Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          MdqGujjDSv/Ifmb0DC4P5WBDHtWj2y+PdeJDLnfvNOs=
Subject key identifier:   D0:B2:B7:5B:48:4A:B2:89:DA:91:06:99:BD:12:3D:CA:18:39:7C:8D
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       4BE1303C8B7FA457A9F0E3D6877A9EC98E0DE8C0
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:49 +0000
ROA not before:           Wed 18 Feb 2026 17:20:49 +0000
ROA not after:            Wed 17 Feb 2027 17:25:49 +0000
asID:                     263059
IP address blocks:        186.232.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:30:3c:8b:7f:a4:57:a9:f0:e3:d6:87:7a:9e:c9:8e:0d:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:49 2026 GMT
            Not After : Feb 17 17:25:49 2027 GMT
        Subject: CN=D0B2B75B484AB289DA910699BD123DCA18397C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:c2:6a:ec:9d:dd:1b:f5:8a:6e:7b:b9:7f:
                    21:9c:df:fe:cf:c5:96:38:f4:99:10:6e:b1:11:01:
                    e8:03:e8:0e:b6:87:3e:a1:fc:87:25:2d:3e:8f:d6:
                    d7:85:a2:c3:cb:14:c1:58:aa:9d:f2:60:b9:08:aa:
                    ff:3a:32:c8:73:5f:5f:86:21:fd:50:ed:6c:0a:79:
                    17:9a:75:2e:3e:fa:ee:c9:0c:fb:93:88:00:e1:bd:
                    71:22:1e:8f:93:77:ce:3b:25:42:67:ef:7a:af:07:
                    99:cb:48:df:93:71:c1:e0:74:26:ca:58:5e:5d:3a:
                    1e:63:c8:fc:fa:30:10:56:4c:ce:1b:a2:0e:c5:5a:
                    44:5c:64:09:2b:11:07:23:e0:22:26:b9:f3:c8:bd:
                    7e:37:48:d5:1c:18:e7:e0:27:fe:ed:53:f2:e8:85:
                    6d:8b:88:c4:bf:c2:d1:34:6e:c2:b5:5c:b5:d6:d0:
                    05:8f:9b:77:6a:c4:67:13:26:a4:2e:f5:50:d6:96:
                    11:23:57:d6:7e:32:ab:64:05:e7:da:a4:74:eb:1c:
                    17:30:df:32:ca:17:6b:99:5d:ed:bd:34:c1:7a:95:
                    72:09:2c:c8:c8:43:99:8d:ad:50:6f:25:19:c8:83:
                    fd:95:17:72:79:a4:6e:41:1f:ef:9c:53:b2:90:4b:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B2:B7:5B:48:4A:B2:89:DA:91:06:99:BD:12:3D:CA:18:39:7C:8D
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135392e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:0e:e9:73:af:e7:36:e0:7f:00:31:e6:8a:98:0e:38:5b:
         ba:ea:43:df:d0:df:b8:51:86:2c:90:36:ce:2f:a5:f3:4a:86:
         0b:60:0b:7c:79:18:9e:a9:c6:e6:e3:0e:40:13:4a:72:6e:4a:
         ae:8e:47:82:24:70:03:94:0d:60:54:63:73:52:4c:c2:59:0b:
         5e:09:51:e4:a8:88:ed:c3:08:cf:cd:f0:6b:51:fd:a6:83:15:
         2e:d1:70:67:e5:80:3e:df:8c:70:e1:7f:dc:bc:94:85:a5:9c:
         fc:93:93:76:2c:cf:95:0c:2f:96:5a:14:05:74:2e:93:a5:a8:
         62:a5:9f:e1:d8:f3:2f:ef:c7:cb:e8:16:d0:f3:b1:a6:a4:b5:
         e0:1e:3b:7e:e3:13:2f:3d:0b:83:8a:e2:10:5d:0b:35:ac:e8:
         a0:d8:e9:21:75:14:d3:06:20:3f:57:54:25:1a:32:de:8a:ed:
         6a:d4:38:c8:ab:b2:ec:4f:4e:2b:e8:17:d0:0e:22:c6:03:87:
         e6:26:6a:b1:73:39:e2:05:5d:05:08:df:03:50:79:61:b0:c6:
         28:6f:18:5e:a5:ba:59:2d:5c:4f:d5:d6:e1:e5:9b:19:8b:20:
         87:a2:c0:d8:5a:a5:df:b1:10:57:05:55:a0:c4:c9:f0:90:49:
         27:81:e1:34
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUS+EwPIt/pFep8OPWh3qeyY4N6MAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQyNDkyRjBCNENDMjJDQkExNUI0RDYyQjkyQzJDNTQ4
QkRFQkNCRDAeFw0yNjAyMTgxNzIwNDlaFw0yNzAyMTcxNzI1NDlaMDMxMTAvBgNV
BAMTKEQwQjJCNzVCNDg0QUIyODlEQTkxMDY5OUJEMTIzRENBMTgzOTdDOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v8Jq7J3dG/WKbnu5fyGc3/7P
xZY49JkQbrERAegD6A62hz6h/IclLT6P1teFosPLFMFYqp3yYLkIqv86MshzX1+G
If1Q7WwKeReadS4++u7JDPuTiADhvXEiHo+Td847JUJn73qvB5nLSN+TccHgdCbK
WF5dOh5jyPz6MBBWTM4bog7FWkRcZAkrEQcj4CImufPIvX43SNUcGOfgJ/7tU/Lo
hW2LiMS/wtE0bsK1XLXW0AWPm3dqxGcTJqQu9VDWlhEjV9Z+MqtkBefapHTrHBcw
3zLKF2uZXe29NMF6lXIJLMjIQ5mNrVBvJRnIg/2VF3J5pG5BH++cU7KQS4AhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0LK3W0hKsonakQaZvRI9yhg5fI0wHwYDVR0j
BBgwFoAUBCSS8LTMIsuhW01iuSwsVIvevL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0RG5vNE1pdWZTSHFLa0VKbjExSzI1UW5ycXNHMTdjVnptUExHM29u
NnQvMC8wNDI0OTJGMEI0Q0MyMkNCQTE1QjRENjJCOTJDMkM1NDhCREVCQ0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MjQ5MkYwQjRDQzIyQ0JB
MTVCNEQ2MkI5MkMyQzU0OEJERUJDQkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dERubzRNaXVmU0hxS2tFSm4xMUsyNVFucnFzRzE3Y1Z6bVBMRzNvbjZ0LzAv
MzEzODM2MmUzMjMzMzIyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALronzANBgkqhkiG9w0BAQsFAAOCAQEAHIUO
6XOv5zbgfwAx5oqYDjhbuupD39DfuFGGLJA2zi+l80qGC2ALfHkYnqnG5uMOQBNK
cm5Kro5HgiRwA5QNYFRjc1JMwlkLXglR5KiI7cMIz83wa1H9poMVLtFwZ+WAPt+M
cOF/3LyUhaWc/JOTdizPlQwvlloUBXQuk6WoYqWf4djzL+/Hy+gW0POxpqS14B47
fuMTLz0Lg4riEF0LNazooNjpIXUU0wYgP1dUJRoy3ortatQ4yKuy7E9OK+gX0A4i
xgOH5iZqsXM54gVdBQjfA1B5YbDGKG8YXqW6WS1cT9XW4eWbGYsgh6LA2Fql37EQ
VwVVoMTJ8JBJJ4HhNA==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:05:00 2026 by rpki-client