Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32312d3231203d3e203533303836.roa (raw, json)
Hash identifier:          S1odgS4iGJA4YmNfy9uMv9gKhO3sssdcjMr/Jmn6jHM=
Subject key identifier:   D4:7E:B4:A0:B4:78:23:4E:47:51:B0:D5:A4:0A:C5:93:61:2D:54:49
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       416B146AA7FE97889D0F07DE41E966B1E68B4DE7
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa
Signing time:             Thu 05 Feb 2026 09:30:01 +0000
ROA not before:           Thu 05 Feb 2026 09:25:01 +0000
ROA not after:            Thu 04 Feb 2027 09:30:01 +0000
asID:                     53086
IP address blocks:        187.33.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6b:14:6a:a7:fe:97:88:9d:0f:07:de:41:e9:66:b1:e6:8b:4d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Feb  5 09:25:01 2026 GMT
            Not After : Feb  4 09:30:01 2027 GMT
        Subject: CN=D47EB4A0B478234E4751B0D5A40AC593612D5449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:35:35:1a:81:60:a1:54:e0:58:e4:69:e2:
                    c8:96:8f:ad:c8:76:1f:82:fd:ac:c5:81:56:04:75:
                    96:1a:15:25:e6:92:a5:e3:e9:3b:57:33:51:ae:38:
                    6e:43:f9:78:e0:7f:f9:f4:0a:15:be:77:c5:c4:ab:
                    57:91:80:02:72:98:58:9c:c8:4f:30:03:44:c9:0b:
                    e5:80:a7:64:62:18:79:9c:01:51:96:ff:ce:d6:72:
                    a2:47:83:be:1b:6b:6f:fd:a3:db:4b:7b:12:1a:ae:
                    a3:cf:a3:69:42:2a:6b:f5:14:fa:90:90:0c:ff:3e:
                    5d:7e:5b:98:17:0e:45:d5:ce:8c:40:6b:44:55:12:
                    4d:5e:fe:ed:75:25:12:fe:fd:d9:93:76:85:87:cf:
                    ab:8e:d9:ef:fb:29:72:b2:06:21:e9:39:49:f5:fa:
                    ee:32:49:e0:a4:f9:7b:3a:72:4e:b7:e8:a0:10:0b:
                    cd:9c:fe:96:bb:26:c9:72:5f:0c:47:c6:f2:bf:b6:
                    2a:8c:60:f0:56:c5:ef:75:67:ec:44:1c:79:5b:37:
                    28:a8:e4:12:a8:cf:82:18:0e:0c:ea:60:e6:0f:b7:
                    4b:41:af:49:1c:92:57:d7:ef:bd:3c:8d:0a:2d:1a:
                    ae:7f:88:45:37:50:f7:cc:f7:3c:53:a5:9f:1e:ee:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7E:B4:A0:B4:78:23:4E:47:51:B0:D5:A4:0A:C5:93:61:2D:54:49
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:56:b8:50:9d:9a:6c:95:03:4a:ba:20:21:d3:9d:55:8e:d1:
         1c:68:40:d9:24:04:df:0d:40:5c:b0:e6:be:1d:90:61:3c:d8:
         e0:79:f8:aa:63:14:64:0f:79:d9:df:51:f2:12:77:9f:1f:37:
         c4:f9:41:bf:90:76:4e:1e:66:63:76:66:4b:f7:20:20:5e:c0:
         34:da:d0:08:64:be:3d:f1:3c:43:22:d1:62:00:e0:32:88:77:
         31:7b:1c:b8:8a:21:d7:34:14:9d:88:6a:74:23:18:f8:20:c1:
         fd:09:db:b3:9e:08:9e:65:7c:f9:58:68:73:72:e5:c5:61:22:
         ad:9b:76:a6:02:a4:bb:57:6c:a8:5f:22:1f:db:16:46:e0:06:
         13:f8:f6:98:25:96:74:be:2b:92:fe:5f:0d:84:a8:df:09:cf:
         a1:b7:35:d0:f6:35:c1:9b:8a:86:e2:42:c3:4b:25:59:a2:54:
         b9:d4:0d:c9:0c:7e:6e:b3:46:0f:d4:db:54:d7:17:02:56:fd:
         22:f8:98:f0:e2:a2:97:af:82:ed:17:9e:d4:a1:dd:4b:62:e5:
         81:e1:87:bd:11:c9:df:d1:a3:36:3c:2e:bc:07:1e:6c:f1:1e:
         2a:c7:c1:1d:1e:ae:bf:bd:0f:29:dc:bd:a4:f3:9a:d4:ae:66:
         10:f6:48:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQWsUaqf+l4idDwfeQelmseaLTecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0QjY2RkE2ODc4RURDRjg2NkNGMDg2MzRCMTY4MDMw
MUYxNDI5NTAeFw0yNjAyMDUwOTI1MDFaFw0yNzAyMDQwOTMwMDFaMDMxMTAvBgNV
BAMTKEQ0N0VCNEEwQjQ3ODIzNEU0NzUxQjBENUE0MEFDNTkzNjEyRDU0NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDswjU1GoFgoVTgWORp4siWj63I
dh+C/azFgVYEdZYaFSXmkqXj6TtXM1GuOG5D+Xjgf/n0ChW+d8XEq1eRgAJymFic
yE8wA0TJC+WAp2RiGHmcAVGW/87WcqJHg74ba2/9o9tLexIarqPPo2lCKmv1FPqQ
kAz/Pl1+W5gXDkXVzoxAa0RVEk1e/u11JRL+/dmTdoWHz6uO2e/7KXKyBiHpOUn1
+u4ySeCk+Xs6ck636KAQC82c/pa7JslyXwxHxvK/tiqMYPBWxe91Z+xEHHlbNyio
5BKoz4IYDgzqYOYPt0tBr0kcklfX7708jQotGq5/iEU3UPfM9zxTpZ8e7hYlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1H60oLR4I05HUbDVpArFk2EtVEkwHwYDVR0j
BBgwFoAUc0tm+mh47c+GbPCGNLFoAwHxQpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJkWEVrRGREQW9KQllmUUNXcWVIelRZNW5oYlJjZlZFaXlKa3lqelJC
Y3IvMS83MzRCNjZGQTY4NzhFRENGODY2Q0YwODYzNEIxNjgwMzAxRjE0Mjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNEI2NkZBNjg3OEVEQ0Y4
NjZDRjA4NjM0QjE2ODAzMDFGMTQyOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyZFhFa0RkREFvSkJZZlFDV3FlSHpUWTVuaGJSY2ZWRWl5Smt5anpSQmNyLzEv
MzEzODM3MmUzMzMzMmUzMjMwMzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMz
MzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuyHIMA0GCSqGSIb3DQEBCwUAA4IBAQCqVrhQnZps
lQNKuiAh051VjtEcaEDZJATfDUBcsOa+HZBhPNjgefiqYxRkD3nZ31HyEnefHzfE
+UG/kHZOHmZjdmZL9yAgXsA02tAIZL498TxDItFiAOAyiHcxexy4iiHXNBSdiGp0
Ixj4IMH9CduzngieZXz5WGhzcuXFYSKtm3amAqS7V2yoXyIf2xZG4AYT+PaYJZZ0
viuS/l8NhKjfCc+htzXQ9jXBm4qG4kLDSyVZolS51A3JDH5us0YP1NtU1xcCVv0i
+Jjw4qKXr4LtF57Uod1LYuWB4Ye9Ecnf0aM2PC68Bx5s8R4qx8EdHq6/vQ8p3L2k
85rUrmYQ9khj
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:34 2026 by rpki-client