Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31392e302f32342d3234203d3e20323635313835.roa
File:                     3136382e3139362e31392e302f32342d3234203d3e20323635313835.roa (raw, json)
Hash identifier:          SXlscs7JgT/dfzlEi3Fwu88Q4IRG+YD8HFQ2+rfu6pA=
Subject key identifier:   15:DB:65:BA:A4:63:C6:98:56:90:F7:11:C1:BA:9A:0D:1B:F6:AE:8E
Certificate issuer:       /CN=5F3B18ACB6D17DB71656252E569070817AC536BF
Certificate serial:       5473CD2F178A558B228B776FB86CFEB8DF256558
Authority key identifier: 5F:3B:18:AC:B6:D1:7D:B7:16:56:25:2E:56:90:70:81:7A:C5:36:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31392e302f32342d3234203d3e20323635313835.roa
Signing time:             Tue 10 Feb 2026 16:22:40 +0000
ROA not before:           Tue 10 Feb 2026 16:17:40 +0000
ROA not after:            Tue 09 Feb 2027 16:22:40 +0000
asID:                     265185
IP address blocks:        168.196.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:73:cd:2f:17:8a:55:8b:22:8b:77:6f:b8:6c:fe:b8:df:25:65:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3B18ACB6D17DB71656252E569070817AC536BF
        Validity
            Not Before: Feb 10 16:17:40 2026 GMT
            Not After : Feb  9 16:22:40 2027 GMT
        Subject: CN=15DB65BAA463C6985690F711C1BA9A0D1BF6AE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:6e:7b:c0:ed:0d:76:88:8a:17:c8:32:d4:
                    7e:b6:3b:6b:0a:e5:68:fa:3a:43:01:14:b0:ce:7c:
                    72:04:18:4d:c0:f1:4d:c5:0a:2f:f4:fe:70:4f:78:
                    c6:b6:7f:d8:ba:ac:55:8f:46:c6:eb:09:b8:0c:8e:
                    80:0f:08:1c:53:e4:b6:73:75:fd:c7:4d:60:2e:a8:
                    83:d1:0d:d8:f2:b4:32:c4:aa:5d:8a:e3:92:f5:43:
                    1c:67:eb:5c:49:e8:be:7c:0e:44:14:8e:50:28:ba:
                    64:69:f9:51:52:0e:46:e2:d4:ab:9b:63:67:02:b4:
                    c7:9e:01:b9:69:33:9e:7c:10:93:25:4f:d3:ee:d3:
                    6c:d4:85:97:af:06:4d:8d:c4:50:8f:ad:10:3b:52:
                    bb:ba:ba:f5:72:4c:92:95:3d:f6:1c:84:7e:01:46:
                    dd:dc:e3:cd:f1:32:7a:74:e0:31:e2:c1:9e:8a:53:
                    c9:65:6d:24:26:30:8e:65:55:70:cb:c6:07:b1:c9:
                    b2:7d:82:2d:81:29:0d:52:81:60:50:6d:64:c7:74:
                    dc:9e:55:6a:24:68:ce:4e:f3:6a:57:54:95:0d:b9:
                    24:92:b8:50:b8:ac:c8:b1:d4:70:0d:ab:91:d6:b0:
                    f6:bc:a0:ca:50:3d:92:3a:bf:11:96:52:4a:2b:2d:
                    45:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:65:BA:A4:63:C6:98:56:90:F7:11:C1:BA:9A:0D:1B:F6:AE:8E
            X509v3 Authority Key Identifier:
                keyid:5F:3B:18:AC:B6:D1:7D:B7:16:56:25:2E:56:90:70:81:7A:C5:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31392e302f32342d3234203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ef:8a:f7:91:5e:d9:92:a6:ad:aa:4c:cf:d8:97:dd:e3:09:
         93:0a:5b:e9:a6:ac:25:5e:64:65:1f:37:e8:65:b5:98:cf:13:
         a3:a6:18:fe:1e:00:73:5d:13:56:95:1a:db:3f:30:7c:9e:a0:
         93:44:5d:34:dd:f8:24:64:c0:e2:3b:92:75:cc:27:41:b1:a4:
         63:5a:5b:03:cf:27:af:74:1c:e4:86:34:93:cf:8b:71:2f:0e:
         c6:76:6a:b1:ce:ff:b5:ec:18:94:7d:52:5c:65:d9:65:16:9c:
         a4:df:0e:fd:9a:49:49:73:ef:74:c9:f3:00:a9:85:d1:55:51:
         c2:5c:41:93:e1:17:c0:c9:f2:d4:f2:3e:5e:0d:b0:6c:3a:13:
         e1:ee:11:b6:f6:cf:fb:83:2a:db:c0:93:87:c4:2e:ee:cb:d5:
         aa:a6:8d:78:3a:ba:b6:6d:47:a0:47:20:3a:8a:b4:48:0c:0a:
         e5:42:3c:28:83:59:38:20:eb:76:a5:a5:40:00:7b:d6:50:7e:
         14:d6:50:e5:0b:b7:2e:20:4c:c8:7e:4a:1f:4b:17:3c:6b:1e:
         0f:b6:56:75:84:69:85:9c:75:c7:7a:f0:11:25:34:11:dc:1b:
         9c:ee:72:b9:bc:00:38:33:62:6f:6d:3a:1f:48:00:9b:b0:ea:
         93:0d:d3:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVHPNLxeKVYsii3dvuGz+uN8lZVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYzQjE4QUNCNkQxN0RCNzE2NTYyNTJFNTY5MDcwODE3
QUM1MzZCRjAeFw0yNjAyMTAxNjE3NDBaFw0yNzAyMDkxNjIyNDBaMDMxMTAvBgNV
BAMTKDE1REI2NUJBQTQ2M0M2OTg1NjkwRjcxMUMxQkE5QTBEMUJGNkFFOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH2257wO0NdoiKF8gy1H62O2sK
5Wj6OkMBFLDOfHIEGE3A8U3FCi/0/nBPeMa2f9i6rFWPRsbrCbgMjoAPCBxT5LZz
df3HTWAuqIPRDdjytDLEql2K45L1Qxxn61xJ6L58DkQUjlAoumRp+VFSDkbi1Kub
Y2cCtMeeAblpM558EJMlT9Pu02zUhZevBk2NxFCPrRA7Uru6uvVyTJKVPfYchH4B
Rt3c483xMnp04DHiwZ6KU8llbSQmMI5lVXDLxgexybJ9gi2BKQ1SgWBQbWTHdNye
VWokaM5O82pXVJUNuSSSuFC4rMix1HANq5HWsPa8oMpQPZI6vxGWUkorLUW3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFdtluqRjxphWkPcRwbqaDRv2ro4wHwYDVR0j
BBgwFoAUXzsYrLbRfbcWViUuVpBwgXrFNr8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk1rZWY3OXhyUllQNnY2VWdQVXFROGo5Q0JNa2FtaUVZQjZKa3dSUFpk
TlEvMC81RjNCMThBQ0I2RDE3REI3MTY1NjI1MkU1NjkwNzA4MTdBQzUzNkJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGM0IxOEFDQjZEMTdEQjcx
NjU2MjUyRTU2OTA3MDgxN0FDNTM2QkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZNa2VmNzl4clJZUDZ2NlVnUFVxUThqOUNCTWthbWlFWUI2Smt3UlBaZE5RLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoxBMwDQYJKoZIhvcNAQELBQADggEBABzviveR
XtmSpq2qTM/Yl93jCZMKW+mmrCVeZGUfN+hltZjPE6OmGP4eAHNdE1aVGts/MHye
oJNEXTTd+CRkwOI7knXMJ0GxpGNaWwPPJ690HOSGNJPPi3EvDsZ2arHO/7XsGJR9
Ulxl2WUWnKTfDv2aSUlz73TJ8wCphdFVUcJcQZPhF8DJ8tTyPl4NsGw6E+HuEbb2
z/uDKtvAk4fELu7L1aqmjXg6urZtR6BHIDqKtEgMCuVCPCiDWTgg63alpUAAe9ZQ
fhTWUOULty4gTMh+Sh9LFzxrHg+2VnWEaYWcdcd68BElNBHcG5zucrm8ADgzYm9t
Oh9IAJuw6pMN004=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:45:54 2026 by rpki-client