Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa
File:                     3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa (raw, json)
Hash identifier:          vVOzUxA50cv06nrSs5R52PTt+xpD0wZzPepgsHZSJHk=
Subject key identifier:   16:12:6F:B7:36:C5:EF:6B:AE:DC:70:9F:70:AC:B6:F6:FE:97:7A:C8
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       548B8513B58C56B3058403A39D17592D98EA084A
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa
Signing time:             Fri 06 Feb 2026 02:46:30 +0000
ROA not before:           Fri 06 Feb 2026 02:41:30 +0000
ROA not after:            Fri 05 Feb 2027 02:46:30 +0000
asID:                     271018
IP address blocks:        200.52.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8b:85:13:b5:8c:56:b3:05:84:03:a3:9d:17:59:2d:98:ea:08:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Feb  6 02:41:30 2026 GMT
            Not After : Feb  5 02:46:30 2027 GMT
        Subject: CN=16126FB736C5EF6BAEDC709F70ACB6F6FE977AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:d4:9b:e5:9f:09:3c:12:cc:ee:f1:17:ce:
                    c1:2b:19:19:ce:97:53:93:1d:19:27:37:28:b4:09:
                    75:cd:fc:27:dc:9d:fc:80:14:1e:9b:52:d3:fa:d4:
                    23:a2:bc:2b:9e:43:c2:13:2a:d1:68:2c:f2:b1:95:
                    a1:60:3b:e2:54:43:f7:7e:0e:8a:ee:66:0f:55:64:
                    57:4e:fe:5a:6d:b6:8f:96:d2:96:03:d7:e1:2f:59:
                    cd:b8:70:ec:a2:31:21:b4:e6:c0:c1:0a:ec:a9:d2:
                    9a:76:c5:b8:e4:2a:e0:10:42:f8:2d:3a:53:6e:1b:
                    c9:ef:57:6a:c3:51:ec:23:29:53:6f:0e:75:fb:f6:
                    39:6f:93:fd:84:f7:e8:08:42:5f:ec:e6:cd:db:ee:
                    cc:00:0f:52:14:52:0e:ba:3c:47:4e:1a:82:20:de:
                    a3:d3:73:23:dc:93:e7:08:f7:a6:84:71:bb:98:8b:
                    dd:99:72:35:18:5b:5b:6c:01:2d:1d:d8:e4:c5:f1:
                    15:04:46:2a:21:54:c1:04:6f:c7:1c:0b:49:3d:9b:
                    0e:90:94:77:e7:af:df:6b:73:85:77:7c:f6:ce:5b:
                    ef:64:8d:3d:53:3d:67:8b:03:fa:b8:30:e5:ec:97:
                    9a:28:a1:1b:30:1a:b3:b1:3d:74:05:98:e0:5d:16:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:6F:B7:36:C5:EF:6B:AE:DC:70:9F:70:AC:B6:F6:FE:97:7A:C8
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232392e302f32342d3234203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d6:99:12:f7:49:dc:fa:8c:cf:15:bf:cd:3f:5f:7d:14:d2:
         01:a7:c5:41:87:b5:cb:1d:d7:da:82:87:52:3e:17:8a:37:70:
         11:12:ec:11:6b:d1:da:59:d6:5f:b4:74:c9:60:c0:cc:05:a5:
         d4:fd:7d:f1:ed:5a:7e:d5:8d:38:e9:34:18:15:ef:c5:f7:f0:
         a8:ea:ea:3e:dc:86:7d:ea:f6:92:3c:48:5d:4b:7f:98:32:86:
         cc:f4:03:04:70:10:d1:c7:d3:29:4e:33:50:54:78:36:4f:01:
         98:99:e8:5c:0d:8f:76:dc:81:9f:9d:fc:55:e9:1a:b2:80:ff:
         a0:37:d1:7c:fe:2b:69:18:35:5b:ee:bd:63:72:4e:c7:ea:82:
         8e:09:4a:ab:74:cd:94:59:ee:39:47:c0:8d:9a:22:52:ac:24:
         91:1e:f2:2e:38:b1:df:bb:59:17:53:7e:c0:a1:67:4d:c1:66:
         0b:6e:b6:c4:a2:53:e7:37:59:cf:c9:d8:5f:47:07:ee:09:9b:
         30:a6:b8:59:e7:fe:ef:0d:12:87:b0:09:2d:23:3e:a5:10:ec:
         9b:9b:cb:55:11:b8:7f:47:30:29:f6:df:b4:85:25:33:78:29:
         54:49:a6:44:29:2a:52:b7:bf:ff:be:db:37:0a:cc:30:b4:14:
         81:64:2f:17
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVIuFE7WMVrMFhAOjnRdZLZjqCEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJFQTFBNjE2MzFGMUU2OEMyOEUwNDU3MjMwREI3NENE
QjE2RjdGMzAeFw0yNjAyMDYwMjQxMzBaFw0yNzAyMDUwMjQ2MzBaMDMxMTAvBgNV
BAMTKDE2MTI2RkI3MzZDNUVGNkJBRURDNzA5RjcwQUNCNkY2RkU5NzdBQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJdSb5Z8JPBLM7vEXzsErGRnO
l1OTHRknNyi0CXXN/CfcnfyAFB6bUtP61COivCueQ8ITKtFoLPKxlaFgO+JUQ/d+
DoruZg9VZFdO/lptto+W0pYD1+EvWc24cOyiMSG05sDBCuyp0pp2xbjkKuAQQvgt
OlNuG8nvV2rDUewjKVNvDnX79jlvk/2E9+gIQl/s5s3b7swAD1IUUg66PEdOGoIg
3qPTcyPck+cI96aEcbuYi92ZcjUYW1tsAS0d2OTF8RUERiohVMEEb8ccC0k9mw6Q
lHfnr99rc4V3fPbOW+9kjT1TPWeLA/q4MOXsl5oooRswGrOxPXQFmOBdFmoTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFhJvtzbF72uu3HCfcKy29v6XesgwHwYDVR0j
BBgwFoAU6+oaYWMfHmjCjgRXIw23TNsW9/MwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9Od1ZiM3dKTEtnVFVmcmVZOWVnVTZ5NE5aQUsxSzY0Vnh1TjZIbTVmd2kx
LzEvRUJFQTFBNjE2MzFGMUU2OEMyOEUwNDU3MjMwREI3NENEQjE2RjdGMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FQkVBMUE2MTYzMUYxRTY4QzI4
RTA0NTcyMzBEQjc0Q0RCMTZGN0YzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
d1ZiM3dKTEtnVFVmcmVZOWVnVTZ5NE5aQUsxSzY0Vnh1TjZIbTVmd2kxLzEvMzIz
MDMwMmUzNTMyMmUzMjMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
MDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADINOUwDQYJKoZIhvcNAQELBQADggEBAJnWmRL3Sdz6
jM8Vv80/X30U0gGnxUGHtcsd19qCh1I+F4o3cBES7BFr0dpZ1l+0dMlgwMwFpdT9
ffHtWn7VjTjpNBgV78X38Kjq6j7chn3q9pI8SF1Lf5gyhsz0AwRwENHH0ylOM1BU
eDZPAZiZ6FwNj3bcgZ+d/FXpGrKA/6A30Xz+K2kYNVvuvWNyTsfqgo4JSqt0zZRZ
7jlHwI2aIlKsJJEe8i44sd+7WRdTfsChZ03BZgtutsSiU+c3Wc/J2F9HB+4JmzCm
uFnn/u8NEoewCS0jPqUQ7Juby1URuH9HMCn237SFJTN4KVRJpkQpKlK3v/++2zcK
zDC0FIFkLxc=
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:06 2026 by rpki-client