        200.106.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl
                          rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b3:8a:90:a1:69:3f:25:9c:11:8b:3b:63:b6:ad:0b:ad:1d:da:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
        Validity
            Not Before: Feb  5 06:03:22 2026 GMT
            Not After : Feb  4 06:08:22 2027 GMT
        Subject: CN=D7A665E4B1B6C2BD509233036750161A6AD87E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:57:d7:62:1d:ec:b3:64:bc:37:90:ee:95:
                    9a:70:ba:d0:07:f3:aa:7b:d5:a7:80:0c:6a:1d:21:
                    bf:01:74:99:82:0e:36:2e:e9:dd:39:3f:9d:87:12:
                    e0:c7:d8:32:9c:ab:05:bc:ea:f6:18:b1:fa:c9:55:
                    89:34:98:f9:c5:14:54:7c:7b:ee:31:f4:c9:2a:50:
                    88:d3:98:e7:de:e8:6b:51:8e:cb:3a:3d:0d:18:dd:
                    ee:3d:c6:64:b5:28:e3:c1:2b:6e:7b:0b:b1:be:2d:
                    45:ed:58:20:65:8b:83:d0:4e:a3:f0:81:79:f9:5a:
                    54:b0:4e:cd:dc:39:2f:19:5f:f0:ad:d0:34:a6:64:
                    92:70:71:eb:22:6b:db:98:5b:26:fd:25:9b:81:0d:
                    fe:45:8c:f2:9f:e3:b6:05:2a:9e:66:6d:b5:2d:3b:
                    d1:1d:9b:70:e1:4e:eb:45:8d:52:18:70:0e:d0:0a:
                    9b:23:69:da:4a:38:40:1a:e2:0c:25:93:60:90:89:
                    d8:53:57:bb:80:00:53:9c:43:4e:b6:d2:23:dc:89:
                    66:f8:eb:e6:4a:d0:a2:3c:74:d1:2c:20:86:eb:38:
                    ab:c7:5a:af:8f:4a:3c:d8:ba:d9:0f:a0:e0:19:92:
                    cc:f6:cf:09:a8:8c:da:4f:dc:6a:06:29:cb:be:c5:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:65:E4:B1:B6:C2:BD:50:92:33:03:67:50:16:1A:6A:D8:7E:78
            X509v3 Authority Key Identifier:
                keyid:A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/3230302e3130362e3133362e302f32322d3234203d3e20323730343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:63:6d:b6:45:c5:4f:08:fa:47:69:19:05:07:e9:1c:fa:9b:
         15:75:5c:f8:66:b0:8e:28:e2:4d:2b:e2:80:05:e6:74:33:2f:
         18:ca:58:bc:ef:63:df:b1:eb:87:ea:4e:ea:ee:44:75:ab:63:
         68:9a:6a:98:60:8e:37:1b:95:92:77:cc:e6:54:25:31:7a:5b:
         29:9f:26:d9:ed:59:73:22:46:42:e6:77:39:60:46:fc:83:73:
         84:df:38:ca:cd:a5:73:b1:50:96:dc:da:0b:0e:29:a4:eb:e7:
         e7:fb:bd:03:07:8d:04:8d:22:78:63:55:e7:4a:4f:bc:70:0f:
         7b:c8:62:5b:fe:16:9e:81:eb:58:e3:91:4c:8c:ea:e9:12:c1:
         66:3a:33:31:fa:2e:5a:ac:c8:cc:64:45:bb:3f:24:a7:a3:b0:
         a5:46:d9:bc:03:2a:a9:f3:04:e3:b2:7b:56:08:28:cb:f5:e5:
         f7:05:9c:86:a5:20:de:ec:65:48:b5:19:ad:9f:8a:7c:a3:dc:
         44:0b:0c:cd:4c:37:09:c4:db:a5:af:e0:d2:42:54:23:66:81:
         dc:be:ca:6e:0f:14:d8:9b:53:97:b9:df:26:24:b9:5d:19:0d:
         23:0a:cd:9a:3b:37:ad:56:d0:6e:44:0b:73:29:86:dd:20:d9:
         ec:5a:bb:ca
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUK7OKkKFpPyWcEYs7Y7atC60d2lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBENDhBNDgxQUZBQjVGMUQ4REExNkZEMzEwMUFDNDAx
RjdBMTZDODAeFw0yNjAyMDUwNjAzMjJaFw0yNzAyMDQwNjA4MjJaMDMxMTAvBgNV
BAMTKEQ3QTY2NUU0QjFCNkMyQkQ1MDkyMzMwMzY3NTAxNjFBNkFEODdFNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChp1fXYh3ss2S8N5DulZpwutAH
86p71aeADGodIb8BdJmCDjYu6d05P52HEuDH2DKcqwW86vYYsfrJVYk0mPnFFFR8
e+4x9MkqUIjTmOfe6GtRjss6PQ0Y3e49xmS1KOPBK257C7G+LUXtWCBli4PQTqPw
gXn5WlSwTs3cOS8ZX/Ct0DSmZJJwcesia9uYWyb9JZuBDf5FjPKf47YFKp5mbbUt
O9Edm3DhTutFjVIYcA7QCpsjadpKOEAa4gwlk2CQidhTV7uAAFOcQ0620iPciWb4
6+ZK0KI8dNEsIIbrOKvHWq+PSjzYutkPoOAZksz2zwmojNpP3GoGKcu+xXXpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU16Zl5LG2wr1QkjMDZ1AWGmrYfngwHwYDVR0j
BBgwFoAUoNSKSBr6tfHY2hb9MQGsQB96FsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREE3TXFyRHBGeDlKazhOOGtHRVpEYjJqaWo4eWd2ZlpuaEN0eFk2QlZB
dWEvMS9BMEQ0OEE0ODFBRkFCNUYxRDhEQTE2RkQzMTAxQUM0MDFGN0ExNkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwRDQ4QTQ4MUFGQUI1RjFE
OERBMTZGRDMxMDFBQzQwMUY3QTE2QzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBN01xckRwRng5Sms4TjhrR0VaRGIyamlqOHlndmZabmhDdHhZNkJWQXVhLzEv
MzIzMDMwMmUzMTMwMzYyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM0MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshqiDANBgkqhkiG9w0BAQsFAAOCAQEAUmNt
tkXFTwj6R2kZBQfpHPqbFXVc+GawjijiTSvigAXmdDMvGMpYvO9j37Hrh+pO6u5E
datjaJpqmGCONxuVknfM5lQlMXpbKZ8m2e1ZcyJGQuZ3OWBG/INzhN84ys2lc7FQ
ltzaCw4ppOvn5/u9AweNBI0ieGNV50pPvHAPe8hiW/4WnoHrWOORTIzq6RLBZjoz
MfouWqzIzGRFuz8kp6OwpUbZvAMqqfME47J7Vggoy/Xl9wWchqUg3uxlSLUZrZ+K
fKPcRAsMzUw3CcTbpa/g0kJUI2aB3L7Kbg8U2JtTl7nfJiS5XRkNIwrNmjs3rVbQ
bkQLcymG3SDZ7Fq7yg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:18 2026 by rpki-client