Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          rmlEe09mFumzi++BacY6CaQ0WYwjZ9dIki0JAAJknNY=
Subject key identifier:   96:01:A1:64:0E:F6:95:C3:CE:0A:22:87:DB:D4:CE:94:08:95:A4:43
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       1A965C52DDAE4025AB9C7AF8F1DE7BC60043E83E
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa
Signing time:             Thu 05 Feb 2026 17:11:22 +0000
ROA not before:           Thu 05 Feb 2026 17:06:22 +0000
ROA not after:            Thu 04 Feb 2027 17:11:22 +0000
asID:                     262772
IP address blocks:        186.232.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:5c:52:dd:ae:40:25:ab:9c:7a:f8:f1:de:7b:c6:00:43:e8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Feb  5 17:06:22 2026 GMT
            Not After : Feb  4 17:11:22 2027 GMT
        Subject: CN=9601A1640EF695C3CE0A2287DBD4CE940895A443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:b3:17:4d:16:71:96:0d:32:3e:5b:32:c3:
                    f3:90:d2:18:65:09:f3:7f:cc:0d:47:e2:c1:10:04:
                    48:41:05:33:bc:54:6b:90:2d:c9:66:b5:b1:ab:7a:
                    e9:b7:5f:d9:86:51:4c:1a:5f:25:0c:23:45:4d:79:
                    93:4f:49:3a:82:b9:a1:9b:77:f9:ec:0b:a0:64:fe:
                    fa:dd:da:f1:10:a5:b1:f5:4a:d2:d3:49:5e:a0:eb:
                    19:78:4f:d2:65:1b:3e:3a:ba:b4:f8:51:ea:13:7a:
                    89:21:78:2f:ef:2c:d1:41:18:26:58:80:02:0d:bd:
                    28:f0:99:e7:7e:92:60:46:e8:01:ed:5e:35:ec:85:
                    06:9a:eb:ae:6f:34:6c:1c:c2:63:8e:9b:0b:41:d2:
                    da:40:0b:69:9b:8f:79:0f:a9:33:a1:87:98:dd:78:
                    30:fd:35:70:f8:28:e5:14:a8:d7:81:d3:8c:d7:aa:
                    b0:38:46:18:58:bc:aa:5c:16:77:6d:10:3e:e5:f2:
                    c9:d1:52:f9:26:34:8f:d5:1a:a3:9c:0c:2f:63:57:
                    26:d8:02:83:91:4e:48:0d:5b:95:5a:21:90:4d:00:
                    92:6e:12:57:93:78:38:94:bd:71:54:9f:43:ac:e5:
                    71:13:5a:b1:11:9d:b0:77:99:9d:34:a2:62:9e:6b:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:01:A1:64:0E:F6:95:C3:CE:0A:22:87:DB:D4:CE:94:08:95:A4:43
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137362e302f32322d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:fd:83:45:d2:ae:dc:67:0e:88:a2:a8:43:83:1e:be:f8:
         c1:80:f1:01:80:4d:d2:f1:da:5f:64:22:11:3b:51:a5:21:23:
         ac:ad:45:eb:67:ab:26:39:85:33:ef:9c:68:9c:9f:78:61:e9:
         51:31:32:21:db:7f:35:1b:3e:d8:09:9a:bf:4c:69:12:99:f3:
         c7:31:86:8e:84:28:bb:fd:b1:98:c4:14:91:f6:b7:04:26:8d:
         be:64:ae:d1:81:3b:25:2c:f6:b7:3c:f1:44:29:e3:92:ee:c2:
         ab:e9:be:82:82:61:c0:2d:fd:ad:72:cd:d0:e9:44:05:31:6e:
         31:25:d7:ce:cb:59:fd:62:98:73:66:e2:b2:17:a1:91:72:87:
         c6:83:d9:f7:25:48:5f:45:5c:2e:b8:e0:58:70:55:a8:b2:e8:
         da:53:eb:0f:74:23:fa:b4:a5:b5:57:d6:60:7b:10:a7:52:89:
         49:57:e9:d8:58:be:ae:ca:03:99:63:21:29:16:cd:93:a1:c1:
         7b:7f:01:2b:68:4b:8f:f9:4b:c5:48:4f:1e:6b:78:a4:dd:28:
         c4:7e:af:e6:73:79:ce:b3:22:d6:a8:fe:05:09:b9:65:93:73:
         d1:ed:45:97:b2:8c:69:c2:ba:26:73:78:21:5a:9e:6f:c7:75:
         ef:46:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:19 2026 by rpki-client