Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
File:                     3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa (raw, json)
Hash identifier:          RfAcHQtYHNA/F5eGMvcMtXPtJDFAg00xAxkTA5zdqmU=
Subject key identifier:   BE:39:82:46:2C:C4:71:14:6C:08:FB:40:C8:D7:4E:76:7A:BA:8A:F1
Certificate issuer:       /CN=2F18CA349C9620E76DE6A8432BAA44A4392B449D
Certificate serial:       0D2A73BF5F94F679B1C64EF62C283FBD3F9322D6
Authority key identifier: 2F:18:CA:34:9C:96:20:E7:6D:E6:A8:43:2B:AA:44:A4:39:2B:44:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F18CA349C9620E76DE6A8432BAA44A4392B449D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa
Signing time:             Wed 18 Feb 2026 17:34:14 +0000
ROA not before:           Wed 18 Feb 2026 17:29:14 +0000
ROA not after:            Wed 17 Feb 2027 17:34:14 +0000
asID:                     265311
IP address blocks:        168.121.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/2F18CA349C9620E76DE6A8432BAA44A4392B449D.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/2F18CA349C9620E76DE6A8432BAA44A4392B449D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F18CA349C9620E76DE6A8432BAA44A4392B449D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2a:73:bf:5f:94:f6:79:b1:c6:4e:f6:2c:28:3f:bd:3f:93:22:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F18CA349C9620E76DE6A8432BAA44A4392B449D
        Validity
            Not Before: Feb 18 17:29:14 2026 GMT
            Not After : Feb 17 17:34:14 2027 GMT
        Subject: CN=BE3982462CC471146C08FB40C8D74E767ABA8AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:8f:74:20:27:79:ed:8e:9b:ee:99:84:8e:
                    0a:fc:63:e7:0d:0c:3d:fa:47:ff:61:47:56:36:f6:
                    53:30:05:93:6b:6c:44:66:d6:88:09:73:bd:39:37:
                    9b:1a:70:f8:b2:76:42:26:63:81:47:a8:17:87:15:
                    09:87:f6:6b:03:47:9c:e0:46:c6:34:db:89:c9:eb:
                    d9:62:e6:1b:0e:a5:c2:97:8e:d2:9a:ae:53:ee:b9:
                    f9:3f:fe:21:f1:c7:2f:ff:60:6f:9a:d9:4c:c5:98:
                    0e:7f:4e:14:24:a6:ee:b0:9f:7e:d4:a9:c8:cc:e3:
                    4d:72:be:01:26:db:42:3c:0d:00:44:5f:ac:34:eb:
                    72:23:85:84:18:a2:61:ca:d7:b5:e7:c0:6b:5e:a7:
                    e0:b5:04:71:fd:22:d6:df:b6:95:4b:e2:10:8e:de:
                    91:ec:c5:4d:70:7e:df:5b:94:ce:0f:22:79:40:e6:
                    d3:2d:15:79:96:d7:b1:c3:5f:2b:85:07:5f:d3:7b:
                    c8:47:24:51:64:4d:46:5a:5a:80:1b:99:2a:22:d8:
                    51:f1:62:38:10:79:0b:42:27:48:fb:42:a3:ec:62:
                    0e:f4:31:64:9a:1f:b5:03:37:a7:5b:ab:6e:03:95:
                    c2:89:7d:18:ab:27:1f:89:b2:21:cb:2e:48:8d:9c:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:39:82:46:2C:C4:71:14:6C:08:FB:40:C8:D7:4E:76:7A:BA:8A:F1
            X509v3 Authority Key Identifier:
                keyid:2F:18:CA:34:9C:96:20:E7:6D:E6:A8:43:2B:AA:44:A4:39:2B:44:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/2F18CA349C9620E76DE6A8432BAA44A4392B449D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F18CA349C9620E76DE6A8432BAA44A4392B449D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/0/3136382e3132312e3131332e302f32342d3234203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:41:e3:79:de:67:d6:23:3e:a6:58:40:1b:62:0a:07:6d:
         d3:d3:1a:d1:8c:67:86:84:e2:aa:a5:3f:cc:0b:7b:46:b8:04:
         32:90:7b:c5:7b:11:7a:f3:bf:b8:cf:f1:71:aa:c4:26:ee:11:
         72:af:b4:83:ab:96:42:23:d6:37:35:78:0c:40:96:bd:5e:3f:
         ce:2f:75:92:b1:67:1c:7c:78:25:44:93:5f:9b:70:17:dc:9f:
         e8:a9:53:7e:83:8c:1d:f5:06:3c:4d:5f:16:a4:19:9e:12:9d:
         e6:7e:79:b7:5e:d6:4a:8b:74:de:a1:88:e6:6f:d7:5e:89:ff:
         c8:21:cc:bf:02:3c:c3:81:50:64:5e:ee:01:df:2d:7f:50:2b:
         ce:ad:36:7f:15:f7:5c:81:b6:18:2a:76:74:37:f4:39:4a:09:
         45:f9:ca:2f:38:dd:05:22:93:11:35:9a:3c:65:21:45:5b:45:
         3c:ab:3b:25:0c:44:85:1c:c0:86:3f:bc:98:f9:8e:b1:60:ac:
         21:ae:81:71:72:e6:38:1d:22:9a:40:4f:7f:c8:d4:21:92:7d:
         ea:4b:52:03:07:fe:a7:75:d3:47:31:6b:b5:01:c2:1b:9d:e5:
         98:23:aa:25:16:48:88:fd:1d:47:cf:93:dc:e3:e8:33:d8:47:
         80:5d:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:13:31 2026 by rpki-client