Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3139312e372e382e302f32312d3234203d3e20323632353935.roa
File:                     3139312e372e382e302f32312d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          anK27G2c7vjgfJ1phEjaSMtYINLX8h12I1B+Gxsdj6Y=
Subject key identifier:   2F:1A:BB:D5:4D:A3:AC:45:40:90:47:04:16:30:83:33:0F:A8:CA:97
Certificate issuer:       /CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
Certificate serial:       6AF8BB66125A2B74F02D8E47F82C7DFD455AFFC2
Authority key identifier: 43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3139312e372e382e302f32312d3234203d3e20323632353935.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     262595
IP address blocks:        191.7.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl
                          rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:bb:66:12:5a:2b:74:f0:2d:8e:47:f8:2c:7d:fd:45:5a:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4371007B3B7771C6CF4FBE4A71B3B946B841AD63
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=2F1ABBD54DA3AC4540904704163083330FA8CA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:3d:32:70:d9:a7:ad:51:7c:bc:ea:78:32:
                    a4:38:0d:f0:9d:33:3e:10:d3:b4:fe:74:dd:ed:6d:
                    a1:94:58:a1:c6:23:d4:10:47:19:9e:d1:ef:d7:2f:
                    3a:2e:d8:e8:fa:75:7c:71:f8:a5:72:0c:4a:d7:28:
                    0a:f7:2b:9d:6e:13:43:03:5a:4f:dc:84:52:8d:72:
                    e3:2b:6f:77:0c:3d:78:e2:c2:ce:2f:88:51:ce:96:
                    25:c4:e1:57:96:54:2b:5c:74:83:4f:40:26:eb:44:
                    5f:a4:7f:7d:9a:0c:cc:91:c2:ec:07:92:33:9e:ea:
                    60:32:06:76:cc:7b:a0:d2:d2:99:32:e2:1d:f0:71:
                    60:02:dd:d1:b2:42:56:3a:5c:11:b7:27:a6:71:9c:
                    53:a6:a4:bb:32:85:af:7b:6d:fb:9b:9b:80:73:ed:
                    b3:14:9a:83:c7:79:02:af:57:f3:56:f3:79:67:d4:
                    00:77:fc:18:cf:53:7f:72:44:0b:a5:85:2e:56:5e:
                    bc:7b:4a:0b:c1:29:34:3a:20:13:f4:13:be:d5:b5:
                    e0:76:18:9a:79:67:02:09:f7:8f:e9:98:b1:38:8f:
                    70:6f:d8:47:08:7a:31:dd:21:df:12:c3:88:dd:ad:
                    d7:86:27:01:eb:13:b2:61:fa:41:c6:f2:bf:f9:4d:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1A:BB:D5:4D:A3:AC:45:40:90:47:04:16:30:83:33:0F:A8:CA:97
            X509v3 Authority Key Identifier:
                keyid:43:71:00:7B:3B:77:71:C6:CF:4F:BE:4A:71:B3:B9:46:B8:41:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4371007B3B7771C6CF4FBE4A71B3B946B841AD63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DeDcngWXnuqxGK6ofU9T1V75NtodDJrAEhMDcVrzch5g/1/3139312e372e382e302f32312d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ca:dd:82:d6:0b:f2:81:8b:02:71:dd:ce:43:ea:4f:84:17:bb:
         f1:4c:e3:09:3b:00:41:24:88:ec:c5:09:92:00:cb:28:cf:39:
         25:07:00:bf:8e:6d:3c:d2:3a:49:ed:06:b8:77:5e:e9:3d:88:
         2c:d5:09:76:9c:9f:96:cc:79:91:a3:43:45:21:dc:9b:9f:b4:
         ee:63:08:a0:f3:2a:26:d4:85:d6:a3:50:9d:7c:f7:56:37:69:
         07:ee:59:38:eb:5a:cd:e6:72:82:f0:f0:a6:e2:8a:4e:f3:f9:
         79:00:f0:8e:b3:2f:44:41:ce:89:7a:4c:d8:f9:d7:34:22:56:
         fb:67:77:f3:5d:42:66:16:14:77:dc:77:7d:58:73:94:c5:fe:
         d5:19:cd:88:da:89:1f:5b:d0:d4:a0:e6:5c:b8:bc:13:ff:c2:
         1f:23:d7:19:fe:c3:f7:f8:60:3f:c2:72:98:72:2b:69:8a:4a:
         24:99:f6:93:d9:2c:d3:0b:7d:ae:11:f9:22:1c:c8:71:cf:86:
         08:8c:d2:ac:6b:9c:e8:d6:d2:dc:83:c1:1f:c5:ad:73:df:3f:
         69:ff:a7:db:e1:23:72:26:c5:ce:64:a8:f6:1e:25:a3:45:8e:
         d1:18:6f:a3:97:15:7e:61:3d:0f:cb:26:d3:87:5d:5a:32:59:
         f5:f8:d9:8f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUavi7ZhJaK3TwLY5H+Cx9/UVa/8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDM3MTAwN0IzQjc3NzFDNkNGNEZCRTRBNzFCM0I5NDZC
ODQxQUQ2MzAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKDJGMUFCQkQ1NERBM0FDNDU0MDkwNDcwNDE2MzA4MzMzMEZBOENBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUj0ycNmnrVF8vOp4MqQ4DfCd
Mz4Q07T+dN3tbaGUWKHGI9QQRxme0e/XLzou2Oj6dXxx+KVyDErXKAr3K51uE0MD
Wk/chFKNcuMrb3cMPXjiws4viFHOliXE4VeWVCtcdINPQCbrRF+kf32aDMyRwuwH
kjOe6mAyBnbMe6DS0pky4h3wcWAC3dGyQlY6XBG3J6ZxnFOmpLsyha97bfubm4Bz
7bMUmoPHeQKvV/NW83ln1AB3/BjPU39yRAulhS5WXrx7SgvBKTQ6IBP0E77VteB2
GJp5ZwIJ94/pmLE4j3Bv2EcIejHdId8Sw4jdrdeGJwHrE7Jh+kHG8r/5TVdRAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQULxq71U2jrEVAkEcEFjCDMw+oypcwHwYDVR0j
BBgwFoAUQ3EAezt3ccbPT75KcbO5RrhBrWMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGVEY25nV1hudXF4R0s2b2ZVOVQxVjc1TnRvZERKckFFaE1EY1ZyemNo
NWcvMS80MzcxMDA3QjNCNzc3MUM2Q0Y0RkJFNEE3MUIzQjk0NkI4NDFBRDYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNzEwMDdCM0I3NzcxQzZD
RjRGQkU0QTcxQjNCOTQ2Qjg0MUFENjMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlRGNuZ1dYbnVxeEdLNm9mVTlUMVY3NU50b2RESnJBRWhNRGNWcnpjaDVnLzEv
MzEzOTMxMmUzNzJlMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2MzIzNTM5
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO/BwgwDQYJKoZIhvcNAQELBQADggEBAMrdgtYL8oGLAnHd
zkPqT4QXu/FM4wk7AEEkiOzFCZIAyyjPOSUHAL+ObTzSOkntBrh3Xuk9iCzVCXac
n5bMeZGjQ0Uh3JuftO5jCKDzKibUhdajUJ1891Y3aQfuWTjrWs3mcoLw8Kbiik7z
+XkA8I6zL0RBzol6TNj51zQiVvtnd/NdQmYWFHfcd31Yc5TF/tUZzYjaiR9b0NSg
5ly4vBP/wh8j1xn+w/f4YD/CcphyK2mKSiSZ9pPZLNMLfa4R+SIcyHHPhgiM0qxr
nOjW0tyDwR/FrXPfP2n/p9vhI3Imxc5kqPYeJaNFjtEYb6OXFX5hPQ/LJtOHXVoy
WfX42Y8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:32 2026 by rpki-client