Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa
File:                     3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa (raw, json)
Hash identifier:          /3wDQ4PClDuHVsnw4ApIuRvVvSo/3IPF3Zpf5wFOFFU=
Subject key identifier:   5D:A6:9B:3A:CF:49:FD:E8:89:BC:05:A2:43:1A:0D:AC:20:5C:4A:21
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       65F7A2837E23E1160478B1FC3D4AD065237CBEB9
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 14:40:03 +0000
ROA not before:           Fri 13 Feb 2026 14:35:03 +0000
ROA not after:            Fri 12 Feb 2027 14:40:03 +0000
asID:                     52974
IP address blocks:        179.106.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f7:a2:83:7e:23:e1:16:04:78:b1:fc:3d:4a:d0:65:23:7c:be:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 14:35:03 2026 GMT
            Not After : Feb 12 14:40:03 2027 GMT
        Subject: CN=5DA69B3ACF49FDE889BC05A2431A0DAC205C4A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:ec:ab:a2:c3:dc:64:2d:bb:4e:29:c4:6d:
                    9a:f6:24:cf:71:80:f8:7f:2a:fb:d4:72:c5:50:93:
                    e9:3c:45:51:1a:51:02:24:12:e6:89:da:80:6a:42:
                    bf:72:dd:a3:8d:61:3f:fa:06:80:43:6d:90:90:f5:
                    3d:d7:6b:22:27:b9:73:96:94:86:e7:04:a2:55:9f:
                    c4:09:d2:45:fb:59:01:a0:4f:ba:a7:d7:b0:13:50:
                    c2:d5:a4:41:d9:bc:04:48:92:55:07:eb:a8:8b:72:
                    28:22:dd:c0:14:3d:f7:af:35:6d:68:6a:fa:3f:a1:
                    ce:36:1a:4f:75:9a:b6:21:c9:f0:5b:8a:66:fd:3a:
                    b9:b6:a5:98:8f:95:94:96:e8:a6:db:da:2f:0a:3a:
                    99:45:ab:a1:ef:d7:2f:0f:d6:46:01:8e:ca:2f:de:
                    cf:26:cf:24:db:79:0f:54:6c:96:ac:bc:f5:2b:cb:
                    b9:51:3a:7c:1b:b0:56:45:71:dd:b5:ba:24:6c:e4:
                    9e:08:60:50:b9:7a:d3:3a:4e:54:28:56:08:87:f4:
                    9e:d0:dd:2a:bc:30:d6:65:9b:df:a4:8e:35:aa:f9:
                    d7:b0:91:00:79:3e:08:d7:c0:d8:6c:86:c8:02:41:
                    43:11:29:1b:fd:d9:c0:06:a1:fb:1a:e2:06:37:fe:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:9B:3A:CF:49:FD:E8:89:BC:05:A2:43:1A:0D:AC:20:5C:4A:21
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137392e3130362e3136382e302f32312d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:81:8f:35:37:77:fb:2c:a3:40:f4:f2:e3:29:79:7c:84:fc:
         ba:ea:37:8e:7f:b9:e4:05:ab:40:ee:2c:ed:25:bf:66:05:d0:
         0a:b6:b2:ed:c5:92:65:96:50:68:9c:b7:b2:03:ec:89:87:29:
         a2:e6:57:9e:3f:44:9c:aa:3d:6e:f2:f6:5e:b3:c7:a6:88:00:
         f8:6c:78:08:b7:8b:8d:1e:c1:90:8c:d0:8a:e1:b5:0b:11:ed:
         f3:5b:b2:22:89:23:e8:d7:6c:e1:3e:e4:1e:01:6d:9c:35:c5:
         f0:e7:fc:c1:3f:9d:4f:39:cc:7a:1c:ba:eb:c9:60:b8:64:c6:
         40:72:0b:c2:8c:43:86:dc:f7:eb:1d:2c:94:24:e5:a6:8b:cc:
         2d:51:74:25:3f:65:f6:b5:d3:16:99:18:e4:db:0e:0f:75:22:
         fe:63:29:81:2f:ce:9a:78:95:36:03:81:f9:0a:6a:52:96:6b:
         7a:c4:89:8d:5d:cb:02:8c:45:ca:d0:6e:e4:1a:95:c5:59:c8:
         d8:1a:e4:99:42:f4:8b:2e:46:75:f3:e8:3c:8e:a2:b4:61:5d:
         2c:20:79:49:8e:26:41:ce:19:cd:05:5c:2c:33:c0:1b:14:21:
         72:eb:dc:d5:cf:3c:e4:b3:97:6b:5a:4d:22:ec:86:48:e5:41:
         ad:2d:e0:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZfeig34j4RYEeLH8PUrQZSN8vrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBCNzhCOThCNDA5NEE4NkU1OEU0RkE5RUFEMDA2NEYy
QThDQ0Y2ODAeFw0yNjAyMTMxNDM1MDNaFw0yNzAyMTIxNDQwMDNaMDMxMTAvBgNV
BAMTKDVEQTY5QjNBQ0Y0OUZERTg4OUJDMDVBMjQzMUEwREFDMjA1QzRBMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2J+yrosPcZC27TinEbZr2JM9x
gPh/KvvUcsVQk+k8RVEaUQIkEuaJ2oBqQr9y3aONYT/6BoBDbZCQ9T3XayInuXOW
lIbnBKJVn8QJ0kX7WQGgT7qn17ATUMLVpEHZvARIklUH66iLcigi3cAUPfevNW1o
avo/oc42Gk91mrYhyfBbimb9Orm2pZiPlZSW6Kbb2i8KOplFq6Hv1y8P1kYBjsov
3s8mzyTbeQ9UbJasvPUry7lROnwbsFZFcd21uiRs5J4IYFC5etM6TlQoVgiH9J7Q
3Sq8MNZlm9+kjjWq+dewkQB5PgjXwNhshsgCQUMRKRv92cAGofsa4gY3/oq7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXaabOs9J/eiJvAWiQxoNrCBcSiEwHwYDVR0j
BBgwFoAU4LeLmLQJSobljk+p6tAGTyqMz2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo
ekwvMC9FMEI3OEI5OEI0MDk0QTg2RTU4RTRGQTlFQUQwMDY0RjJBOENDRjY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwQjc4Qjk4QjQwOTRBODZF
NThFNEZBOUVBRDAwNjRGMkE4Q0NGNjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv
MzEzNzM5MmUzMTMwMzYyZTMxMzYzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzIzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOzaqgwDQYJKoZIhvcNAQELBQADggEBAHaBjzU3
d/sso0D08uMpeXyE/LrqN45/ueQFq0DuLO0lv2YF0Aq2su3FkmWWUGict7ID7ImH
KaLmV54/RJyqPW7y9l6zx6aIAPhseAi3i40ewZCM0IrhtQsR7fNbsiKJI+jXbOE+
5B4BbZw1xfDn/ME/nU85zHocuuvJYLhkxkByC8KMQ4bc9+sdLJQk5aaLzC1RdCU/
Zfa10xaZGOTbDg91Iv5jKYEvzpp4lTYDgfkKalKWa3rEiY1dywKMRcrQbuQalcVZ
yNga5JlC9IsuRnXz6DyOorRhXSwgeUmOJkHOGc0FXCwzwBsUIXLr3NXPPOSzl2ta
TSLshkjlQa0t4Ig=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:32 2026 by rpki-client