Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
File:                     3137302e302e3234382e302f32322d3232203d3e20323632333031.roa (raw, json)
Hash identifier:          HT0HUtlOjnyjBAhIB0CsfwtPy1bgyYjc5EWNuPF1iTY=
Subject key identifier:   00:E0:93:9B:1E:48:FB:11:E0:B9:D2:4B:89:25:BB:4C:10:FF:3E:B2
Certificate issuer:       /CN=E30CAFF45780AC90434C232E196752E3283B9BD2
Certificate serial:       37CB4D847AFFD30AB9400D19B979FC49A8EDDDEE
Authority key identifier: E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa
Signing time:             Thu 05 Feb 2026 07:46:16 +0000
ROA not before:           Thu 05 Feb 2026 07:41:16 +0000
ROA not after:            Thu 04 Feb 2027 07:46:16 +0000
asID:                     262301
IP address blocks:        170.0.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:4d:84:7a:ff:d3:0a:b9:40:0d:19:b9:79:fc:49:a8:ed:dd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30CAFF45780AC90434C232E196752E3283B9BD2
        Validity
            Not Before: Feb  5 07:41:16 2026 GMT
            Not After : Feb  4 07:46:16 2027 GMT
        Subject: CN=00E0939B1E48FB11E0B9D24B8925BB4C10FF3EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:98:b2:fd:27:c7:11:2d:82:64:ec:e0:3d:
                    ed:1b:f8:75:aa:e6:3a:6b:b1:c0:05:a5:ff:0d:57:
                    93:08:7e:d5:ea:8c:7c:75:8d:de:f7:3e:49:c5:5b:
                    47:67:ac:88:5c:dc:0c:fc:63:08:fa:7f:20:12:92:
                    85:5b:c5:13:16:78:e6:25:0e:e5:57:2d:c0:12:e5:
                    8f:94:0b:8a:44:17:a6:ee:58:18:85:81:da:c4:f4:
                    af:09:a9:f9:ef:02:86:b9:7d:b0:3f:62:b5:2b:c5:
                    5c:69:94:b9:71:ef:53:94:a6:2c:9e:54:f4:7e:3f:
                    81:10:e7:2f:53:93:0a:3b:7f:54:1f:3e:e3:c9:2f:
                    d4:63:d4:00:af:e4:f1:7e:6a:d7:dd:16:ac:87:5e:
                    22:c5:cb:d3:f2:1d:51:99:01:be:e8:e1:71:aa:0e:
                    8c:b7:3b:63:8b:ef:1b:fc:42:f8:00:a5:fb:ae:d3:
                    22:36:e9:ce:80:64:e2:18:9b:dd:37:3b:46:0a:09:
                    a2:01:78:57:68:c9:d0:d8:d1:5f:ff:24:b1:8f:8e:
                    90:06:c3:03:ef:90:be:f7:5f:8f:3a:19:f6:18:6e:
                    6c:ba:72:32:93:0d:02:11:2b:84:35:55:6d:42:fb:
                    16:66:7f:c5:23:81:31:fe:9e:26:dc:2f:63:8d:06:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:93:9B:1E:48:FB:11:E0:B9:D2:4B:89:25:BB:4C:10:FF:3E:B2
            X509v3 Authority Key Identifier:
                keyid:E3:0C:AF:F4:57:80:AC:90:43:4C:23:2E:19:67:52:E3:28:3B:9B:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/E30CAFF45780AC90434C232E196752E3283B9BD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E30CAFF45780AC90434C232E196752E3283B9BD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/1/3137302e302e3234382e302f32322d3232203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:29:1c:ab:00:c8:21:ea:81:d8:42:65:80:6c:15:f3:cf:83:
         a5:c2:0d:49:7e:44:19:3e:d6:02:f8:4e:74:d7:e4:bb:af:1c:
         17:c0:5a:83:8d:11:3a:e5:59:2a:87:b4:4a:77:eb:07:df:44:
         4b:ce:6e:13:3f:56:02:2a:d0:9f:17:69:82:b0:29:12:ed:53:
         47:b9:eb:cb:10:ce:e2:6d:b3:e2:86:68:1c:02:3d:9f:0a:9e:
         1a:b4:91:15:e3:95:5c:c0:ac:6e:cb:46:92:64:16:58:74:00:
         e7:bc:57:de:b3:c4:39:9c:9f:9f:b6:3e:6c:8b:d4:97:b1:79:
         b5:6a:57:01:cd:c0:c0:21:f7:43:e0:8b:db:d9:f2:77:81:76:
         8a:d8:0a:41:ce:16:66:cb:48:1e:4e:7a:4a:9f:bb:a3:39:21:
         b9:2b:21:cb:e6:91:0e:ec:29:27:7b:e0:19:1d:3b:ab:bc:44:
         85:9e:23:e4:de:9e:7b:c6:0f:09:78:c2:1f:e0:b6:9d:95:e5:
         5d:46:02:44:b0:63:ed:5e:cd:e9:27:65:be:a7:92:dd:7b:b5:
         e1:f4:dd:a1:fe:39:86:6e:b5:94:cb:31:86:bc:eb:6a:fe:29:
         4b:43:e6:97:e0:e1:a6:dc:f5:e8:69:8f:0d:fb:7d:85:b1:82:
         eb:08:0e:cb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUN8tNhHr/0wq5QA0ZuXn8Sajt3e4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMwQ0FGRjQ1NzgwQUM5MDQzNEMyMzJFMTk2NzUyRTMy
ODNCOUJEMjAeFw0yNjAyMDUwNzQxMTZaFw0yNzAyMDQwNzQ2MTZaMDMxMTAvBgNV
BAMTKDAwRTA5MzlCMUU0OEZCMTFFMEI5RDI0Qjg5MjVCQjRDMTBGRjNFQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvpiy/SfHES2CZOzgPe0b+HWq
5jprscAFpf8NV5MIftXqjHx1jd73PknFW0dnrIhc3Az8Ywj6fyASkoVbxRMWeOYl
DuVXLcAS5Y+UC4pEF6buWBiFgdrE9K8JqfnvAoa5fbA/YrUrxVxplLlx71OUpiye
VPR+P4EQ5y9Tkwo7f1QfPuPJL9Rj1ACv5PF+atfdFqyHXiLFy9PyHVGZAb7o4XGq
Doy3O2OL7xv8QvgApfuu0yI26c6AZOIYm903O0YKCaIBeFdoydDY0V//JLGPjpAG
wwPvkL73X486GfYYbmy6cjKTDQIRK4Q1VW1C+xZmf8UjgTH+nibcL2ONBuP5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAOCTmx5I+xHgudJLiSW7TBD/PrIwHwYDVR0j
BBgwFoAU4wyv9FeArJBDTCMuGWdS4yg7m9IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMS9FMzBDQUZGNDU3ODBBQzkwNDM0QzIzMkUxOTY3NTJFMzI4M0I5QkQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMENBRkY0NTc4MEFDOTA0
MzRDMjMyRTE5Njc1MkUzMjgzQjlCRDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzEv
MzEzNzMwMmUzMDJlMzIzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzMzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgD4MA0GCSqGSIb3DQEBCwUAA4IBAQAWKRyrAMgh
6oHYQmWAbBXzz4Olwg1JfkQZPtYC+E501+S7rxwXwFqDjRE65Vkqh7RKd+sH30RL
zm4TP1YCKtCfF2mCsCkS7VNHuevLEM7ibbPihmgcAj2fCp4atJEV45VcwKxuy0aS
ZBZYdADnvFfes8Q5nJ+ftj5si9SXsXm1alcBzcDAIfdD4Ivb2fJ3gXaK2ApBzhZm
y0geTnpKn7ujOSG5KyHL5pEO7Ckne+AZHTurvESFniPk3p57xg8JeMIf4LadleVd
RgJEsGPtXs3pJ2W+p5Lde7Xh9N2h/jmGbrWUyzGGvOtq/ilLQ+aX4OGm3PXoaY8N
+32FsYLrCA7L
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:51 2026 by rpki-client