Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa
File:                     3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (raw, json)
Hash identifier:          Z1iw8g09Qh2V0F+j5oavkp6YZauoAQKiKXzkp8i0giQ=
Subject key identifier:   BB:F0:E7:28:88:3A:7F:E7:3C:22:17:E0:62:2D:91:92:44:6E:0B:9F
Certificate issuer:       /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial:       15BBC2CCB208EFD41B49945AF85CD8A8E3077C65
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa
Signing time:             Wed 04 Feb 2026 21:30:17 +0000
ROA not before:           Wed 04 Feb 2026 21:25:17 +0000
ROA not after:            Wed 03 Feb 2027 21:30:17 +0000
asID:                     271709
IP address blocks:        181.192.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl
                          rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bb:c2:cc:b2:08:ef:d4:1b:49:94:5a:f8:5c:d8:a8:e3:07:7c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
        Validity
            Not Before: Feb  4 21:25:17 2026 GMT
            Not After : Feb  3 21:30:17 2027 GMT
        Subject: CN=BBF0E728883A7FE73C2217E0622D9192446E0B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:38:14:b8:91:b9:72:94:61:1e:af:d1:d9:
                    e5:03:dc:71:f1:1b:fa:88:e3:50:bb:30:97:f5:23:
                    24:9d:38:68:a2:da:27:2c:d9:78:7f:36:25:c4:bd:
                    f5:55:62:09:0d:68:46:89:bb:ec:50:8b:2a:0c:91:
                    80:ac:17:d6:94:2f:f0:c4:bc:a2:d0:9f:0b:fc:78:
                    60:ba:7e:19:0b:b1:25:0a:8d:56:43:46:de:09:3a:
                    c1:1c:50:26:02:e5:aa:47:ad:e3:a9:1a:ff:db:39:
                    b6:d3:ee:f6:72:c8:90:54:a5:61:c9:25:f9:2f:3d:
                    3a:c3:dc:e2:9b:3e:c6:49:81:74:83:ed:b9:c6:b2:
                    47:04:21:1b:15:81:4e:63:00:d3:ec:f2:30:69:13:
                    9f:71:c1:bf:2e:99:88:98:19:9d:6f:3c:d2:a4:4f:
                    70:2b:27:68:aa:c6:57:ac:b4:23:2b:64:9b:83:25:
                    e8:bd:75:ef:12:f9:41:f3:25:f1:33:c5:e6:3e:60:
                    77:07:a6:be:6b:d1:5b:11:41:e5:25:ee:2e:3a:bc:
                    01:1b:71:b3:eb:d6:e7:62:f2:1a:58:85:25:6e:7b:
                    c1:cd:23:3c:35:44:ca:76:8d:53:3d:49:5c:25:51:
                    f5:97:81:2a:f6:73:cc:25:08:6c:0c:46:7c:63:db:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:E7:28:88:3A:7F:E7:3C:22:17:E0:62:2D:91:92:44:6E:0B:9F
            X509v3 Authority Key Identifier:
                keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:e6:4e:10:b2:a6:cf:39:6d:59:29:69:01:13:fc:5b:fe:
         47:37:5b:04:8e:9d:ed:fc:ab:96:fa:a3:19:20:1d:fd:15:50:
         b3:06:7a:8e:6b:3a:c6:f7:39:d3:20:06:99:3b:75:fe:62:94:
         65:7f:f4:fa:bf:20:d0:34:19:35:59:63:bd:cf:f7:77:fa:ab:
         25:4d:66:99:3a:7f:d3:99:ce:09:e0:3a:48:02:09:2b:5b:c9:
         b0:82:58:71:03:ba:ae:1b:af:a6:e6:21:ed:03:33:86:f4:35:
         86:8c:69:33:43:5e:27:55:c6:11:ac:cf:38:8f:2e:4e:94:3f:
         87:3f:49:87:90:5d:4b:6f:3f:8e:f5:ab:28:fe:8a:34:26:a8:
         22:c9:a0:63:ca:0d:81:b0:a2:8f:d7:96:83:f8:bc:83:a1:e0:
         f2:cc:f3:8f:6a:ae:79:a5:34:86:7a:d0:e7:c2:7f:08:9a:bf:
         d6:3f:67:50:f6:e2:9e:1c:47:0c:2b:99:71:4c:0f:d9:a0:44:
         04:3c:11:26:36:21:3d:ad:74:e5:ba:34:e3:2d:83:ef:34:f3:
         0e:2e:ca:08:ed:55:ad:a9:c2:11:55:52:64:a9:d2:b6:c9:4b:
         fd:2d:28:cf:fd:97:e3:2e:6f:b5:53:c8:d3:8f:2f:46:65:63:
         49:2c:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:47 2026 by rpki-client