Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa
File:                     3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          ZRdY0GJxCclM6WwQHyGpoBX8dN8NxuAn4xYcgVm+2uA=
Subject key identifier:   F4:AF:D6:76:32:C0:BB:8E:46:A0:1B:1D:3D:F3:EB:C2:3E:70:F7:55
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       5EE8B621F74E926FFD6945E4DF86A5705AFE0C8E
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 04 Feb 2026 21:46:39 +0000
ROA not before:           Wed 04 Feb 2026 21:41:39 +0000
ROA not after:            Wed 03 Feb 2027 21:46:39 +0000
asID:                     262300
IP address blocks:        177.87.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl
                          rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e8:b6:21:f7:4e:92:6f:fd:69:45:e4:df:86:a5:70:5a:fe:0c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Feb  4 21:41:39 2026 GMT
            Not After : Feb  3 21:46:39 2027 GMT
        Subject: CN=F4AFD67632C0BB8E46A01B1D3DF3EBC23E70F755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:23:c7:bb:56:13:38:d3:b7:f6:cd:48:d8:
                    fa:4e:4a:f8:f9:26:94:df:a9:20:92:3f:39:72:26:
                    66:ea:a6:d7:e2:2d:8e:92:b5:d0:14:64:f1:03:0c:
                    35:eb:dc:b9:19:8a:4a:c2:0d:33:dc:86:77:04:14:
                    a2:64:cd:77:19:81:f3:b9:c5:da:78:62:20:5b:e6:
                    d8:84:26:70:83:21:04:e9:e4:d1:a8:62:56:21:e6:
                    19:7b:2c:f9:b3:40:a9:da:1c:f6:46:14:3d:90:35:
                    5e:e1:77:4d:77:83:c6:93:15:3c:50:14:0b:ae:0b:
                    06:8f:40:cf:04:ee:1c:ff:b1:44:36:49:ef:e7:20:
                    17:3f:1c:4b:94:15:ee:27:f7:77:cc:3f:eb:0c:47:
                    ba:18:4e:55:2c:e9:7f:52:29:65:f3:3c:40:e8:7f:
                    2d:d4:df:a1:e0:5c:3e:5c:46:dd:d0:af:18:3a:23:
                    45:25:f5:37:43:a4:b2:1d:a2:87:69:3b:86:50:c3:
                    83:80:33:f0:5c:40:20:39:f1:30:17:cc:6e:3f:21:
                    fd:9b:8c:cf:bc:98:ff:2a:78:94:f2:79:87:ed:8b:
                    3c:bf:5a:4b:99:ff:41:01:4f:00:f8:9c:3a:22:53:
                    a3:8a:17:fb:7b:4c:25:ec:9e:44:ed:0a:33:3f:64:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:D6:76:32:C0:BB:8E:46:A0:1B:1D:3D:F3:EB:C2:3E:70:F7:55
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3137372e38372e3130342e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:18:d6:34:37:fe:9d:50:44:db:69:66:fb:2d:41:1d:64:
         a9:b7:bd:45:6f:0b:14:6c:1c:9a:18:0c:4e:ed:a3:03:81:13:
         a7:35:fb:13:9e:3c:dc:1d:1b:6b:33:9e:a5:5a:40:ae:6e:3a:
         50:51:1c:ac:eb:ae:a4:4f:bf:58:b2:b6:85:b2:d1:4e:fe:fd:
         c7:22:37:c0:4e:15:20:94:74:e7:a0:44:36:89:39:df:10:f1:
         c3:da:bf:27:fe:e1:79:28:97:5b:18:44:fd:fa:a5:b7:84:b6:
         39:e2:97:90:50:57:bf:e8:74:74:ab:36:62:cd:a4:c0:cf:0b:
         ea:d7:3b:78:39:70:77:6d:39:a6:a7:20:28:f7:80:1d:8b:31:
         12:68:b0:53:94:92:28:d1:34:ec:30:3a:70:4b:1b:3f:84:cb:
         30:08:58:c2:80:9a:2b:fe:42:3f:16:b2:dc:d2:f1:6c:7e:04:
         bd:83:e4:09:24:51:1e:b6:16:9f:a5:4e:65:24:c9:e9:b7:7c:
         49:95:d0:36:1d:1e:6d:2a:38:08:45:ba:db:11:c0:d8:e5:78:
         4e:78:9f:58:ca:3d:77:cb:d7:a3:f9:b9:98:c5:ba:e2:d7:0e:
         4b:0a:fb:1a:c1:28:91:f6:b2:00:6e:f3:81:f6:96:66:c7:57:
         12:bf:e2:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXui2IfdOkm/9aUXk34alcFr+DI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNERjc5OTkyRjkwN0NDNDRGMUQ0MkREQjQwODUxQzNG
MDdEOEY1RjAeFw0yNjAyMDQyMTQxMzlaFw0yNzAyMDMyMTQ2MzlaMDMxMTAvBgNV
BAMTKEY0QUZENjc2MzJDMEJCOEU0NkEwMUIxRDNERjNFQkMyM0U3MEY3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHyPHu1YTONO39s1I2PpOSvj5
JpTfqSCSPzlyJmbqptfiLY6StdAUZPEDDDXr3LkZikrCDTPchncEFKJkzXcZgfO5
xdp4YiBb5tiEJnCDIQTp5NGoYlYh5hl7LPmzQKnaHPZGFD2QNV7hd013g8aTFTxQ
FAuuCwaPQM8E7hz/sUQ2Se/nIBc/HEuUFe4n93fMP+sMR7oYTlUs6X9SKWXzPEDo
fy3U36HgXD5cRt3Qrxg6I0Ul9TdDpLIdoodpO4ZQw4OAM/BcQCA58TAXzG4/If2b
jM+8mP8qeJTyeYftizy/WkuZ/0EBTwD4nDoiU6OKF/t7TCXsnkTtCjM/ZKbzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9K/WdjLAu45GoBsdPfPrwj5w91UwHwYDVR0j
BBgwFoAUk995mS+QfMRPHULdtAhRw/B9j18wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHE0UkNMN21VSm1nVXRSREtqakI4WTROenBkczRuVHdpVGg3RzhlTmdY
TjMvMS85M0RGNzk5OTJGOTA3Q0M0NEYxRDQyRERCNDA4NTFDM0YwN0Q4RjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzREY3OTk5MkY5MDdDQzQ0
RjFENDJEREI0MDg1MUMzRjA3RDhGNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RxNFJDTDdtVUptZ1V0UkRLampCOFk0TnpwZHM0blR3aVRoN0c4ZU5nWE4zLzEv
MzEzNzM3MmUzODM3MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxV2gwDQYJKoZIhvcNAQELBQADggEBAIZPGNY0
N/6dUETbaWb7LUEdZKm3vUVvCxRsHJoYDE7towOBE6c1+xOePNwdG2sznqVaQK5u
OlBRHKzrrqRPv1iytoWy0U7+/cciN8BOFSCUdOegRDaJOd8Q8cPavyf+4Xkol1sY
RP36pbeEtjnil5BQV7/odHSrNmLNpMDPC+rXO3g5cHdtOaanICj3gB2LMRJosFOU
kijRNOwwOnBLGz+EyzAIWMKAmiv+Qj8WstzS8Wx+BL2D5AkkUR62Fp+lTmUkyem3
fEmV0DYdHm0qOAhFutsRwNjleE54n1jKPXfL16P5uZjFuuLXDksK+xrBKJH2sgBu
84H2lmbHVxK/4u8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:09:22 2026 by rpki-client