Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
File:                     3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa (raw, json)
Hash identifier:          zoJG0C+5Wdzb2xa/2vR2E7JidIpHAkxzH56xc16V1j0=
Subject key identifier:   F1:0A:7A:F5:7F:93:1D:01:3F:47:89:B2:EC:22:A3:56:A8:F6:47:94
Certificate issuer:       /CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
Certificate serial:       697330F6046E5E0558100DAB0B4D5860C262C2B5
Authority key identifier: 46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     263917
IP address blocks:        138.204.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl
                          rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:73:30:f6:04:6e:5e:05:58:10:0d:ab:0b:4d:58:60:c2:62:c2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461BCD117AF03F30086A38BD1479AAFE5BE2A812
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=F10A7AF57F931D013F4789B2EC22A356A8F64794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:27:40:e3:6f:72:10:f8:ff:03:59:83:b4:
                    4f:c8:85:f7:1d:ad:d5:7f:97:e3:45:ed:53:e6:c7:
                    70:dc:94:7a:5d:52:66:1c:b0:aa:7f:07:26:ce:26:
                    0f:11:05:2d:8a:69:52:26:52:29:ec:fb:32:37:bc:
                    2e:42:af:f9:70:47:a9:87:21:ff:d6:ed:e7:78:ad:
                    a6:7c:50:f3:78:46:76:b4:a7:a5:7a:c1:df:ec:3f:
                    39:50:6a:c1:1d:b1:25:03:2a:b2:36:d1:f3:24:ca:
                    ba:66:c6:90:17:8c:c3:5a:2a:9f:02:ad:eb:9f:e3:
                    21:7d:c7:11:31:6a:86:36:bb:55:e1:65:2f:c8:d4:
                    c8:2a:d0:46:81:d2:ed:2c:8a:ea:8e:a4:a1:a1:84:
                    9d:18:eb:50:a9:28:3b:f5:20:69:21:ac:44:9a:88:
                    2a:0e:4a:3d:4b:9e:f0:d2:f0:58:de:33:a3:cf:50:
                    e1:fb:0a:3d:49:08:3d:31:4c:f2:b2:4c:3e:c4:30:
                    b5:6f:a5:35:8c:8d:35:80:3c:31:0f:c2:23:47:ba:
                    44:f0:db:7a:96:42:fb:72:e2:10:74:03:f4:14:89:
                    66:25:5b:5b:b1:9a:7e:61:30:24:ce:b5:e2:1c:0f:
                    fa:80:24:f2:6a:d8:66:69:77:fe:7c:c9:a0:df:a1:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:7A:F5:7F:93:1D:01:3F:47:89:B2:EC:22:A3:56:A8:F6:47:94
            X509v3 Authority Key Identifier:
                keyid:46:1B:CD:11:7A:F0:3F:30:08:6A:38:BD:14:79:AA:FE:5B:E2:A8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461BCD117AF03F30086A38BD1479AAFE5BE2A812.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVTBZXH18nMBrs32jutCsgxQPFjL1qiGtwUdqPE5N1ZU/1/3133382e3230342e3233322e302f32322d3232203d3e20323633393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:45:a3:94:27:f6:14:04:02:78:62:3b:b9:bd:46:8f:db:c0:
         10:d8:8e:12:5e:c5:5a:3b:3d:bd:ea:e6:1d:01:7c:65:34:a0:
         b4:61:58:1f:be:d5:0d:83:53:49:cb:28:93:27:f7:20:f1:f3:
         0f:26:c0:7c:90:26:da:7b:01:f3:c6:ed:1a:d6:bd:d5:42:56:
         db:9b:f8:4d:f6:57:2d:44:e9:26:75:ef:67:53:b7:7f:49:45:
         eb:07:f4:f9:e7:3b:5e:3d:77:df:76:29:80:60:4e:d1:bb:b2:
         32:a0:23:a1:bd:91:b3:3e:0b:f9:30:d0:8b:86:38:26:fe:82:
         ef:1e:47:5a:50:af:fd:7e:de:e5:32:91:b6:19:04:bf:84:06:
         78:c6:86:e0:f3:c5:af:a2:7d:47:78:0f:13:5c:26:10:e0:23:
         0d:07:14:0a:03:da:27:e1:92:c1:6c:a7:d7:46:fb:bc:a7:2f:
         f0:96:a3:f6:13:4b:67:d3:66:20:7f:1e:60:64:70:e6:17:4a:
         61:ac:9c:be:6d:e2:04:61:6e:72:0b:03:fa:cd:21:4d:3f:ff:
         e5:4b:d6:b4:f1:83:ad:64:c6:9a:ed:42:27:d2:35:4b:ea:42:
         cd:92:6e:50:f4:d2:68:6c:83:cf:b5:80:8f:7b:7c:62:55:05:
         93:7b:dd:d3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaXMw9gRuXgVYEA2rC01YYMJiwrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDYxQkNEMTE3QUYwM0YzMDA4NkEzOEJEMTQ3OUFBRkU1
QkUyQTgxMjAeFw0yNjAyMDQxOTU1MDhaFw0yNzAyMDMyMDAwMDhaMDMxMTAvBgNV
BAMTKEYxMEE3QUY1N0Y5MzFEMDEzRjQ3ODlCMkVDMjJBMzU2QThGNjQ3OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBSdA429yEPj/A1mDtE/Ihfcd
rdV/l+NF7VPmx3DclHpdUmYcsKp/BybOJg8RBS2KaVImUins+zI3vC5Cr/lwR6mH
If/W7ed4raZ8UPN4Rna0p6V6wd/sPzlQasEdsSUDKrI20fMkyrpmxpAXjMNaKp8C
reuf4yF9xxExaoY2u1XhZS/I1Mgq0EaB0u0siuqOpKGhhJ0Y61CpKDv1IGkhrESa
iCoOSj1LnvDS8FjeM6PPUOH7Cj1JCD0xTPKyTD7EMLVvpTWMjTWAPDEPwiNHukTw
23qWQvty4hB0A/QUiWYlW1uxmn5hMCTOteIcD/qAJPJq2GZpd/58yaDfoRPhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8Qp69X+THQE/R4my7CKjVqj2R5QwHwYDVR0j
BBgwFoAURhvNEXrwPzAIaji9FHmq/lviqBIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZUQlpYSDE4bk1CcnMzMmp1dENzZ3hRUEZqTDFxaUd0d1VkcVBFNU4x
WlUvMS80NjFCQ0QxMTdBRjAzRjMwMDg2QTM4QkQxNDc5QUFGRTVCRTJBODEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2MUJDRDExN0FGMDNGMzAw
ODZBMzhCRDE0NzlBQUZFNUJFMkE4MTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWVEJaWEgxOG5NQnJzMzJqdXRDc2d4UVBGakwxcWlHdHdVZHFQRTVOMVpVLzEv
MzEzMzM4MmUzMjMwMzQyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorM6DANBgkqhkiG9w0BAQsFAAOCAQEAZEWj
lCf2FAQCeGI7ub1Gj9vAENiOEl7FWjs9vermHQF8ZTSgtGFYH77VDYNTScsokyf3
IPHzDybAfJAm2nsB88btGta91UJW25v4TfZXLUTpJnXvZ1O3f0lF6wf0+ec7Xj13
33YpgGBO0buyMqAjob2Rsz4L+TDQi4Y4Jv6C7x5HWlCv/X7e5TKRthkEv4QGeMaG
4PPFr6J9R3gPE1wmEOAjDQcUCgPaJ+GSwWyn10b7vKcv8Jaj9hNLZ9NmIH8eYGRw
5hdKYaycvm3iBGFucgsD+s0hTT//5UvWtPGDrWTGmu1CJ9I1S+pCzZJuUPTSaGyD
z7WAj3t8YlUFk3vd0w==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:27 2026 by rpki-client