Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3136372e3235302e3137322e302f32322d3234203d3e20323632373434.roa
File:                     3136372e3235302e3137322e302f32322d3234203d3e20323632373434.roa (raw, json)
Hash identifier:          6Hv/9t3Bylh7o88Xl8rZhdRX+Y0wthBxARiywspJlKI=
Subject key identifier:   8E:C8:37:8C:F3:FF:93:F6:7F:E3:6D:AD:D4:8B:C3:23:9C:58:9C:10
Certificate issuer:       /CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
Certificate serial:       2A63EC6737EAC5171AA980EFD35086CAEF3A3BAD
Authority key identifier: 1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3136372e3235302e3137322e302f32322d3234203d3e20323632373434.roa
Signing time:             Mon 09 Feb 2026 21:26:41 +0000
ROA not before:           Mon 09 Feb 2026 21:21:41 +0000
ROA not after:            Mon 08 Feb 2027 21:26:41 +0000
asID:                     262744
IP address blocks:        167.250.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl
                          rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:63:ec:67:37:ea:c5:17:1a:a9:80:ef:d3:50:86:ca:ef:3a:3b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
        Validity
            Not Before: Feb  9 21:21:41 2026 GMT
            Not After : Feb  8 21:26:41 2027 GMT
        Subject: CN=8EC8378CF3FF93F67FE36DADD48BC3239C589C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:d0:5d:3e:9d:ac:78:32:49:e8:85:f1:cb:
                    f0:7d:3d:c0:7f:c5:c4:b3:ea:f7:0c:db:07:cb:c2:
                    45:4f:23:0e:96:c9:05:bd:34:db:94:b3:84:8f:08:
                    fe:0d:77:07:1f:b4:9e:89:f1:d7:ce:3f:04:7f:e6:
                    bf:35:d3:92:fd:05:58:df:2f:20:2b:32:a9:be:96:
                    15:73:87:27:85:91:52:c0:4d:86:0a:9d:d6:3a:d1:
                    74:ec:b4:53:d2:5f:50:34:25:1c:cd:f7:24:ae:9d:
                    34:d6:de:4d:eb:80:98:38:61:5a:c6:6e:df:54:81:
                    19:b1:2e:a3:ba:bb:79:72:5f:dd:ed:09:0d:b6:ee:
                    04:1c:49:48:75:17:e8:3b:57:40:85:6c:44:7d:07:
                    4c:c9:4e:6f:b1:0e:3d:c9:1d:50:72:33:fa:7f:f3:
                    9e:0d:f5:87:19:0c:49:46:cc:7e:ce:fa:62:06:28:
                    b7:fa:37:13:b2:af:b7:9e:dc:91:e2:49:4e:fd:c9:
                    4c:ff:62:43:67:2f:29:f2:86:fb:2a:ae:b3:07:6c:
                    19:d7:77:4a:9d:c5:e0:c5:ec:b4:38:b3:1a:d6:88:
                    f1:3b:44:41:cf:79:8c:79:5c:71:d9:b3:05:99:17:
                    f1:94:a9:46:90:fc:c2:29:2b:67:bc:83:32:d4:d7:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:37:8C:F3:FF:93:F6:7F:E3:6D:AD:D4:8B:C3:23:9C:58:9C:10
            X509v3 Authority Key Identifier:
                keyid:1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/3136372e3235302e3137322e302f32322d3234203d3e20323632373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:b5:50:b2:6c:3a:fe:5a:98:31:a8:c2:5e:9b:04:b9:0d:65:
         0a:f0:79:c9:a1:a1:2b:4c:4a:ff:89:06:94:c9:62:97:5b:da:
         cd:d0:af:be:8b:fa:53:ff:b8:c4:3a:37:19:0f:13:19:0b:7c:
         aa:87:c1:48:f0:1c:d1:d5:f9:8b:4a:4e:eb:55:f2:f7:0a:6d:
         70:14:b0:d3:ed:ed:38:e4:91:f4:1e:37:26:0c:65:f2:fe:c0:
         2f:63:9d:93:d9:7d:50:db:e7:49:7f:c7:69:0d:91:0f:b5:2a:
         5b:03:9b:98:70:9b:6c:4c:8b:c6:76:a5:0f:87:34:58:54:72:
         be:be:0b:8a:84:e3:3a:be:fe:68:8f:52:1a:62:a9:a9:38:6c:
         f5:4e:1d:fd:71:b8:68:db:70:56:a0:9b:06:d1:68:06:d3:01:
         6b:0d:0d:cd:9d:ce:b2:60:b2:cb:37:98:06:a7:54:29:3c:19:
         95:32:84:72:3a:38:dc:de:87:6c:59:b5:af:0c:fe:91:e5:05:
         6f:b6:91:66:e3:56:34:84:dc:eb:ee:34:df:bb:e9:20:f4:3a:
         52:55:9e:d7:1a:22:8d:91:0d:02:a7:63:a7:2c:4e:f9:19:3e:
         00:be:8b:fd:4e:6f:2f:f5:f8:23:ba:82:a1:33:e7:14:c5:3c:
         8e:48:e0:fc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKmPsZzfqxRcaqYDv01CGyu86O60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURGNDUxM0UwNDk2Q0JBOUZEQURBMkQ1MzcwMkI2MUJC
OTg5RTI5NzAeFw0yNjAyMDkyMTIxNDFaFw0yNzAyMDgyMTI2NDFaMDMxMTAvBgNV
BAMTKDhFQzgzNzhDRjNGRjkzRjY3RkUzNkRBREQ0OEJDMzIzOUM1ODlDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKtBdPp2seDJJ6IXxy/B9PcB/
xcSz6vcM2wfLwkVPIw6WyQW9NNuUs4SPCP4NdwcftJ6J8dfOPwR/5r8105L9BVjf
LyArMqm+lhVzhyeFkVLATYYKndY60XTstFPSX1A0JRzN9ySunTTW3k3rgJg4YVrG
bt9UgRmxLqO6u3lyX93tCQ227gQcSUh1F+g7V0CFbER9B0zJTm+xDj3JHVByM/p/
854N9YcZDElGzH7O+mIGKLf6NxOyr7ee3JHiSU79yUz/YkNnLynyhvsqrrMHbBnX
d0qdxeDF7LQ4sxrWiPE7REHPeYx5XHHZswWZF/GUqUaQ/MIpK2e8gzLU11hBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjsg3jPP/k/Z/422t1IvDI5xYnBAwHwYDVR0j
BBgwFoAUHfRRPgSWy6n9raLVNwK2G7mJ4pcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlvZzZZZWRSVzFxMTFxdk1KM0hudEwzUzE0cFRwVzl3aFQ3VHM0Z3dT
TWMvMC8xREY0NTEzRTA0OTZDQkE5RkRBREEyRDUzNzAyQjYxQkI5ODlFMjk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFERjQ1MTNFMDQ5NkNCQTlG
REFEQTJENTM3MDJCNjFCQjk4OUUyOTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZb2c2WWVkUlcxcTExcXZNSjNIbnRMM1MxNHBUcFc5d2hUN1RzNGd3U01jLzAv
MzEzNjM3MmUzMjM1MzAyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf6rDANBgkqhkiG9w0BAQsFAAOCAQEAs7VQ
smw6/lqYMajCXpsEuQ1lCvB5yaGhK0xK/4kGlMlil1vazdCvvov6U/+4xDo3GQ8T
GQt8qofBSPAc0dX5i0pO61Xy9wptcBSw0+3tOOSR9B43Jgxl8v7AL2Odk9l9UNvn
SX/HaQ2RD7UqWwObmHCbbEyLxnalD4c0WFRyvr4LioTjOr7+aI9SGmKpqThs9U4d
/XG4aNtwVqCbBtFoBtMBaw0NzZ3OsmCyyzeYBqdUKTwZlTKEcjo43N6HbFm1rwz+
keUFb7aRZuNWNITc6+4037vpIPQ6UlWe1xoijZENAqdjpyxO+Rk+AL6L/U5vL/X4
I7qCoTPnFMU8jkjg/A==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:44:10 2026 by rpki-client