Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          6cigMOSfoqE6zvwmb3uMyGKEPSH30r6IbqvU3uHv77s=
Subject key identifier:   89:0C:6B:99:25:FA:F3:E9:BD:0A:66:56:06:24:FB:02:E7:E7:6C:B5
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       0C15D114A9A30D3D40C1B451F49CA16B98A66EEB
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa
Signing time:             Thu 05 Feb 2026 17:11:22 +0000
ROA not before:           Thu 05 Feb 2026 17:06:22 +0000
ROA not after:            Thu 04 Feb 2027 17:11:22 +0000
asID:                     262772
IP address blocks:        186.232.179.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:15:d1:14:a9:a3:0d:3d:40:c1:b4:51:f4:9c:a1:6b:98:a6:6e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Feb  5 17:06:22 2026 GMT
            Not After : Feb  4 17:11:22 2027 GMT
        Subject: CN=890C6B9925FAF3E9BD0A66560624FB02E7E76CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:d0:3b:67:fd:71:cf:70:35:b2:dd:43:f8:
                    22:d5:b8:a2:27:a2:0c:9c:d9:fc:47:97:a9:b1:e1:
                    a5:d1:af:de:5a:d4:f0:34:32:27:e9:8d:7e:6a:3b:
                    32:41:66:01:b1:2d:06:a9:98:c6:f1:70:fa:9f:ea:
                    2e:a6:2d:6b:1d:64:5e:70:65:7d:5d:7f:22:1c:fb:
                    0a:54:cb:40:9f:28:f9:69:7b:e7:92:b4:64:d5:49:
                    ad:48:6f:8f:38:d5:ad:d9:dd:75:5d:16:6f:ea:9f:
                    97:60:38:3e:2a:8d:d6:e4:eb:27:cc:5a:f2:12:5b:
                    fc:35:44:99:e9:a0:e2:e3:76:89:2c:39:04:bd:91:
                    f0:3e:37:c9:46:a5:08:80:b2:36:11:bf:00:d2:f7:
                    84:a4:e3:68:3a:d0:ae:99:7e:95:62:44:ff:4e:8d:
                    39:4e:7b:1e:c2:1c:4d:69:23:c7:ab:e3:4c:5c:01:
                    07:43:f5:60:a6:74:61:fd:dc:67:51:07:45:c1:f3:
                    04:49:78:1a:0c:51:7a:b6:a2:5f:d0:00:84:1b:66:
                    c9:1c:21:e1:bc:da:c0:72:a6:b6:aa:bb:8d:44:4f:
                    01:c9:41:88:58:3a:b0:d9:92:6a:29:31:0a:ba:c9:
                    b0:50:62:8f:60:7a:5b:bc:86:ca:f7:90:65:df:e3:
                    24:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0C:6B:99:25:FA:F3:E9:BD:0A:66:56:06:24:FB:02:E7:E7:6C:B5
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:a9:b0:8d:f2:93:61:a9:8b:87:2c:99:8c:ee:7a:22:9b:
         9e:a2:b3:8d:a5:ea:cd:d2:08:e5:69:cb:c8:7a:b6:30:8a:c4:
         9d:ba:e5:f0:96:50:77:98:ad:1f:55:67:ed:51:83:3c:98:e2:
         eb:a7:5c:66:d6:da:e3:24:be:c3:01:6b:21:c0:22:f5:1e:14:
         c7:23:fc:05:0c:b1:9b:be:3c:4e:92:7e:25:17:e1:88:fd:32:
         66:01:38:d0:1d:2b:19:46:3f:ac:e1:d1:dc:9b:ff:b7:62:3c:
         63:c0:ca:d6:fa:a1:78:83:c4:73:7e:d3:56:72:57:29:db:f3:
         36:01:a1:45:7b:e2:3f:b7:6b:96:29:9c:cf:7b:14:2d:6f:7c:
         ec:c7:c7:c0:c7:ba:99:66:ff:05:e9:5a:9c:1a:17:3f:a7:e5:
         cd:9c:90:51:e8:0c:ef:99:ac:84:3c:5f:03:60:5f:74:e7:1a:
         86:cc:8e:62:ee:96:f6:9b:59:5c:96:a1:62:bc:a1:17:74:cc:
         44:86:73:f6:40:29:14:e6:26:64:e0:97:77:6d:c2:d0:64:86:
         54:9a:c2:3e:fd:33:63:d2:40:00:b4:84:db:e9:45:4d:2a:7d:
         84:53:a7:09:88:45:76:69:b3:1f:af:26:f8:4d:ae:9f:0a:f0:
         1d:e3:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:21 2026 by rpki-client