Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/3133322e3235352e3138372e302f32342d3234203d3e20323634353130.roa
File:                     3133322e3235352e3138372e302f32342d3234203d3e20323634353130.roa (raw, json)
Hash identifier:          ShOT5WSePQ/0L94bqtYBcW4h77+0Bv5NYkKCxNGq4FM=
Subject key identifier:   38:C0:09:3B:B1:CB:CA:3B:0D:E4:4C:B2:19:24:C6:FF:8F:56:4C:BB
Certificate issuer:       /CN=FF17677ED063D237B582E0298BAD1EFE8EF1CA86
Certificate serial:       0EBA487139A3C7C32CD5476BA5D1CFDC6EC2E0B7
Authority key identifier: FF:17:67:7E:D0:63:D2:37:B5:82:E0:29:8B:AD:1E:FE:8E:F1:CA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/3133322e3235352e3138372e302f32342d3234203d3e20323634353130.roa
Signing time:             Thu 19 Feb 2026 01:02:44 +0000
ROA not before:           Thu 19 Feb 2026 00:57:44 +0000
ROA not after:            Thu 18 Feb 2027 01:02:44 +0000
asID:                     264510
IP address blocks:        132.255.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.crl
                          rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ba:48:71:39:a3:c7:c3:2c:d5:47:6b:a5:d1:cf:dc:6e:c2:e0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF17677ED063D237B582E0298BAD1EFE8EF1CA86
        Validity
            Not Before: Feb 19 00:57:44 2026 GMT
            Not After : Feb 18 01:02:44 2027 GMT
        Subject: CN=38C0093BB1CBCA3B0DE44CB21924C6FF8F564CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:41:d7:43:de:2c:fc:9e:84:27:5a:22:a2:
                    d3:81:9c:a2:f5:58:48:df:63:5f:22:2e:8d:b4:b3:
                    c5:f7:7b:f6:72:7d:40:89:0a:f4:f4:40:6e:0b:7d:
                    0d:6b:0d:5a:b9:35:37:ab:1f:52:b3:b0:6a:df:e1:
                    57:1f:aa:15:53:34:fe:b6:f5:e6:f3:5e:73:9c:af:
                    bc:f3:e6:30:7b:0e:5d:92:f6:a6:d6:11:a9:49:37:
                    ee:7d:99:11:4b:b8:0f:f5:d8:34:cc:bf:89:8c:ea:
                    6d:95:7b:91:ba:1b:61:ef:19:20:32:f9:70:86:c8:
                    b1:97:c1:35:23:e8:7a:66:9c:ed:fd:7e:94:e2:43:
                    e4:94:4c:bf:c3:ad:27:6e:32:d0:13:07:34:26:bc:
                    38:d0:89:79:98:da:0c:9f:7e:e9:ae:d6:14:5c:ae:
                    51:4b:11:11:cf:97:94:7e:11:17:f3:83:80:31:62:
                    94:86:a9:fb:d9:ad:ac:ef:c0:3b:d0:89:78:0e:14:
                    36:5b:4e:6d:00:7d:3d:fd:a6:22:b2:0d:7b:d6:46:
                    9b:4c:e4:b7:cc:45:5c:70:67:5e:f1:70:1f:a1:67:
                    48:dd:27:9c:d9:1e:37:2a:a8:48:92:ef:00:19:e7:
                    b5:34:69:93:43:57:50:87:21:81:1e:83:05:6f:23:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:09:3B:B1:CB:CA:3B:0D:E4:4C:B2:19:24:C6:FF:8F:56:4C:BB
            X509v3 Authority Key Identifier:
                keyid:FF:17:67:7E:D0:63:D2:37:B5:82:E0:29:8B:AD:1E:FE:8E:F1:CA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/3133322e3235352e3138372e302f32342d3234203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:b5:55:8e:3c:0a:32:c7:d7:a9:d5:27:b6:aa:50:30:d3:
         4d:7b:91:ad:a3:9b:37:59:ad:15:ec:2b:c5:e9:c6:7d:c5:95:
         4f:17:9e:33:7a:1a:45:86:c2:55:ba:64:ac:1b:23:d9:c4:ec:
         33:60:08:44:c3:4e:d8:ab:21:a6:d1:fb:b0:2f:0c:92:93:ef:
         01:21:10:2d:9a:25:3f:d6:38:7f:a5:54:eb:cb:4e:d8:e8:68:
         50:1f:c1:16:43:f5:49:1f:2a:b0:87:28:09:32:30:79:a2:53:
         4e:c8:1b:0b:f5:8f:92:17:b3:3d:f0:9b:e6:cd:85:8a:e8:07:
         0e:29:b4:71:64:d3:e8:77:6d:ad:a0:0b:fd:9a:ed:35:fc:a4:
         b2:b6:51:9c:a4:ef:19:c0:dd:80:35:b3:f0:f7:e9:7d:23:cf:
         c1:b1:a5:80:47:18:06:c2:92:d6:05:1e:c4:c0:ae:bf:11:7c:
         ce:f0:f8:72:8a:5d:a7:b7:4b:35:b0:98:3c:38:3f:0e:94:30:
         f4:ee:17:e8:80:39:af:44:68:4b:2b:a2:96:91:e0:9c:02:c6:
         cd:5b:d1:3c:1a:69:c4:7a:96:c8:8c:73:5c:b1:c4:e5:fd:58:
         ba:78:dc:59:f9:04:00:f0:24:4a:4c:2b:a9:35:95:d8:b3:59:
         bf:a7:7f:22
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDrpIcTmjx8Ms1UdrpdHP3G7C4LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYxNzY3N0VEMDYzRDIzN0I1ODJFMDI5OEJBRDFFRkU4
RUYxQ0E4NjAeFw0yNjAyMTkwMDU3NDRaFw0yNzAyMTgwMTAyNDRaMDMxMTAvBgNV
BAMTKDM4QzAwOTNCQjFDQkNBM0IwREU0NENCMjE5MjRDNkZGOEY1NjRDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEkHXQ94s/J6EJ1oiotOBnKL1
WEjfY18iLo20s8X3e/ZyfUCJCvT0QG4LfQ1rDVq5NTerH1KzsGrf4VcfqhVTNP62
9ebzXnOcr7zz5jB7Dl2S9qbWEalJN+59mRFLuA/12DTMv4mM6m2Ve5G6G2HvGSAy
+XCGyLGXwTUj6HpmnO39fpTiQ+SUTL/DrSduMtATBzQmvDjQiXmY2gyffumu1hRc
rlFLERHPl5R+ERfzg4AxYpSGqfvZrazvwDvQiXgOFDZbTm0AfT39piKyDXvWRptM
5LfMRVxwZ17xcB+hZ0jdJ5zZHjcqqEiS7wAZ57U0aZNDV1CHIYEegwVvIzQrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOMAJO7HLyjsN5EyyGSTG/49WTLswHwYDVR0j
BBgwFoAU/xdnftBj0je1guApi60e/o7xyoYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dpek0xNTNCYTlrdThjazFHNHJBV2JKNjFuWFVVMXlxM3cxVmdQd3lY
UEEvMC9GRjE3Njc3RUQwNjNEMjM3QjU4MkUwMjk4QkFEMUVGRThFRjFDQTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMTc2NzdFRDA2M0QyMzdC
NTgyRTAyOThCQUQxRUZFOEVGMUNBODYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXaXpNMTUzQmE5a3U4Y2sxRzRyQVdiSjYxblhVVTF5cTN3MVZnUHd5WFBBLzAv
MzEzMzMyMmUzMjM1MzUyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIT/uzANBgkqhkiG9w0BAQsFAAOCAQEAPbe1
VY48CjLH16nVJ7aqUDDTTXuRraObN1mtFewrxenGfcWVTxeeM3oaRYbCVbpkrBsj
2cTsM2AIRMNO2KshptH7sC8MkpPvASEQLZolP9Y4f6VU68tO2OhoUB/BFkP1SR8q
sIcoCTIweaJTTsgbC/WPkhezPfCb5s2FiugHDim0cWTT6HdtraAL/ZrtNfyksrZR
nKTvGcDdgDWz8PfpfSPPwbGlgEcYBsKS1gUexMCuvxF8zvD4copdp7dLNbCYPDg/
DpQw9O4X6IA5r0RoSyuilpHgnALGzVvRPBppxHqWyIxzXLHE5f1YunjcWfkEAPAk
SkwrqTWV2LNZv6d/Ig==
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:08 2026 by rpki-client