Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e322e302f32332d3234203d3e20323635343130.roa
File:                     3136382e3139352e322e302f32332d3234203d3e20323635343130.roa (raw, json)
Hash identifier:          BO9+pbUOSpZXvMuzFuXfsqJRVADNeoJ7iHGQPRLQAqI=
Subject key identifier:   A3:A1:08:01:46:86:D3:98:61:A5:D0:E6:8C:59:4B:29:12:B8:9D:AA
Certificate issuer:       /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial:       6DF01E97A5DD0AC3A9F1FECADA24016C6799B01B
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e322e302f32332d3234203d3e20323635343130.roa
Signing time:             Thu 05 Feb 2026 16:46:25 +0000
ROA not before:           Thu 05 Feb 2026 16:41:25 +0000
ROA not after:            Thu 04 Feb 2027 16:46:25 +0000
asID:                     265410
IP address blocks:        168.195.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
                          rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:1e:97:a5:dd:0a:c3:a9:f1:fe:ca:da:24:01:6c:67:99:b0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
        Validity
            Not Before: Feb  5 16:41:25 2026 GMT
            Not After : Feb  4 16:46:25 2027 GMT
        Subject: CN=A3A108014686D39861A5D0E68C594B2912B89DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:19:74:7c:b8:43:02:ff:12:ff:f6:55:bb:
                    51:ab:38:8a:91:67:27:ac:66:9a:a6:10:37:a5:e8:
                    72:d3:b4:dd:6c:8f:8a:02:12:e0:99:db:a6:8e:84:
                    00:6d:cf:75:be:09:e0:19:6a:b9:de:f0:89:c5:1d:
                    80:3f:ac:f9:0a:d1:e5:11:2d:f5:16:b7:6a:a2:4e:
                    54:63:ed:43:6f:38:22:59:2c:51:57:67:50:dc:19:
                    00:16:d4:f0:0d:0e:cf:dc:1a:2a:99:5d:5c:db:d1:
                    a9:8f:8e:44:13:ee:d8:a2:15:7d:2b:3e:21:70:2c:
                    0b:7b:a9:50:05:6c:83:9a:5d:a5:37:ec:9b:c9:c7:
                    7e:5a:9a:12:43:24:1c:45:fb:e8:d0:c0:11:85:ef:
                    4f:42:10:50:b8:9f:98:79:df:e1:a6:c5:1c:1f:36:
                    67:ab:6d:67:74:ae:f2:e6:bc:87:3c:98:cf:9f:e2:
                    94:ec:cd:e1:79:26:0e:bd:63:9c:74:16:70:58:81:
                    bd:ba:a8:61:3f:85:45:31:38:c1:7c:91:51:fe:40:
                    e8:02:b9:3f:30:cc:9b:29:8c:22:ea:a1:a4:74:05:
                    83:78:ca:64:94:18:b3:74:18:64:eb:0f:b4:45:67:
                    bb:3c:75:39:89:a4:40:3c:cf:a6:c3:d3:b1:74:22:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:08:01:46:86:D3:98:61:A5:D0:E6:8C:59:4B:29:12:B8:9D:AA
            X509v3 Authority Key Identifier:
                keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/3136382e3139352e322e302f32332d3234203d3e20323635343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:49:0b:25:e9:7f:7f:2d:c1:a3:35:68:ef:77:24:2e:52:44:
         30:c3:e2:68:70:9d:f7:03:07:29:b7:f3:27:2a:7e:e8:ad:5d:
         26:33:59:9f:3e:14:12:16:88:00:dd:30:cf:7e:81:b6:24:9d:
         5f:8b:f6:2d:55:eb:83:40:93:bd:e9:53:b6:ec:a2:48:4c:a4:
         57:f1:94:71:11:bf:d1:24:d0:52:05:0d:86:5c:e9:bd:bc:3c:
         20:97:96:ca:55:69:1c:19:c0:c0:18:01:8a:bc:63:cf:b9:c8:
         72:d6:1c:bd:3a:67:f5:9e:6b:f7:2a:f8:e3:78:1f:0e:61:0b:
         76:09:90:87:a7:7b:c8:4b:5a:c9:d5:05:61:1e:f9:e9:54:8d:
         f1:d4:98:5d:9b:f1:0f:b3:a7:50:07:0c:5c:11:70:d7:67:97:
         77:f8:7f:44:e4:07:45:33:39:7c:eb:c3:23:3a:27:0c:b1:04:
         17:77:b7:62:80:6e:6d:df:5b:69:ab:ad:dd:25:93:44:0e:d1:
         e3:25:1e:40:3a:b1:82:62:2b:32:12:01:0c:1f:66:cb:5d:e5:
         4d:cc:36:c0:76:b9:93:1a:da:82:2a:99:52:e1:7b:ca:10:75:
         66:9e:2a:60:fe:a5:a4:a6:0e:77:67:0e:3a:1a:4d:7d:82:0c:
         82:e0:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:19 2026 by rpki-client