Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262992.roa
File:                     AS262992.roa (raw, json)
Hash identifier:          CZct3WzFgzo62HNZPu9dgLtH9brlrETfRNhHIrR7Ysw=
Subject key identifier:   BD:D1:D5:F9:A6:4F:AD:52:B4:82:07:21:17:DC:4D:CF:CA:A6:76:90
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       317418CC4FC6282287F0CD04C27F6C0539594CB7
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262992.roa
Signing time:             Fri 06 Feb 2026 20:01:11 +0000
ROA not before:           Fri 06 Feb 2026 19:56:11 +0000
ROA not after:            Fri 05 Feb 2027 20:01:11 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 22
                          186.219.144.0/20 maxlen: 20
                          186.233.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:74:18:cc:4f:c6:28:22:87:f0:cd:04:c2:7f:6c:05:39:59:4c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Feb  6 19:56:11 2026 GMT
            Not After : Feb  5 20:01:11 2027 GMT
        Subject: CN=BDD1D5F9A64FAD52B482072117DC4DCFCAA67690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:59:fc:53:bc:4a:a6:c5:7d:bd:6a:58:6f:
                    b2:1e:ac:5f:99:f9:a6:df:2b:a2:b4:4b:09:df:52:
                    53:1a:7f:f1:0f:ae:d8:d5:d3:62:9b:f5:03:40:2f:
                    fe:dc:44:9d:44:dd:ec:5c:2a:20:05:3e:8c:6a:ac:
                    97:a8:6b:3c:ec:c0:c8:b3:2e:3b:12:2e:23:cb:b4:
                    fd:13:85:9d:4e:7f:4a:f0:fe:62:d4:84:c3:3f:69:
                    85:0b:fa:11:36:ee:9e:45:90:bf:92:0b:26:96:9b:
                    29:cf:6a:b5:15:89:73:dc:3d:a9:13:54:bd:ad:60:
                    4b:13:2c:0b:54:d4:a2:87:10:6c:3f:55:32:b9:66:
                    4c:63:45:66:7d:4a:0e:cf:61:50:8f:82:72:09:d8:
                    8e:1e:b8:6a:f3:c4:fb:d5:6a:48:c4:75:92:61:25:
                    64:e4:21:23:6c:2b:70:69:08:3f:ba:c8:43:02:8e:
                    fb:54:67:1a:c8:43:b6:52:db:15:81:aa:e1:16:3f:
                    dc:c3:a7:e8:36:b6:70:8f:ad:d5:88:7f:8c:d7:e6:
                    f6:ce:a5:9d:05:ca:d3:42:7f:ab:30:12:dc:62:95:
                    ae:ce:22:44:69:78:68:c8:27:7c:c7:77:9e:80:df:
                    ec:8a:3c:59:2b:aa:af:39:5f:a0:de:ec:55:1f:ca:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:D5:F9:A6:4F:AD:52:B4:82:07:21:17:DC:4D:CF:CA:A6:76:90
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262992.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22
                  186.219.144.0/20
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:3b:2e:b6:22:c3:f3:c2:9a:95:1d:1a:1f:12:65:c0:53:0c:
         0d:ef:93:f6:5f:06:84:bc:f8:d7:4d:ae:50:ce:14:3d:92:9c:
         95:ba:97:59:a0:48:91:1e:8e:e2:f1:b4:51:51:16:91:77:70:
         08:b2:06:06:24:b4:61:71:0c:5f:07:59:39:8e:96:50:cf:d8:
         4e:2b:85:f8:33:c0:d8:36:6d:db:ca:07:2c:ab:2f:7c:76:d0:
         8e:86:1d:02:bc:18:df:1f:7a:a3:1d:b5:7e:65:19:d5:86:65:
         72:40:b8:0d:74:a2:1b:df:c9:26:14:08:fd:4b:a7:a6:27:91:
         d5:a9:a0:96:ea:35:ea:45:a3:7d:d8:cc:5a:55:58:ee:34:24:
         99:2e:ba:8f:f2:58:25:a1:06:b7:21:ee:82:7f:2b:06:76:40:
         14:f4:ee:0b:48:fe:2f:c5:df:6e:6f:cd:8e:a1:f4:8b:07:2e:
         de:b5:0d:f3:4a:ca:86:de:2d:fd:0a:d0:33:8e:71:23:b3:23:
         1c:48:9d:4c:ff:cc:01:14:5d:c0:d0:e5:c4:36:e2:b4:48:d0:
         7e:34:2a:19:17:77:d5:12:20:f7:e7:b4:67:db:1d:0d:be:c8:
         12:8e:57:0c:fe:56:dd:b7:8d:f1:19:0f:47:33:0e:a1:e9:c6:
         11:1b:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:59:09 2026 by rpki-client