Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
File:                     3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (raw, json)
Hash identifier:          Htog5oSUKTt/1anfR4v5HMJn7TbrGzklNgLoCrZci/Q=
Subject key identifier:   9D:F4:69:96:29:28:F6:A1:22:12:1C:F5:ED:FB:5B:99:43:CF:9C:F1
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       3A5DFE644C3A3263428905260DDBBDFBE925C17E
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
Signing time:             Mon 09 Feb 2026 15:37:40 +0000
ROA not before:           Mon 09 Feb 2026 15:32:40 +0000
ROA not after:            Mon 08 Feb 2027 15:37:40 +0000
asID:                     262373
IP address blocks:        177.128.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
                          rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5d:fe:64:4c:3a:32:63:42:89:05:26:0d:db:bd:fb:e9:25:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Feb  9 15:32:40 2026 GMT
            Not After : Feb  8 15:37:40 2027 GMT
        Subject: CN=9DF469962928F6A122121CF5EDFB5B9943CF9CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:6d:66:3c:33:28:65:80:f7:6f:5c:63:52:
                    ff:04:5b:47:6b:b2:eb:06:2c:b3:db:78:90:70:fb:
                    20:76:19:a4:52:a9:e7:c9:85:85:15:92:3a:f5:fd:
                    13:a9:2d:b9:e6:98:9b:57:40:96:6a:fc:c6:7d:c6:
                    30:28:60:a6:37:b7:8b:91:7c:ca:55:77:06:0b:d7:
                    d1:1d:f3:09:bc:5e:1d:d1:11:9c:8d:ce:a0:f3:d7:
                    35:12:ff:25:1f:46:0a:7d:87:eb:2b:e0:88:81:0f:
                    fd:b9:89:cf:29:40:62:0e:f0:b7:76:3f:3a:b3:30:
                    f5:a2:14:43:92:31:86:37:9a:64:15:ba:9e:f5:e2:
                    cc:8a:6a:5b:c0:9d:d0:46:3d:c8:16:cc:3b:36:7b:
                    4a:4a:d3:03:ac:1a:8e:00:17:a2:0c:6e:82:69:4a:
                    48:5c:a9:c9:76:bf:0f:43:1c:80:40:6b:fb:d9:17:
                    5a:28:85:ac:5d:37:49:16:81:ce:f7:09:44:2b:ad:
                    2a:8f:31:f9:4c:cf:1f:32:8d:4d:04:18:90:d3:13:
                    44:16:9e:39:31:5c:55:71:00:38:6a:31:6a:6e:83:
                    c2:bc:9a:25:64:c7:2d:d8:30:d5:32:95:5c:55:72:
                    b6:1a:f9:50:05:00:67:17:05:31:88:14:1f:67:0f:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F4:69:96:29:28:F6:A1:22:12:1C:F5:ED:FB:5B:99:43:CF:9C:F1
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:36:a6:d4:fe:0f:17:32:29:a5:38:9d:fb:48:cc:22:61:18:
         03:08:d3:92:52:53:cf:6f:5b:78:df:a3:fc:63:66:38:22:0c:
         59:16:a8:42:c7:a2:7b:ef:85:3e:2f:82:c6:9a:ea:cb:bb:c1:
         fd:58:e6:ab:a0:4c:8b:5c:2c:b5:76:02:15:53:28:04:b3:38:
         8d:ca:9d:02:f4:eb:95:cc:4f:b7:aa:b5:16:64:ef:38:e4:15:
         a7:d1:b3:2a:f1:4c:c2:64:1a:93:cf:1c:6d:06:e6:48:99:f5:
         e8:39:9f:64:4f:cc:1a:00:44:8a:bb:b0:56:6e:ec:4f:7b:9e:
         74:e1:ef:0b:71:b4:75:99:be:2e:50:a2:ab:ec:8d:a4:e8:eb:
         09:3f:f7:16:54:6f:3a:72:f3:e2:95:22:c3:d3:26:14:12:9b:
         a3:c4:d1:e8:ec:9d:94:92:24:5f:e7:d4:d7:bd:48:de:21:04:
         cd:3d:37:48:0b:07:39:80:a1:ea:dc:21:7b:2a:d6:21:c7:88:
         58:9a:1a:b8:3e:e3:60:f7:41:de:72:23:6e:fd:c8:3c:24:86:
         16:0d:92:c6:6f:e0:cd:85:01:14:aa:86:28:62:a6:bc:ac:a7:
         46:80:f1:51:c7:64:fe:bb:74:29:dc:aa:ac:80:90:13:70:87:
         f7:60:e2:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOl3+ZEw6MmNCiQUmDdu9++klwX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhBRDg3NjExRkREQzlDOTlCMjE1N0ZCQzUwMzQzMERF
ODc0NURCRDAeFw0yNjAyMDkxNTMyNDBaFw0yNzAyMDgxNTM3NDBaMDMxMTAvBgNV
BAMTKDlERjQ2OTk2MjkyOEY2QTEyMjEyMUNGNUVERkI1Qjk5NDNDRjlDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO821mPDMoZYD3b1xjUv8EW0dr
susGLLPbeJBw+yB2GaRSqefJhYUVkjr1/ROpLbnmmJtXQJZq/MZ9xjAoYKY3t4uR
fMpVdwYL19Ed8wm8Xh3REZyNzqDz1zUS/yUfRgp9h+sr4IiBD/25ic8pQGIO8Ld2
PzqzMPWiFEOSMYY3mmQVup714syKalvAndBGPcgWzDs2e0pK0wOsGo4AF6IMboJp
Skhcqcl2vw9DHIBAa/vZF1oohaxdN0kWgc73CUQrrSqPMflMzx8yjU0EGJDTE0QW
njkxXFVxADhqMWpug8K8miVkxy3YMNUylVxVcrYa+VAFAGcXBTGIFB9nD4I/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnfRpliko9qEiEhz17ftbmUPPnPEwHwYDVR0j
BBgwFoAUiK2HYR/dycmbIVf7xQNDDeh0Xb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMC84OEFEODc2MTFGRERDOUM5OUIyMTU3RkJDNTAzNDMwREU4NzQ1REJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QUQ4NzYxMUZEREM5Qzk5
QjIxNTdGQkM1MDM0MzBERTg3NDVEQkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGAiDANBgkqhkiG9w0BAQsFAAOCAQEAKTam
1P4PFzIppTid+0jMImEYAwjTklJTz29beN+j/GNmOCIMWRaoQseie++FPi+Cxprq
y7vB/Vjmq6BMi1wstXYCFVMoBLM4jcqdAvTrlcxPt6q1FmTvOOQVp9GzKvFMwmQa
k88cbQbmSJn16DmfZE/MGgBEiruwVm7sT3uedOHvC3G0dZm+LlCiq+yNpOjrCT/3
FlRvOnLz4pUiw9MmFBKbo8TR6OydlJIkX+fU171I3iEEzT03SAsHOYCh6twheyrW
IceIWJoauD7jYPdB3nIjbv3IPCSGFg2Sxm/gzYUBFKqGKGKmvKynRoDxUcdk/rt0
KdyqrICQE3CH92DiHQ==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:48 2026 by rpki-client