Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/3136342e3136332e3137362e302f32322d3332203d3e20323635393636.roa
File:                     3136342e3136332e3137362e302f32322d3332203d3e20323635393636.roa (raw, json)
Hash identifier:          iHCUm1OAw/cXBJhJulA2gcP+pvCncNvubzcJyXgV2aw=
Subject key identifier:   C8:02:29:A3:CC:18:24:EE:3B:2B:DD:FB:B9:DA:AF:A0:BC:3B:42:5D
Certificate issuer:       /CN=C607DD8259CE1891CA110ED38D1BAF290D9FB72C
Certificate serial:       70175FBCFB5A09061BD783015EBB1443F2C55D72
Authority key identifier: C6:07:DD:82:59:CE:18:91:CA:11:0E:D3:8D:1B:AF:29:0D:9F:B7:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/3136342e3136332e3137362e302f32322d3332203d3e20323635393636.roa
Signing time:             Mon 23 Feb 2026 12:21:58 +0000
ROA not before:           Mon 23 Feb 2026 12:16:58 +0000
ROA not after:            Mon 22 Feb 2027 12:21:58 +0000
asID:                     265966
IP address blocks:        164.163.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.crl
                          rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:5f:bc:fb:5a:09:06:1b:d7:83:01:5e:bb:14:43:f2:c5:5d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C607DD8259CE1891CA110ED38D1BAF290D9FB72C
        Validity
            Not Before: Feb 23 12:16:58 2026 GMT
            Not After : Feb 22 12:21:58 2027 GMT
        Subject: CN=C80229A3CC1824EE3B2BDDFBB9DAAFA0BC3B425D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:b1:20:d4:17:25:42:ef:43:1f:5f:0b:97:
                    ba:f3:e2:91:ff:39:90:50:00:51:56:55:19:7d:65:
                    c2:22:41:06:6f:fa:e1:f7:78:19:b4:b1:ee:d1:8d:
                    83:55:56:c3:d7:da:a8:34:c9:38:e9:99:82:f0:23:
                    a3:0a:f2:9b:83:a2:43:1f:0e:d5:30:30:b9:b6:50:
                    28:a2:f3:24:63:94:ca:16:7f:d8:0f:b2:00:f7:1d:
                    a9:98:2a:40:3c:22:14:7a:0d:da:24:17:e0:1c:70:
                    b8:97:0a:52:12:0a:8e:ab:73:ea:02:c3:86:53:60:
                    c3:62:2c:0a:f4:a9:ba:0a:b4:b7:7a:11:db:ee:f3:
                    e2:b4:e4:ac:9a:47:c7:ee:37:8f:f7:bc:84:f0:27:
                    af:0f:c1:3b:c9:cd:7d:7f:bf:bd:da:bf:2f:e9:36:
                    80:b9:72:59:6d:45:eb:cf:00:81:cb:37:b4:6f:e3:
                    50:b3:88:c3:ef:53:c7:e6:b3:a4:39:e6:d2:aa:f1:
                    ec:ef:a3:7a:64:20:a6:c7:88:87:fa:de:15:57:87:
                    7c:a5:33:44:c1:2f:57:6b:f4:41:d1:f2:21:62:5d:
                    42:10:6b:c4:6c:ea:35:2b:f6:1a:5a:c6:e4:7a:57:
                    71:d7:4d:ca:b7:da:46:11:ab:91:12:e5:35:29:e4:
                    45:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:02:29:A3:CC:18:24:EE:3B:2B:DD:FB:B9:DA:AF:A0:BC:3B:42:5D
            X509v3 Authority Key Identifier:
                keyid:C6:07:DD:82:59:CE:18:91:CA:11:0E:D3:8D:1B:AF:29:0D:9F:B7:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C607DD8259CE1891CA110ED38D1BAF290D9FB72C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQgqpFt87PUjWCNTUaLbdPpAUZfiTRo9ApLDjMNjFHMP/0/3136342e3136332e3137362e302f32322d3332203d3e20323635393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:dc:d3:cd:21:09:99:b4:c3:0f:12:7d:bd:a3:c0:be:39:
         80:a9:bf:76:a3:85:11:3f:a0:ed:54:47:ec:2c:85:c4:30:98:
         3d:c1:28:6a:9b:1b:97:87:e2:e2:cf:ef:ba:42:d0:94:bd:6d:
         35:7f:79:92:16:34:e6:b5:80:94:d6:b4:f1:3c:d3:78:f7:fe:
         0e:88:3e:3f:82:19:38:87:2b:f0:d1:94:a6:04:3e:42:33:3d:
         87:02:7c:4c:49:a6:c6:72:2b:4e:1c:61:48:1d:39:e6:23:cb:
         e1:d7:11:42:7d:43:86:52:d4:ed:5a:b8:e9:da:e8:14:be:ba:
         25:90:39:f0:47:64:1c:a0:82:f5:69:64:86:31:be:70:0d:cf:
         45:a7:12:87:83:c3:bc:16:76:50:35:f3:fb:33:01:f5:23:6e:
         c7:b0:4d:01:a2:66:d7:ed:8b:06:cb:42:bc:4e:85:e6:b6:cc:
         f5:33:d5:35:1a:f5:d9:30:9a:70:42:5c:a9:1c:eb:a0:f6:93:
         56:c3:bb:1b:e1:9d:61:a0:32:91:f1:93:ad:79:d4:32:0f:02:
         ec:55:7d:0b:80:98:7c:5a:a4:44:de:53:a6:7e:30:92:8b:20:
         eb:26:df:51:3f:71:8d:84:88:2c:cb:11:54:5c:98:f5:83:bf:
         30:70:67:04
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcBdfvPtaCQYb14MBXrsUQ/LFXXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYwN0REODI1OUNFMTg5MUNBMTEwRUQzOEQxQkFGMjkw
RDlGQjcyQzAeFw0yNjAyMjMxMjE2NThaFw0yNzAyMjIxMjIxNThaMDMxMTAvBgNV
BAMTKEM4MDIyOUEzQ0MxODI0RUUzQjJCRERGQkI5REFBRkEwQkMzQjQyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsbEg1BclQu9DH18Ll7rz4pH/
OZBQAFFWVRl9ZcIiQQZv+uH3eBm0se7RjYNVVsPX2qg0yTjpmYLwI6MK8puDokMf
DtUwMLm2UCii8yRjlMoWf9gPsgD3HamYKkA8IhR6DdokF+AccLiXClISCo6rc+oC
w4ZTYMNiLAr0qboKtLd6Edvu8+K05KyaR8fuN4/3vITwJ68PwTvJzX1/v73avy/p
NoC5clltRevPAIHLN7Rv41CziMPvU8fms6Q55tKq8ezvo3pkIKbHiIf63hVXh3yl
M0TBL1dr9EHR8iFiXUIQa8Rs6jUr9hpaxuR6V3HXTcq32kYRq5ES5TUp5EWzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyAIpo8wYJO47K937udqvoLw7Ql0wHwYDVR0j
BBgwFoAUxgfdglnOGJHKEQ7TjRuvKQ2ftywwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFncXBGdDg3UFVqV0NOVFVhTGJkUHBBVVpmaVRSbzlBcExEak1OakZI
TVAvMC9DNjA3REQ4MjU5Q0UxODkxQ0ExMTBFRDM4RDFCQUYyOTBEOUZCNzJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2MDdERDgyNTlDRTE4OTFD
QTExMEVEMzhEMUJBRjI5MEQ5RkI3MkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRZ3FwRnQ4N1BValdDTlRVYUxiZFBwQVVaZmlUUm85QXBMRGpNTmpGSE1QLzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzczNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNTM5MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSjsDANBgkqhkiG9w0BAQsFAAOCAQEAF6rc
080hCZm0ww8Sfb2jwL45gKm/dqOFET+g7VRH7CyFxDCYPcEoapsbl4fi4s/vukLQ
lL1tNX95khY05rWAlNa08TzTePf+Dog+P4IZOIcr8NGUpgQ+QjM9hwJ8TEmmxnIr
ThxhSB055iPL4dcRQn1DhlLU7Vq46droFL66JZA58EdkHKCC9WlkhjG+cA3PRacS
h4PDvBZ2UDXz+zMB9SNux7BNAaJm1+2LBstCvE6F5rbM9TPVNRr12TCacEJcqRzr
oPaTVsO7G+GdYaAykfGTrXnUMg8C7FV9C4CYfFqkRN5Tpn4wkosg6ybfUT9xjYSI
LMsRVFyY9YO/MHBnBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:01 2026 by rpki-client