Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa
File:                     3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          p5qzI9XahRqiOSaSpMKXeZHNu8o6pjOMpAbJj6DwGn0=
Subject key identifier:   80:D6:B7:A4:8F:E6:DF:F7:BF:38:01:5C:F7:38:2A:A5:E4:75:01:27
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       06083120BC31A1B183C326438368A32C1BF0C305
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 06 Feb 2026 14:46:33 +0000
ROA not before:           Fri 06 Feb 2026 14:41:33 +0000
ROA not after:            Fri 05 Feb 2027 14:46:33 +0000
asID:                     52758
IP address blocks:        201.131.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:08:31:20:bc:31:a1:b1:83:c3:26:43:83:68:a3:2c:1b:f0:c3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Feb  6 14:41:33 2026 GMT
            Not After : Feb  5 14:46:33 2027 GMT
        Subject: CN=80D6B7A48FE6DFF7BF38015CF7382AA5E4750127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:8f:4f:cc:19:ae:37:67:24:d9:0b:45:2a:
                    2f:ae:c7:33:25:fb:bf:95:bd:e9:2d:d7:6d:28:16:
                    2d:6d:24:b1:57:26:85:70:92:ea:c1:97:05:2d:54:
                    7d:ec:16:a1:1b:a3:9a:fc:a5:2a:45:70:1c:bd:35:
                    f0:16:b9:95:49:4a:eb:61:fc:c0:c0:26:8b:15:58:
                    30:67:3b:f4:f9:9d:e4:23:d0:e5:02:16:96:60:d1:
                    88:e5:fd:0a:26:d4:85:82:93:00:15:2a:be:71:0f:
                    86:69:9f:4a:38:2d:d1:8c:6e:15:a7:a6:ca:f1:7e:
                    16:84:3e:a4:38:72:5d:d5:ba:50:e6:f1:ba:22:f9:
                    4d:d1:02:76:e7:56:b7:61:a3:ad:4e:42:6b:fc:52:
                    0e:cf:a3:a0:ca:0f:9f:1f:5d:40:a6:c7:3a:c1:54:
                    c5:dd:e0:37:fa:bd:c7:71:c1:ee:c3:a2:4f:27:58:
                    82:8d:49:5e:6c:93:0a:60:6f:c9:c6:f2:e1:b1:40:
                    d5:06:5b:a9:db:69:b2:bb:28:17:07:40:de:d0:fe:
                    79:13:57:e0:36:26:7e:ef:8e:07:ac:35:9d:b3:47:
                    8a:62:99:ae:f6:25:a4:cd:52:6f:bd:f1:d6:e6:84:
                    22:37:3f:71:58:f4:cd:aa:0a:87:89:0c:aa:6c:d8:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:B7:A4:8F:E6:DF:F7:BF:38:01:5C:F7:38:2A:A5:E4:75:01:27
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234362e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:71:d1:e6:8a:2d:40:94:8a:8e:c5:72:ba:59:41:ea:4e:b2:
         f9:19:91:3e:6c:b1:91:1d:33:95:b4:c8:f1:6d:9c:9f:9a:aa:
         67:ac:fb:af:a7:20:ce:59:f0:a9:50:97:44:65:45:20:b5:3e:
         de:d8:24:b5:c3:97:be:fe:ab:ef:7f:f9:0a:20:e6:5d:60:a3:
         2b:92:fd:0b:e4:09:b3:e1:ac:c8:4f:02:15:60:90:8f:f4:4a:
         52:24:26:ca:26:6d:20:12:00:cf:6f:07:c4:d3:57:30:fc:47:
         ce:f2:30:78:67:6f:56:eb:2b:59:1c:2a:f6:58:f0:e9:b5:15:
         88:06:42:0d:1b:eb:82:4e:3e:2f:66:7f:be:1c:7c:12:fd:43:
         63:71:48:33:5d:70:2f:ea:4a:d9:22:14:a6:58:68:b1:f4:46:
         1a:0c:c1:05:39:f3:37:df:1a:40:31:5c:fc:7b:52:77:b4:b0:
         f2:79:31:19:3c:e5:bd:f4:02:86:ed:57:b2:fc:79:78:ea:4a:
         33:dc:62:29:4f:67:0a:44:40:4a:03:9d:ab:ca:4d:c9:ce:59:
         fa:9e:8b:46:d0:0f:9a:02:ca:a8:74:37:4e:1a:e2:ac:e9:63:
         77:3d:9f:67:25:dd:ee:e0:d4:a0:93:92:59:94:77:ac:43:7b:
         2e:01:4a:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBggxILwxobGDwyZDg2ijLBvwwwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNjAyMDYxNDQxMzNaFw0yNzAyMDUxNDQ2MzNaMDMxMTAvBgNV
BAMTKDgwRDZCN0E0OEZFNkRGRjdCRjM4MDE1Q0Y3MzgyQUE1RTQ3NTAxMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXiY9PzBmuN2ck2QtFKi+uxzMl
+7+Vvekt120oFi1tJLFXJoVwkurBlwUtVH3sFqEbo5r8pSpFcBy9NfAWuZVJSuth
/MDAJosVWDBnO/T5neQj0OUCFpZg0Yjl/Qom1IWCkwAVKr5xD4Zpn0o4LdGMbhWn
psrxfhaEPqQ4cl3VulDm8boi+U3RAnbnVrdho61OQmv8Ug7Po6DKD58fXUCmxzrB
VMXd4Df6vcdxwe7Dok8nWIKNSV5skwpgb8nG8uGxQNUGW6nbabK7KBcHQN7Q/nkT
V+A2Jn7vjgesNZ2zR4pima72JaTNUm+98dbmhCI3P3FY9M2qCoeJDKps2OhZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgNa3pI/m3/e/OAFc9zgqpeR1AScwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg/YwDQYJKoZIhvcNAQELBQADggEBAFNx0eaK
LUCUio7FcrpZQepOsvkZkT5ssZEdM5W0yPFtnJ+aqmes+6+nIM5Z8KlQl0RlRSC1
Pt7YJLXDl77+q+9/+Qog5l1goyuS/QvkCbPhrMhPAhVgkI/0SlIkJsombSASAM9v
B8TTVzD8R87yMHhnb1brK1kcKvZY8Om1FYgGQg0b64JOPi9mf74cfBL9Q2NxSDNd
cC/qStkiFKZYaLH0RhoMwQU58zffGkAxXPx7Une0sPJ5MRk85b30AobtV7L8eXjq
SjPcYilPZwpEQEoDnavKTcnOWfqei0bQD5oCyqh0N04a4qzpY3c9n2cl3e7g1KCT
klmUd6xDey4BSoM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:40 2026 by rpki-client