Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa
File:                     3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa (raw, json)
Hash identifier:          iPXLqeUemx9rTs0GPXzJJZa9LjZowJ5jZZoaLZksyiM=
Subject key identifier:   45:92:59:A7:DD:F9:8C:BC:E2:F4:1C:6F:CD:6A:9A:22:8D:5E:7F:1B
Certificate issuer:       /CN=4B836A085E4555E9F264F4EFC7779BD8D1259101
Certificate serial:       4C3F6F449E20891FB31D793A788E88D6808AFEFD
Authority key identifier: 4B:83:6A:08:5E:45:55:E9:F2:64:F4:EF:C7:77:9B:D8:D1:25:91:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa
Signing time:             Wed 11 Feb 2026 12:42:27 +0000
ROA not before:           Wed 11 Feb 2026 12:37:27 +0000
ROA not after:            Wed 10 Feb 2027 12:42:27 +0000
asID:                     28572
IP address blocks:        200.192.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3f:6f:44:9e:20:89:1f:b3:1d:79:3a:78:8e:88:d6:80:8a:fe:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B836A085E4555E9F264F4EFC7779BD8D1259101
        Validity
            Not Before: Feb 11 12:37:27 2026 GMT
            Not After : Feb 10 12:42:27 2027 GMT
        Subject: CN=459259A7DDF98CBCE2F41C6FCD6A9A228D5E7F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:b6:f0:ab:5c:6f:3e:04:67:9b:43:7c:49:
                    f1:93:cb:5d:40:a5:4e:ca:d5:72:5e:c3:fe:02:2c:
                    6a:21:21:7a:3d:15:89:2d:6a:2e:b5:c3:49:23:d7:
                    ed:7a:e4:37:8b:8b:76:1c:a1:c9:ab:52:3e:db:47:
                    a4:5b:87:ba:1b:dc:36:ec:2b:20:97:bc:66:dd:63:
                    b6:1f:78:76:5b:f2:0a:79:01:4a:ad:a0:25:1f:b3:
                    88:c5:e5:4e:56:b7:df:3c:44:6d:38:05:48:f1:f0:
                    09:ba:2d:31:4d:6a:d1:55:46:6e:3d:87:5b:52:d9:
                    6f:08:e0:77:68:6d:cf:8f:ce:f8:ac:1d:60:01:e2:
                    e8:27:75:d3:0e:13:0c:dd:c8:51:1e:c8:4a:ee:fc:
                    a6:2a:16:02:08:0d:8b:ac:a9:07:a7:6f:42:fb:ca:
                    ba:79:42:2e:3a:fe:93:32:19:9d:4a:03:1f:17:4d:
                    1f:73:fd:8d:27:53:c5:87:c3:ef:e1:b9:fe:db:ac:
                    d9:99:7a:8b:78:1d:b8:87:92:20:d7:71:82:5f:a6:
                    8e:53:fd:ca:71:21:38:ca:5d:2c:ed:54:36:78:0c:
                    b9:50:91:2a:da:33:f3:f2:96:ee:03:5a:79:2b:85:
                    89:a5:2f:01:4f:08:2e:5a:e8:66:09:d4:a2:3b:0e:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:92:59:A7:DD:F9:8C:BC:E2:F4:1C:6F:CD:6A:9A:22:8D:5E:7F:1B
            X509v3 Authority Key Identifier:
                keyid:4B:83:6A:08:5E:45:55:E9:F2:64:F4:EF:C7:77:9B:D8:D1:25:91:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135312e302f32342d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:3e:e0:bf:66:62:a0:01:d9:b9:a5:1a:2c:60:b4:f9:a8:
         c0:29:91:4e:32:52:d6:06:28:34:9d:49:41:bd:a5:ba:59:ee:
         37:d2:15:e4:a9:a2:63:b3:ce:57:46:84:5e:ad:2c:2c:79:6c:
         8e:8a:8e:43:ce:28:7d:da:2b:ca:6f:cb:4a:62:3d:f5:44:b3:
         1c:39:e3:5c:5c:23:e5:0a:7d:b0:7f:dc:ff:1a:b1:c7:5e:3d:
         d1:f9:cc:23:99:9d:0f:f4:19:29:58:98:5a:2b:4c:9d:0d:55:
         97:94:ed:5c:c1:a8:91:ec:85:93:35:39:19:5a:b2:22:ff:0e:
         93:9d:8b:b4:69:20:cb:68:d2:c1:ef:bf:32:e2:ba:da:91:20:
         d1:64:53:e3:86:5b:71:bf:97:20:d0:06:d4:e1:97:be:64:41:
         cb:35:5b:5d:a0:27:55:ad:ea:f6:af:83:d7:fe:89:11:9d:62:
         a1:d5:32:60:69:15:3a:ac:cb:c2:a2:57:e6:94:04:87:7b:c7:
         ac:01:35:d2:cc:aa:b9:1b:35:d5:13:15:0f:cd:0f:62:1b:9d:
         78:0d:11:31:d0:e3:b9:24:69:b1:ac:7c:49:34:ca:3c:d2:7c:
         76:ec:56:76:6b:a4:58:56:ec:71:e9:b0:36:22:9b:e9:a0:9c:
         fc:06:9c:70
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTD9vRJ4giR+zHXk6eI6I1oCK/v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI4MzZBMDg1RTQ1NTVFOUYyNjRGNEVGQzc3NzlCRDhE
MTI1OTEwMTAeFw0yNjAyMTExMjM3MjdaFw0yNzAyMTAxMjQyMjdaMDMxMTAvBgNV
BAMTKDQ1OTI1OUE3RERGOThDQkNFMkY0MUM2RkNENkE5QTIyOEQ1RTdGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+bbwq1xvPgRnm0N8SfGTy11A
pU7K1XJew/4CLGohIXo9FYktai61w0kj1+165DeLi3YcocmrUj7bR6Rbh7ob3Dbs
KyCXvGbdY7YfeHZb8gp5AUqtoCUfs4jF5U5Wt988RG04BUjx8Am6LTFNatFVRm49
h1tS2W8I4Hdobc+PzvisHWAB4ugnddMOEwzdyFEeyEru/KYqFgIIDYusqQenb0L7
yrp5Qi46/pMyGZ1KAx8XTR9z/Y0nU8WHw+/huf7brNmZeot4HbiHkiDXcYJfpo5T
/cpxITjKXSztVDZ4DLlQkSraM/Pylu4DWnkrhYmlLwFPCC5a6GYJ1KI7DqQRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURZJZp935jLzi9BxvzWqaIo1efxswHwYDVR0j
BBgwFoAUS4NqCF5FVenyZPTvx3eb2NElkQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk5abWZjelg4eExwVUxDQVhXQnhhamt3QkhESkprc0poSks0UG9hd3hB
U1EvMC80QjgzNkEwODVFNDU1NUU5RjI2NEY0RUZDNzc3OUJEOEQxMjU5MTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCODM2QTA4NUU0NTU1RTlG
MjY0RjRFRkM3Nzc5QkQ4RDEyNTkxMDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JOWm1mY3pYOHhMcFVMQ0FYV0J4YWprd0JIREpKa3NKaEpLNFBvYXd4QVNRLzAv
MzIzMDMwMmUzMTM5MzIyZTMxMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIwJcwDQYJKoZIhvcNAQELBQADggEBACg8PuC/
ZmKgAdm5pRosYLT5qMApkU4yUtYGKDSdSUG9pbpZ7jfSFeSpomOzzldGhF6tLCx5
bI6KjkPOKH3aK8pvy0piPfVEsxw541xcI+UKfbB/3P8ascdePdH5zCOZnQ/0GSlY
mForTJ0NVZeU7VzBqJHshZM1ORlasiL/DpOdi7RpIMto0sHvvzLiutqRINFkU+OG
W3G/lyDQBtThl75kQcs1W12gJ1Wt6vavg9f+iRGdYqHVMmBpFTqsy8KiV+aUBId7
x6wBNdLMqrkbNdUTFQ/ND2IbnXgNETHQ47kkabGsfEk0yjzSfHbsVnZrpFhW7HHp
sDYim+mgnPwGnHA=
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:55:41 2026 by rpki-client