Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
File:                     3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          QbXmHDVZjFU8MD5jhFXGrxfbWQp7RC8hRLWjnG0OfDE=
Subject key identifier:   82:4A:42:CB:9E:16:45:A8:F7:1B:89:B6:14:43:FF:DF:2A:25:0F:E8
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       15D31A6516DDC96694A38C6109206717ABE30AF2
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 04 Feb 2026 21:46:39 +0000
ROA not before:           Wed 04 Feb 2026 21:41:39 +0000
ROA not after:            Wed 03 Feb 2027 21:46:39 +0000
asID:                     262300
IP address blocks:        138.36.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl
                          rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d3:1a:65:16:dd:c9:66:94:a3:8c:61:09:20:67:17:ab:e3:0a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Feb  4 21:41:39 2026 GMT
            Not After : Feb  3 21:46:39 2027 GMT
        Subject: CN=824A42CB9E1645A8F71B89B61443FFDF2A250FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:83:39:14:28:61:b5:4b:dd:2e:73:05:93:
                    b5:15:8c:42:63:9d:6d:b2:9d:a7:40:8c:a3:42:c6:
                    a5:35:08:1a:a7:a4:25:1f:95:f9:a2:22:78:ec:e7:
                    25:09:55:c3:50:57:9a:d9:d0:bd:39:bb:0b:54:7a:
                    47:b1:31:83:1f:b2:ff:fa:77:c1:23:93:01:8b:a5:
                    cc:84:bd:ce:e4:ce:80:6b:6f:b2:48:f7:56:91:47:
                    c7:b3:99:fe:03:2e:be:a5:fb:a4:d6:f3:63:6c:03:
                    4c:a7:2f:42:93:5e:93:99:c4:2e:06:74:58:a8:fc:
                    f6:60:e6:de:37:87:90:c2:74:c2:4e:07:73:76:f3:
                    e9:bb:d4:b3:80:e5:f0:57:46:f5:84:fe:41:34:81:
                    58:0d:5d:90:6d:c1:55:fb:6f:bc:3a:78:5a:38:a9:
                    61:00:20:c6:d8:50:84:0e:b6:9d:f2:e5:87:5f:be:
                    94:fc:f4:1f:20:e5:68:70:72:3f:79:05:c5:48:ef:
                    94:7d:2e:0a:a4:04:7e:3d:d8:1f:f5:bd:f0:f0:3d:
                    9e:bf:12:9c:13:52:07:03:de:3b:af:df:e4:5b:f7:
                    68:59:7f:bb:93:e4:cc:76:bd:9d:d4:29:a9:c2:f2:
                    8e:67:7d:0b:02:ae:0c:28:f7:30:85:cb:30:cb:34:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4A:42:CB:9E:16:45:A8:F7:1B:89:B6:14:43:FF:DF:2A:25:0F:E8
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:bc:0a:ed:e8:14:f6:31:2b:9f:6f:76:69:aa:51:92:89:e6:
         fd:11:5a:23:13:f6:08:3e:98:1f:12:a3:31:f0:a9:83:13:3e:
         e4:7e:d2:b7:99:b9:de:f8:ae:77:4a:b1:5d:f2:3c:ce:6b:7a:
         97:33:04:b8:d8:36:2d:fa:73:5f:0b:48:66:9c:7b:c3:25:7e:
         7a:b8:22:c1:ba:54:3d:5c:fb:ec:9a:57:52:8a:a1:32:92:25:
         f6:bf:9d:39:8b:43:b9:7d:86:08:49:47:03:78:36:ed:57:cc:
         bd:30:18:fc:8e:bf:de:54:42:f1:d5:1e:27:be:65:2e:6f:32:
         10:58:40:df:f5:23:e9:a8:1c:ce:ea:59:b0:0f:9b:0d:f9:9e:
         85:75:9a:34:31:26:44:70:c2:a3:42:e4:99:44:6e:7f:d0:4b:
         72:16:58:27:8a:08:6c:6d:fb:3b:c1:d8:04:57:8b:9d:b9:30:
         90:b3:04:84:dd:e7:1b:f2:cf:41:79:ab:80:99:0b:42:73:18:
         90:a8:43:ed:ce:66:24:ab:fe:8d:e1:00:65:81:42:27:65:26:
         61:8a:e1:60:3e:9e:6b:32:e3:0c:19:f8:fc:59:cc:a7:f0:67:
         22:35:2b:a9:74:80:40:c0:a7:79:92:db:a2:ea:f9:c7:6d:ff:
         7f:58:b8:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFdMaZRbdyWaUo4xhCSBnF6vjCvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNERjc5OTkyRjkwN0NDNDRGMUQ0MkREQjQwODUxQzNG
MDdEOEY1RjAeFw0yNjAyMDQyMTQxMzlaFw0yNzAyMDMyMTQ2MzlaMDMxMTAvBgNV
BAMTKDgyNEE0MkNCOUUxNjQ1QThGNzFCODlCNjE0NDNGRkRGMkEyNTBGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKj4M5FChhtUvdLnMFk7UVjEJj
nW2ynadAjKNCxqU1CBqnpCUflfmiInjs5yUJVcNQV5rZ0L05uwtUekexMYMfsv/6
d8EjkwGLpcyEvc7kzoBrb7JI91aRR8ezmf4DLr6l+6TW82NsA0ynL0KTXpOZxC4G
dFio/PZg5t43h5DCdMJOB3N28+m71LOA5fBXRvWE/kE0gVgNXZBtwVX7b7w6eFo4
qWEAIMbYUIQOtp3y5YdfvpT89B8g5Whwcj95BcVI75R9LgqkBH492B/1vfDwPZ6/
EpwTUgcD3juv3+Rb92hZf7uT5Mx2vZ3UKanC8o5nfQsCrgwo9zCFyzDLNFOXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgkpCy54WRaj3G4m2FEP/3yolD+gwHwYDVR0j
BBgwFoAUk995mS+QfMRPHULdtAhRw/B9j18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHE0UkNMN21VSm1nVXRSREtqakI4WTROenBkczRuVHdpVGg3RzhlTmdY
TjMvMS85M0RGNzk5OTJGOTA3Q0M0NEYxRDQyRERCNDA4NTFDM0YwN0Q4RjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzREY3OTk5MkY5MDdDQzQ0
RjFENDJEREI0MDg1MUMzRjA3RDhGNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RxNFJDTDdtVUptZ1V0UkRLampCOFk0TnpwZHM0blR3aVRoN0c4ZU5nWE4zLzEv
MzEzMzM4MmUzMzM2MmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKJKgwDQYJKoZIhvcNAQELBQADggEBAD68Cu3o
FPYxK59vdmmqUZKJ5v0RWiMT9gg+mB8SozHwqYMTPuR+0reZud74rndKsV3yPM5r
epczBLjYNi36c18LSGace8Mlfnq4IsG6VD1c++yaV1KKoTKSJfa/nTmLQ7l9hghJ
RwN4Nu1XzL0wGPyOv95UQvHVHie+ZS5vMhBYQN/1I+moHM7qWbAPmw35noV1mjQx
JkRwwqNC5JlEbn/QS3IWWCeKCGxt+zvB2ARXi525MJCzBITd5xvyz0F5q4CZC0Jz
GJCoQ+3OZiSr/o3hAGWBQidlJmGK4WA+nmsy4wwZ+PxZzKfwZyI1K6l0gEDAp3mS
26Lq+cdt/39YuC0=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:59 2026 by rpki-client