Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
File:                     AS262493.roa (raw, json)
Hash identifier:          3fTGnbXuIGsiQ/NkTqZKPC77GkctSgFLAVDf3DjgdPg=
Subject key identifier:   E6:A5:10:11:F0:E1:40:23:C0:9D:CC:1D:40:85:37:AA:30:4D:AB:CE
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       79C8821D77274332A3D8332300F59766937A10E6
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
Signing time:             Fri 06 Feb 2026 20:01:11 +0000
ROA not before:           Fri 06 Feb 2026 19:56:11 +0000
ROA not after:            Fri 05 Feb 2027 20:01:11 +0000
asID:                     262493
IP address blocks:        138.255.216.0/22 maxlen: 22
                          138.255.216.0/23 maxlen: 23
                          138.255.218.0/23 maxlen: 23
                          168.121.148.0/22 maxlen: 22
                          168.121.148.0/23 maxlen: 23
                          168.121.150.0/23 maxlen: 23
                          170.82.132.0/22 maxlen: 22
                          170.82.132.0/23 maxlen: 23
                          170.82.134.0/23 maxlen: 23
                          177.8.48.0/21 maxlen: 21
                          177.8.48.0/23 maxlen: 23
                          177.8.50.0/23 maxlen: 23
                          177.8.52.0/22 maxlen: 22
                          177.8.52.0/23 maxlen: 23
                          177.8.54.0/23 maxlen: 23
                          177.55.48.0/20 maxlen: 20
                          177.55.48.0/23 maxlen: 23
                          177.55.50.0/23 maxlen: 23
                          177.55.52.0/23 maxlen: 23
                          177.55.54.0/23 maxlen: 23
                          177.55.56.0/23 maxlen: 23
                          177.55.58.0/23 maxlen: 23
                          177.55.60.0/23 maxlen: 23
                          177.55.60.0/24 maxlen: 24
                          177.55.62.0/23 maxlen: 23
                          2804:fec::/32 maxlen: 32
                          2804:fec::/36 maxlen: 36
                          2804:fec:1000::/36 maxlen: 36
                          2804:fec:3000::/36 maxlen: 36
                          2804:fec:4000::/36 maxlen: 36
                          2804:fec:5000::/36 maxlen: 36
                          2804:fec:6000::/36 maxlen: 36
                          2804:fec:7000::/36 maxlen: 36
                          2804:fec:8000::/36 maxlen: 36
                          2804:fec:a000::/36 maxlen: 36
                          2804:fec:b000::/36 maxlen: 36
                          2804:fec:c000::/36 maxlen: 36
                          2804:fec:d000::/36 maxlen: 36
                          2804:fec:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c8:82:1d:77:27:43:32:a3:d8:33:23:00:f5:97:66:93:7a:10:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Feb  6 19:56:11 2026 GMT
            Not After : Feb  5 20:01:11 2027 GMT
        Subject: CN=E6A51011F0E14023C09DCC1D408537AA304DABCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:09:b3:0e:45:38:f6:27:c7:86:01:8b:0a:
                    ff:f3:c4:8d:cd:33:f0:11:51:7f:4d:1e:7d:34:1e:
                    20:26:3e:86:3c:2e:06:af:46:e6:99:f7:58:85:87:
                    f1:e6:2a:dd:55:dc:2c:fe:06:86:8e:60:f8:0d:8f:
                    9c:dc:64:93:00:1b:2f:d5:19:89:86:92:08:cd:49:
                    d9:e0:73:c2:5f:ff:f7:b5:5b:b1:c9:ef:4e:9a:58:
                    1b:33:e2:fd:d0:76:ad:c9:18:c4:40:29:36:58:81:
                    75:73:ea:c6:17:74:68:0b:2f:af:e4:b7:34:ab:c6:
                    37:f6:5c:d7:ab:95:87:29:7e:d3:e1:30:e2:87:fe:
                    d3:08:fd:05:e2:dc:89:72:7a:8a:96:6f:c7:97:93:
                    ae:16:fc:c7:b4:96:e8:57:a5:7d:89:a2:70:12:bd:
                    13:9a:7a:bf:bf:06:14:3e:06:6d:80:06:4e:08:31:
                    54:39:94:bb:37:63:be:ad:e3:ad:63:b3:23:4c:8d:
                    01:24:74:0a:6f:01:48:15:64:0e:67:36:bb:b3:89:
                    ff:69:2d:6d:f3:1c:42:66:03:62:1f:a5:fb:a5:09:
                    a6:00:e5:08:8c:8b:05:4a:e2:de:d4:fd:0a:f1:c5:
                    08:c2:c7:74:c6:fe:b7:15:b9:77:05:75:d3:d9:60:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:10:11:F0:E1:40:23:C0:9D:CC:1D:40:85:37:AA:30:4D:AB:CE
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:e8:28:86:dd:19:10:85:76:18:ec:ce:4d:93:51:ad:a7:
         43:a5:ff:6c:45:ce:66:1a:8b:15:bd:bc:42:d9:a5:fa:a3:6d:
         db:6a:92:0a:7a:5a:a1:0c:41:77:c2:57:5f:13:b1:c0:16:85:
         59:94:09:12:cf:32:50:1b:8a:76:70:16:49:45:5c:f1:1d:ae:
         b0:5c:b4:ff:7d:d4:2a:f3:69:7b:84:e6:c1:4f:fa:e1:6e:f9:
         f7:bf:a8:03:b5:64:c5:da:46:fb:a6:6c:61:0b:3d:ba:ed:f7:
         c3:9d:95:91:05:19:b1:4b:23:7d:f3:8d:24:8a:07:43:0e:eb:
         59:9f:3d:9a:25:de:41:25:07:e3:65:89:09:7f:a0:ae:d1:a1:
         c0:0e:18:86:62:dd:39:a8:4b:b4:cb:18:7c:29:f8:49:ec:ef:
         b0:47:00:0d:91:34:47:8b:88:e1:d3:40:31:cf:5a:ae:0b:12:
         4a:93:14:f4:11:7b:bc:6a:ea:19:1c:75:a0:87:a9:1e:bf:8a:
         31:bc:4e:f7:7f:59:64:08:a9:ed:78:3e:65:61:79:85:17:fd:
         b3:69:37:31:02:29:aa:30:1b:d1:2b:ee:37:24:7a:31:ae:6a:
         a6:54:80:3a:47:3e:e3:fc:0b:99:1b:3a:1b:c4:19:6e:f3:5f:
         60:b2:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:00 2026 by rpki-client