Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa
File:                     3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa (raw, json)
Hash identifier:          4Qo2J+Z7G0DqEumC+fe4qBznf4t1dLBP7MXWJx+ZqZw=
Subject key identifier:   F8:6C:27:E3:96:0F:1D:8C:B3:45:6D:09:1A:61:49:0E:F3:D0:30:7C
Certificate issuer:       /CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
Certificate serial:       1370623E4ACA0D29184CD301C1311EB0372EBC1E
Authority key identifier: 7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa
Signing time:             Thu 05 Feb 2026 09:50:48 +0000
ROA not before:           Thu 05 Feb 2026 09:45:48 +0000
ROA not after:            Thu 04 Feb 2027 09:50:48 +0000
asID:                     265937
IP address blocks:        164.163.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl
                          rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:70:62:3e:4a:ca:0d:29:18:4c:d3:01:c1:31:1e:b0:37:2e:bc:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
        Validity
            Not Before: Feb  5 09:45:48 2026 GMT
            Not After : Feb  4 09:50:48 2027 GMT
        Subject: CN=F86C27E3960F1D8CB3456D091A61490EF3D0307C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:a6:5f:da:71:88:31:1b:23:ec:63:b5:0c:
                    6e:92:e7:29:f3:f2:64:0d:78:e1:2a:f5:ab:46:9d:
                    22:77:54:fa:ba:b8:f7:6b:82:87:d5:8c:b6:80:9a:
                    94:1a:8b:8d:71:16:94:23:4a:26:5e:5c:28:ec:a9:
                    00:c9:8d:f8:b0:51:9a:a2:89:d2:97:7e:84:43:5f:
                    b6:c8:74:f7:ea:a2:0b:de:c1:21:c8:c7:16:0d:98:
                    c2:d5:d6:62:b9:cb:51:11:bb:49:32:70:a5:62:4d:
                    d5:3c:78:bf:b8:24:7a:79:73:dd:cc:20:4a:c5:d2:
                    19:f2:ba:d1:c0:d1:9c:b2:29:8f:2c:5b:5c:8a:5e:
                    52:14:30:97:c5:69:15:63:a7:22:78:af:ec:b7:93:
                    1d:b4:98:0e:f7:b1:19:54:cd:c6:55:91:a2:a6:21:
                    2e:7e:e4:d1:14:29:4a:a1:47:d8:81:ee:12:22:fd:
                    9f:7e:d5:e2:27:b2:5b:ce:37:10:f3:87:e8:48:f2:
                    57:2d:0f:91:2c:ad:75:a5:ce:3e:32:7f:43:56:a5:
                    33:28:3c:26:c3:c7:55:24:a4:9e:7d:9c:05:48:60:
                    52:2d:84:77:9f:b2:9b:d7:d0:ec:4a:38:1d:85:ec:
                    ab:5f:f2:d5:35:aa:3d:e5:04:6e:0f:a1:06:84:d4:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:27:E3:96:0F:1D:8C:B3:45:6D:09:1A:61:49:0E:F3:D0:30:7C
            X509v3 Authority Key Identifier:
                keyid:7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/3136342e3136332e32382e302f32322d3234203d3e20323635393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:43:03:11:ac:a5:33:86:02:f4:ca:cb:76:b9:fe:fc:5a:e8:
         ff:29:e5:4a:8a:a2:de:2c:97:ec:91:c9:82:ea:45:ec:2b:aa:
         2e:4a:6f:e4:d2:17:f1:a7:27:8e:6d:a5:5b:e5:3d:2f:82:40:
         e3:ab:d5:8f:c8:1f:df:9a:06:3b:40:62:83:d7:a2:c7:9f:a8:
         fd:8d:75:d3:3c:9b:15:88:83:4a:e5:39:73:ae:5c:45:f7:b3:
         61:ee:9b:c6:ed:f6:c3:16:cd:df:d4:6c:e6:ff:fb:fe:e2:ab:
         d5:c1:79:99:e3:26:78:1e:fa:c7:d9:95:82:ba:3f:00:0d:5c:
         3e:01:20:d8:56:5d:cd:aa:cf:66:25:2b:5b:11:e8:4b:7e:d6:
         dc:29:68:2c:84:69:3e:dc:f3:d0:9f:4d:19:52:c4:d0:f6:3f:
         6c:f5:6f:ce:e2:56:dd:c8:41:bb:3d:19:dd:f8:6f:54:d4:6f:
         4b:7d:c3:40:c5:ee:84:fb:02:c8:08:46:c2:9f:cb:ba:6b:f8:
         c3:ac:c0:9f:42:28:70:08:14:7b:c8:71:ca:ff:f2:1d:4e:6b:
         e5:3e:81:3f:e0:42:6a:8d:83:de:d3:de:71:b4:87:6a:aa:96:
         cd:30:11:9a:93:31:33:0f:5e:0c:57:93:cb:ec:90:71:aa:a8:
         71:b5:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:36 2026 by rpki-client