Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          6eWcnwnpGuXJv64qaHPtusWSbOvdCKD8gyzkiVWg0DI=
Subject key identifier:   D5:BB:A6:46:01:01:13:57:B2:BB:9D:5E:70:CF:4D:23:9F:2D:87:CC
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       79195E686D23AF89C7B5C2CD80956D2A864701BF
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     264509
IP address blocks:        132.255.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:19:5e:68:6d:23:af:89:c7:b5:c2:cd:80:95:6d:2a:86:47:01:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:73:99:d5:f0:8c:88:aa:5b:14:5e:8a:0a:
                    f8:6b:51:b4:2d:d6:fb:25:82:67:15:47:21:10:85:
                    e4:50:02:b4:7e:20:42:5b:b4:98:8d:36:75:80:05:
                    7f:5f:7d:31:3c:cc:92:c0:81:d0:1e:79:98:73:6c:
                    e4:a4:a4:af:2d:71:e3:f7:63:b8:44:e4:b3:78:8e:
                    f4:a3:9a:2b:b0:00:98:e2:10:32:58:82:81:59:ec:
                    85:3a:41:1e:23:e5:2b:0b:23:af:92:6e:87:0e:a1:
                    f0:b9:ac:21:e8:5a:4c:41:1f:68:90:de:d2:38:86:
                    b2:30:a6:03:f8:63:e2:2c:93:92:cf:7c:6e:e5:85:
                    97:19:e1:3b:07:36:7d:90:3b:b5:fc:6f:71:2d:ca:
                    f5:a0:65:ea:13:bc:e0:52:9b:71:68:83:3c:b3:b6:
                    2e:e7:a4:41:50:c4:80:4a:a7:dd:4b:cc:60:5a:9c:
                    93:a8:37:95:11:51:8a:71:a5:07:0f:26:75:39:cc:
                    56:53:24:9e:08:ed:68:38:ca:ce:5f:88:f3:91:01:
                    30:66:11:ad:0c:85:fd:e2:72:8c:72:18:94:58:a3:
                    12:ce:19:9d:e5:c7:e0:41:c0:49:67:15:c4:7d:93:
                    38:cc:4f:5c:56:48:d4:3f:45:bf:49:d7:1e:02:79:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BB:A6:46:01:01:13:57:B2:BB:9D:5E:70:CF:4D:23:9F:2D:87:CC
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:dd:ee:14:2d:eb:5c:2c:aa:66:8a:19:68:c8:4d:66:65:eb:
         d7:7f:f4:af:c6:80:76:e1:40:de:04:b7:b1:ba:50:dd:61:70:
         ca:0d:d5:a2:d2:0a:76:9a:07:7d:aa:64:dd:c1:8c:f0:4f:b2:
         de:90:f9:ac:ff:52:86:f9:e7:3c:d1:69:59:20:ba:52:de:d8:
         a5:c0:e3:79:7e:1e:1f:91:72:33:90:90:db:5c:4e:4e:b8:00:
         c8:9c:e9:0b:38:b7:2a:3e:c8:53:49:00:00:ca:83:30:67:1f:
         a0:64:ad:eb:65:1a:ad:e7:e8:00:69:76:18:42:16:8d:e9:49:
         78:8f:38:a4:7a:3f:cf:2f:ca:fd:42:7a:72:c4:a6:ff:07:42:
         55:cb:52:88:80:d1:6b:40:a5:2b:57:ef:e0:10:03:b0:ea:d8:
         af:2b:ae:37:5d:c2:d8:25:64:36:d4:41:ab:10:ea:4a:65:88:
         a9:63:0d:bc:d8:4c:58:05:0e:77:fe:6e:25:d8:67:1e:75:ed:
         a0:c1:96:1c:b7:ee:32:13:4e:0a:dc:a7:0f:d9:c7:f9:15:a8:
         08:9f:c7:13:f0:ea:dc:ed:63:27:7f:c1:2e:ef:84:70:9a:69:
         24:51:d3:94:58:2e:1a:ed:d0:c7:01:23:6c:83:17:76:6e:1a:
         96:71:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:55 2026 by rpki-client