Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3332203d3e20323730393732.roa
File:                     3139312e33372e38302e302f32322d3332203d3e20323730393732.roa (raw, json)
Hash identifier:          yD3Qtss7aWqegcjgCGbj3EMNmg9htGR1F7HMhM3bgAE=
Subject key identifier:   AC:A6:C9:3F:37:38:61:FE:1E:76:1A:6A:AB:B2:A1:F3:37:F7:48:DD
Certificate issuer:       /CN=152C509A4EDF035E8B7A18EF1CC0D01554A21430
Certificate serial:       7A1BE26E8F611D051CC7A485C62A57024293BE68
Authority key identifier: 15:2C:50:9A:4E:DF:03:5E:8B:7A:18:EF:1C:C0:D0:15:54:A2:14:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152C509A4EDF035E8B7A18EF1CC0D01554A21430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3332203d3e20323730393732.roa
Signing time:             Fri 06 Feb 2026 16:35:00 +0000
ROA not before:           Fri 06 Feb 2026 16:30:00 +0000
ROA not after:            Fri 05 Feb 2027 16:35:00 +0000
asID:                     270972
IP address blocks:        191.37.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152C509A4EDF035E8B7A18EF1CC0D01554A21430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1b:e2:6e:8f:61:1d:05:1c:c7:a4:85:c6:2a:57:02:42:93:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152C509A4EDF035E8B7A18EF1CC0D01554A21430
        Validity
            Not Before: Feb  6 16:30:00 2026 GMT
            Not After : Feb  5 16:35:00 2027 GMT
        Subject: CN=ACA6C93F373861FE1E761A6AABB2A1F337F748DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:de:c4:af:41:90:e0:a1:75:36:5d:86:0a:
                    76:b3:e3:29:e3:ba:04:d0:45:cf:28:5a:ab:5b:77:
                    5c:38:a0:54:73:9e:ba:66:7c:c9:8e:82:2c:3f:42:
                    fc:91:9f:23:e3:52:81:46:70:52:ce:a8:5e:ef:c5:
                    40:c2:c4:dd:f7:96:96:09:d3:0c:34:8e:c9:ba:3e:
                    7a:ad:5c:25:dc:40:f7:74:91:37:a2:8d:27:c1:12:
                    c9:5c:d3:4e:9b:76:47:f5:1f:80:eb:d0:50:c7:ce:
                    f2:f4:bb:60:0e:18:68:a8:b5:96:cf:0e:dd:65:0a:
                    6e:cb:a9:ae:b4:1e:f1:ba:4a:73:dc:23:0b:39:f1:
                    4e:1c:87:04:8a:ce:94:58:60:94:0c:fe:c5:00:47:
                    1d:78:bd:67:34:8d:94:a6:1d:52:7a:42:e8:1e:8a:
                    70:cd:89:4d:04:95:76:02:13:77:f3:85:dd:ba:1c:
                    21:d4:55:17:2a:8d:f4:bd:e6:0a:e3:32:05:30:7b:
                    c8:08:37:e4:18:d9:ea:26:72:52:f6:fc:bf:cd:1d:
                    4c:79:d4:67:be:cb:70:04:43:0b:b8:bb:2f:4a:2b:
                    8d:9c:04:67:53:80:e0:80:89:77:c4:4a:0e:46:fb:
                    19:9d:95:2a:82:d9:53:9e:e4:01:c7:8d:df:2a:fa:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:C9:3F:37:38:61:FE:1E:76:1A:6A:AB:B2:A1:F3:37:F7:48:DD
            X509v3 Authority Key Identifier:
                keyid:15:2C:50:9A:4E:DF:03:5E:8B:7A:18:EF:1C:C0:D0:15:54:A2:14:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/152C509A4EDF035E8B7A18EF1CC0D01554A21430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152C509A4EDF035E8B7A18EF1CC0D01554A21430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3332203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:e0:6b:4e:7f:d6:b1:b5:f0:04:d1:ac:8b:c9:9b:ef:68:49:
         52:1e:ef:40:ca:8d:03:4e:71:6f:e6:29:51:e0:4d:f9:e7:7c:
         10:25:82:a8:a8:b2:76:ef:e6:ef:af:55:04:4b:bc:20:bb:4e:
         62:24:d4:ff:69:3e:0d:56:3f:5f:d0:43:b1:55:46:39:af:35:
         eb:8a:96:0d:ab:57:13:e8:66:59:8f:be:43:c9:d8:ca:80:84:
         47:e2:f0:83:83:9f:b0:c8:cd:24:dd:40:db:e5:e0:7f:9d:8d:
         47:04:26:7c:f2:96:51:26:0d:d0:23:75:0e:e9:7d:f1:36:d9:
         06:97:2a:77:96:a4:c6:57:21:65:d9:f7:5f:8d:83:3b:a1:12:
         7b:84:60:6c:4e:c6:82:9d:8f:d4:85:7c:56:3f:f6:0a:f9:25:
         8b:d5:1c:d3:c7:6a:26:b6:9c:b0:bd:d3:4c:96:3b:41:49:f1:
         c5:16:d9:bf:bd:d0:39:93:14:98:3e:ce:30:30:5f:08:f9:19:
         9f:cb:9d:c2:49:f3:5c:24:fc:1d:76:66:a9:67:64:90:9b:c2:
         35:8e:04:15:aa:2e:0f:ce:d8:78:71:26:50:06:7d:29:23:73:
         f4:56:22:b0:61:a5:2a:d2:2c:dc:f2:f9:b8:70:c4:47:fb:14:
         1a:22:6a:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUehvibo9hHQUcx6SFxipXAkKTvmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUyQzUwOUE0RURGMDM1RThCN0ExOEVGMUNDMEQwMTU1
NEEyMTQzMDAeFw0yNjAyMDYxNjMwMDBaFw0yNzAyMDUxNjM1MDBaMDMxMTAvBgNV
BAMTKEFDQTZDOTNGMzczODYxRkUxRTc2MUE2QUFCQjJBMUYzMzdGNzQ4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIN7Er0GQ4KF1Nl2GCnaz4ynj
ugTQRc8oWqtbd1w4oFRznrpmfMmOgiw/QvyRnyPjUoFGcFLOqF7vxUDCxN33lpYJ
0ww0jsm6PnqtXCXcQPd0kTeijSfBEslc006bdkf1H4Dr0FDHzvL0u2AOGGiotZbP
Dt1lCm7Lqa60HvG6SnPcIws58U4chwSKzpRYYJQM/sUARx14vWc0jZSmHVJ6Quge
inDNiU0ElXYCE3fzhd26HCHUVRcqjfS95grjMgUwe8gIN+QY2eomclL2/L/NHUx5
1Ge+y3AEQwu4uy9KK42cBGdTgOCAiXfESg5G+xmdlSqC2VOe5AHHjd8q+nVNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrKbJPzc4Yf4edhpqq7Kh8zf3SN0wHwYDVR0j
BBgwFoAUFSxQmk7fA16LehjvHMDQFVSiFDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFVudFBlaThYVktHdmRjbm8yU2NyUTFvRWRRN3ZOamV0Y2cyUTNUdFhF
ankvMC8xNTJDNTA5QTRFREYwMzVFOEI3QTE4RUYxQ0MwRDAxNTU0QTIxNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1MkM1MDlBNEVERjAzNUU4
QjdBMThFRjFDQzBEMDE1NTRBMjE0MzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVbnRQZWk4WFZLR3ZkY25vMlNjclExb0VkUTd2TmpldGNnMlEzVHRYRWp5LzAv
MzEzOTMxMmUzMzM3MmUzODMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzkzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvyVQMA0GCSqGSIb3DQEBCwUAA4IBAQCI4GtOf9ax
tfAE0ayLyZvvaElSHu9Ayo0DTnFv5ilR4E3553wQJYKoqLJ27+bvr1UES7wgu05i
JNT/aT4NVj9f0EOxVUY5rzXripYNq1cT6GZZj75DydjKgIRH4vCDg5+wyM0k3UDb
5eB/nY1HBCZ88pZRJg3QI3UO6X3xNtkGlyp3lqTGVyFl2fdfjYM7oRJ7hGBsTsaC
nY/UhXxWP/YK+SWL1RzTx2omtpywvdNMljtBSfHFFtm/vdA5kxSYPs4wMF8I+Rmf
y53CSfNcJPwddmapZ2SQm8I1jgQVqi4Pzth4cSZQBn0pI3P0ViKwYaUq0izc8vm4
cMRH+xQaImpi
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:53:11 2026 by rpki-client