Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa
File:                     3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa (raw, json)
Hash identifier:          hwG0glhADyLl+sBZuGLSUoD4VUocqifWQezYD4Z11uI=
Subject key identifier:   C5:FF:65:80:99:76:5F:9D:8D:DF:6F:AD:1E:5C:12:5F:0B:AE:AF:DE
Certificate issuer:       /CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Certificate serial:       3C572A63C145B1A4DA901A8C65EBD9DA700512A8
Authority key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267322
IP address blocks:        192.144.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
                          rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:57:2a:63:c1:45:b1:a4:da:90:1a:8c:65:eb:d9:da:70:05:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=C5FF658099765F9D8DDF6FAD1E5C125F0BAEAFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:7b:cb:cc:bd:2a:b9:26:36:92:48:89:68:
                    94:74:c6:fc:08:d7:bf:1f:f1:78:71:ad:0f:20:72:
                    3b:da:6c:a3:33:a3:b0:e1:8f:0d:06:3d:d6:95:17:
                    9a:37:de:f1:26:ff:ab:6d:73:b9:f1:8f:e1:91:91:
                    1f:16:1b:bc:d6:f3:98:ce:21:12:64:d7:bf:d5:94:
                    4b:d8:0f:9a:0d:e8:39:c2:ce:f2:aa:6e:82:36:02:
                    0f:89:a3:85:b8:a0:4f:d0:3e:9a:ae:24:33:4b:fc:
                    6c:2f:54:31:92:7a:46:f3:62:9a:73:c6:7d:ab:99:
                    3c:49:fa:14:bd:6b:dc:99:e7:a9:98:ed:09:85:8e:
                    ef:76:a8:68:d6:e1:8f:e9:59:52:ab:47:74:a5:1d:
                    3b:f8:71:a3:b4:1d:b8:c0:b4:8f:b0:b7:a1:96:7d:
                    1d:1e:d1:d4:db:90:92:72:f5:aa:4d:e2:c4:fc:4f:
                    19:42:39:63:40:4c:07:8d:02:0f:ff:ef:de:b4:cb:
                    a9:0c:09:1e:12:23:72:d9:f3:47:35:06:72:7e:da:
                    7a:ae:15:d0:e1:10:b5:7c:da:ff:69:d4:dc:64:27:
                    d3:7d:e5:4a:c4:ce:b3:4d:0f:46:6a:a0:72:4b:14:
                    0d:96:90:c5:1f:ab:c6:58:94:ae:93:0e:24:28:72:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FF:65:80:99:76:5F:9D:8D:DF:6F:AD:1E:5C:12:5F:0B:AE:AF:DE
            X509v3 Authority Key Identifier:
                keyid:C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32332d3233203d3e20323637333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:1a:fa:25:2f:16:89:06:b4:d6:c9:a8:79:79:05:c9:0b:
         01:43:fb:e0:58:7a:18:be:b5:56:a2:a6:d8:b0:79:88:12:3c:
         4f:15:e7:21:ed:92:44:1c:1c:70:48:b1:85:8f:2f:6a:45:3a:
         9d:c8:1e:04:42:44:36:d8:55:22:3c:f5:ff:db:10:0e:2d:c8:
         01:80:cb:e7:5c:bc:50:e9:1a:78:df:fc:1b:f9:87:78:ff:fd:
         61:fe:6b:2a:f6:b7:f3:28:23:47:99:c6:71:c5:07:b0:8a:11:
         c1:ca:bc:62:7a:c7:0f:b6:ba:29:57:7e:c6:83:af:3a:43:1a:
         b7:93:89:f4:04:b8:82:1d:87:7c:17:52:27:ea:d0:ea:d4:9e:
         a8:4c:3a:a1:4f:2c:59:2c:ab:07:ca:86:c4:18:e0:61:7a:04:
         c4:8e:54:47:f1:81:aa:40:71:3e:19:79:cf:0a:1c:bd:1f:52:
         cc:75:d0:61:7b:53:b5:9d:43:e4:83:42:60:70:65:05:67:81:
         54:39:72:91:5f:9c:a3:0f:10:e5:6b:72:2b:56:ec:99:21:45:
         0e:14:53:a7:f0:a2:fa:d7:5f:58:d0:ba:7d:6c:94:b6:10:88:
         ee:15:84:e6:60:3d:0c:87:24:76:55:b6:cf:d0:f1:4f:d6:41:
         a5:e5:82:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPFcqY8FFsaTakBqMZevZ2nAFEqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDN0Y4MzQzMDkyMDVERjA5NDRCQTVDMDVGRTYyRDY1
NjA3RjZDMDAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKEM1RkY2NTgwOTk3NjVGOUQ4RERGNkZBRDFFNUMxMjVGMEJBRUFGREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9OXvLzL0quSY2kkiJaJR0xvwI
178f8XhxrQ8gcjvabKMzo7Dhjw0GPdaVF5o33vEm/6ttc7nxj+GRkR8WG7zW85jO
IRJk17/VlEvYD5oN6DnCzvKqboI2Ag+Jo4W4oE/QPpquJDNL/GwvVDGSekbzYppz
xn2rmTxJ+hS9a9yZ56mY7QmFju92qGjW4Y/pWVKrR3SlHTv4caO0HbjAtI+wt6GW
fR0e0dTbkJJy9apN4sT8TxlCOWNATAeNAg//7960y6kMCR4SI3LZ80c1BnJ+2nqu
FdDhELV82v9p1NxkJ9N95UrEzrNND0ZqoHJLFA2WkMUfq8ZYlK6TDiQocr/pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxf9lgJl2X52N32+tHlwSXwuur94wHwYDVR0j
BBgwFoAUwcf4NDCSBd8JRLpcBf5i1lYH9sAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnZQUGcyS0RZM0RlNG1EQTdFaXljNmZGNndLaDNhUlN5UTVmYUpRWjht
ZkQvMS9DMUM3RjgzNDMwOTIwNURGMDk0NEJBNUMwNUZFNjJENjU2MDdGNkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxQzdGODM0MzA5MjA1REYw
OTQ0QkE1QzA1RkU2MkQ2NTYwN0Y2QzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z2UFBnMktEWTNEZTRtREE3RWl5YzZmRjZ3S2gzYVJTeVE1ZmFKUVo4bWZELzEv
MzEzOTMyMmUzMTM0MzQyZTM3MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHAkEgwDQYJKoZIhvcNAQELBQADggEBAK0eGvol
LxaJBrTWyah5eQXJCwFD++BYehi+tVaiptiweYgSPE8V5yHtkkQcHHBIsYWPL2pF
Op3IHgRCRDbYVSI89f/bEA4tyAGAy+dcvFDpGnjf/Bv5h3j//WH+ayr2t/MoI0eZ
xnHFB7CKEcHKvGJ6xw+2uilXfsaDrzpDGreTifQEuIIdh3wXUifq0OrUnqhMOqFP
LFksqwfKhsQY4GF6BMSOVEfxgapAcT4Zec8KHL0fUsx10GF7U7WdQ+SDQmBwZQVn
gVQ5cpFfnKMPEOVrcitW7JkhRQ4UU6fwovrXX1jQun1slLYQiO4VhOZgPQyHJHZV
ts/Q8U/WQaXlgjc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:19 2026 by rpki-client