Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa
File:                     3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (raw, json)
Hash identifier:          KujT5MR/jwAarmtDw/nh5icyUo3QMLB4DceDPQMNS2I=
Subject key identifier:   5D:1B:DF:93:AC:93:FE:94:C0:28:08:49:44:4F:4E:E7:D9:63:43:56
Certificate issuer:       /CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
Certificate serial:       395878FC40EB7A20380C71A73E74BD9203DB94C7
Authority key identifier: 1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa
Signing time:             Fri 06 Feb 2026 20:00:06 +0000
ROA not before:           Fri 06 Feb 2026 19:55:06 +0000
ROA not after:            Fri 05 Feb 2027 20:00:06 +0000
asID:                     262676
IP address blocks:        187.73.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl
                          rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:58:78:fc:40:eb:7a:20:38:0c:71:a7:3e:74:bd:92:03:db:94:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A10A2ED52FC4857ABCA56A1489602C109D46814
        Validity
            Not Before: Feb  6 19:55:06 2026 GMT
            Not After : Feb  5 20:00:06 2027 GMT
        Subject: CN=5D1BDF93AC93FE94C0280849444F4EE7D9634356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:4b:4e:93:6d:e5:e0:ff:ac:aa:67:55:96:
                    1b:66:ff:ed:ca:41:d4:08:67:f1:4d:4b:a8:f5:83:
                    7b:f8:50:a7:9c:f0:64:29:81:57:19:65:b0:6e:30:
                    97:cd:73:44:4c:66:94:3e:4a:7d:e2:31:8c:bd:27:
                    8f:31:38:18:c8:d6:c5:40:2b:fa:fa:69:a8:6d:58:
                    e8:54:65:9f:a9:fc:13:56:23:b7:6e:a1:86:df:78:
                    17:34:a6:66:09:e0:2f:1c:c5:60:2e:19:49:8a:77:
                    4b:5e:47:98:52:4d:65:e4:93:24:7d:0d:d6:40:da:
                    e1:c5:17:32:37:20:3c:c4:dd:a1:42:d9:a9:01:84:
                    50:3c:62:0d:9f:91:ac:d5:d3:9c:fa:08:16:a1:40:
                    12:65:39:5a:79:3c:a4:8e:8e:2f:92:d8:13:4a:e5:
                    42:66:77:6b:d8:aa:9a:b7:30:e7:d9:fd:91:4c:08:
                    ee:c4:a8:73:c2:61:ef:10:b7:b4:0b:aa:9f:3a:96:
                    79:cb:be:46:a0:85:80:7d:74:3e:32:b1:b8:52:69:
                    da:d2:f3:c1:47:38:69:d8:3b:87:2d:12:a3:e7:c3:
                    e8:6e:41:b1:2c:7e:4b:59:0b:fd:98:d4:77:90:48:
                    52:3b:7e:26:a1:f8:7e:9c:4e:27:5f:d5:b0:89:44:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1B:DF:93:AC:93:FE:94:C0:28:08:49:44:4F:4E:E7:D9:63:43:56
            X509v3 Authority Key Identifier:
                keyid:1A:10:A2:ED:52:FC:48:57:AB:CA:56:A1:48:96:02:C1:09:D4:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A10A2ED52FC4857ABCA56A1489602C109D46814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:86:49:a8:73:bd:b9:b9:64:ca:c4:f5:26:33:28:21:9a:
         e6:77:14:f4:95:71:31:c0:2d:46:a2:9e:ec:25:06:70:55:7c:
         d4:90:af:13:c2:f1:86:de:b0:27:4a:cf:b2:1a:28:32:f3:3d:
         cc:b9:e6:2a:0c:19:ee:f6:5c:ca:ec:b8:7c:eb:73:7a:e0:e3:
         91:7c:49:e7:1d:69:0e:92:56:33:7e:fc:60:df:a5:40:6a:87:
         24:3e:8c:b1:e7:9f:36:d9:9e:83:f9:3f:18:98:e2:d0:af:4a:
         d3:22:13:fd:57:8c:30:c3:70:b7:87:64:9e:db:98:f3:a0:c7:
         2a:0d:e5:6a:ee:82:e3:ad:64:1b:21:dd:49:a2:ff:60:9b:93:
         ac:a5:db:9b:79:9e:12:a8:f9:b9:89:02:e3:d6:c5:fd:2a:39:
         63:00:c9:1b:ee:76:95:35:8a:28:f5:d8:06:67:ee:2b:aa:4d:
         8f:3d:48:42:70:fd:98:f3:1c:d2:3e:08:fc:1f:5c:a7:40:4b:
         f3:d7:8e:38:9c:0e:2a:20:1c:52:74:af:50:94:f2:ee:25:b8:
         1f:56:cd:84:e7:f7:46:ce:a0:88:95:a1:48:f2:bc:9c:f6:bf:
         96:68:c2:98:65:26:5a:85:31:5d:be:4a:0d:2c:a9:cf:50:bd:
         0f:df:cd:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOVh4/EDreiA4DHGnPnS9kgPblMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUExMEEyRUQ1MkZDNDg1N0FCQ0E1NkExNDg5NjAyQzEw
OUQ0NjgxNDAeFw0yNjAyMDYxOTU1MDZaFw0yNzAyMDUyMDAwMDZaMDMxMTAvBgNV
BAMTKDVEMUJERjkzQUM5M0ZFOTRDMDI4MDg0OTQ0NEY0RUU3RDk2MzQzNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWW0tOk23l4P+sqmdVlhtm/+3K
QdQIZ/FNS6j1g3v4UKec8GQpgVcZZbBuMJfNc0RMZpQ+Sn3iMYy9J48xOBjI1sVA
K/r6aahtWOhUZZ+p/BNWI7duoYbfeBc0pmYJ4C8cxWAuGUmKd0teR5hSTWXkkyR9
DdZA2uHFFzI3IDzE3aFC2akBhFA8Yg2fkazV05z6CBahQBJlOVp5PKSOji+S2BNK
5UJmd2vYqpq3MOfZ/ZFMCO7EqHPCYe8Qt7QLqp86lnnLvkaghYB9dD4ysbhSadrS
88FHOGnYO4ctEqPnw+huQbEsfktZC/2Y1HeQSFI7fiah+H6cTidf1bCJRHrnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXRvfk6yT/pTAKAhJRE9O59ljQ1YwHwYDVR0j
BBgwFoAUGhCi7VL8SFerylahSJYCwQnUaBQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlpeERFckQ4d0FDb3RIRHZDU1hicmZWeTM1dXJrN2FGSE5XN3JSbWZQ
cm0vMS8xQTEwQTJFRDUyRkM0ODU3QUJDQTU2QTE0ODk2MDJDMTA5RDQ2ODE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBMTBBMkVENTJGQzQ4NTdB
QkNBNTZBMTQ4OTYwMkMxMDlENDY4MTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpaXhERXJEOHdBQ290SER2Q1NYYnJmVnkzNXVyazdhRkhOVzdyUm1mUHJtLzEv
MzEzODM3MmUzNzMzMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7SeAwDQYJKoZIhvcNAQELBQADggEBAFXAhkmo
c725uWTKxPUmMyghmuZ3FPSVcTHALUainuwlBnBVfNSQrxPC8YbesCdKz7IaKDLz
Pcy55ioMGe72XMrsuHzrc3rg45F8SecdaQ6SVjN+/GDfpUBqhyQ+jLHnnzbZnoP5
PxiY4tCvStMiE/1XjDDDcLeHZJ7bmPOgxyoN5WruguOtZBsh3Umi/2Cbk6yl25t5
nhKo+bmJAuPWxf0qOWMAyRvudpU1iij12AZn7iuqTY89SEJw/ZjzHNI+CPwfXKdA
S/PXjjicDiogHFJ0r1CU8u4luB9WzYTn90bOoIiVoUjyvJz2v5ZowphlJlqFMV2+
Sg0sqc9QvQ/fzWo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:45 2026 by rpki-client