Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
File:                     3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa (raw, json)
Hash identifier:          Qo71QGZ9woegBbILiBBordLVHq7zvNeXN6kD/86h7hI=
Subject key identifier:   E2:94:5B:36:40:EE:8E:F7:95:8E:D3:11:B3:4C:03:9D:B8:5B:18:C1
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       3B92A219E4B977EED623E9E0255E6591378EE816
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa
Signing time:             Thu 05 Feb 2026 04:01:13 +0000
ROA not before:           Thu 05 Feb 2026 03:56:13 +0000
ROA not after:            Thu 04 Feb 2027 04:01:13 +0000
asID:                     265036
IP address blocks:        170.150.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:92:a2:19:e4:b9:77:ee:d6:23:e9:e0:25:5e:65:91:37:8e:e8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Feb  5 03:56:13 2026 GMT
            Not After : Feb  4 04:01:13 2027 GMT
        Subject: CN=E2945B3640EE8EF7958ED311B34C039DB85B18C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:45:7a:fc:2f:9a:70:d7:08:15:56:ee:16:
                    d8:6e:bd:76:ee:9a:f7:d3:cd:e3:e9:3c:95:4a:b0:
                    62:4e:cf:69:48:b5:9a:b9:52:f0:d1:f9:d0:76:86:
                    0b:c6:7f:1a:5c:de:c8:8e:ca:c7:d6:6f:12:26:7b:
                    4d:82:73:1e:00:a5:ec:05:38:0b:62:21:d4:12:a3:
                    d3:37:87:1b:54:16:02:cf:20:b1:81:0d:f7:2e:c5:
                    13:7b:37:35:4a:9b:18:b7:0c:4e:6e:fd:e8:55:e6:
                    45:bb:f0:14:fb:98:39:cf:90:a0:f6:69:62:22:4b:
                    54:9e:31:82:5d:fa:f5:c0:d0:0c:d8:c1:03:09:b0:
                    8f:f6:3e:d5:00:5d:63:ae:0e:9b:00:c7:13:f4:2c:
                    ce:bb:0f:0b:1a:c0:7a:26:93:2c:6f:55:a3:85:3d:
                    11:f0:59:e2:72:bb:38:db:da:5d:48:34:9e:74:c1:
                    3d:99:0a:e1:e9:45:d0:0b:15:da:94:8c:97:cb:8e:
                    74:b5:d5:6e:e5:0d:fd:1e:3c:b3:88:c4:65:78:c1:
                    4f:79:79:d7:c7:da:96:23:6c:d2:e6:50:bb:6d:cf:
                    eb:da:e4:03:6c:c7:8c:10:87:d0:e4:a9:98:86:aa:
                    17:4b:c9:85:66:75:ac:20:40:d9:3e:25:08:12:39:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:5B:36:40:EE:8E:F7:95:8E:D3:11:B3:4C:03:9D:B8:5B:18:C1
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/3137302e3135302e3232342e302f32322d3234203d3e20323635303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:32:1a:37:46:e2:97:f0:b1:dd:c6:99:a8:ec:6d:05:46:b7:
         4b:45:9b:a0:ba:6c:f3:42:40:dc:0d:aa:e9:e5:f0:11:d3:0c:
         c6:aa:81:b4:1a:6a:d2:fe:a8:ec:dd:57:6a:cd:22:cb:ae:9d:
         78:7c:1c:5c:ff:59:e1:45:b2:cd:11:b4:40:8e:7a:23:9c:4b:
         0d:95:cd:24:2b:0c:0b:cf:db:56:44:23:90:ab:c2:00:2a:85:
         6f:65:f3:50:a0:ac:20:2e:31:b6:05:67:01:7e:20:a0:e9:67:
         ac:51:4e:7f:6b:40:36:db:da:50:b5:f1:5d:6c:51:05:1c:04:
         4d:ad:a4:ea:49:05:30:9a:01:f7:cb:93:77:8d:1c:12:3d:45:
         27:5d:e7:2c:23:8f:b5:c8:2d:3c:26:90:44:67:dd:72:e7:a8:
         51:bd:ed:29:f7:fb:7b:4d:ca:e2:96:22:0c:c6:d2:9d:93:42:
         5b:98:cf:58:b4:77:6d:9f:5e:a7:8b:5d:73:29:d7:46:d5:ec:
         ee:00:0d:2d:c0:c2:3e:3f:c5:62:e0:99:0a:be:9c:a8:dc:e9:
         c0:ac:ed:61:c9:e0:22:03:60:ee:5c:e8:c3:b2:3a:81:c1:5f:
         2b:de:27:91:bc:d2:af:18:55:6b:33:3c:9c:51:73:86:a0:99:
         eb:7b:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:30 2026 by rpki-client