Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa
File:                     3139322e3134302e382e302f32322d3234203d3e20323636313534.roa (raw, json)
Hash identifier:          ORbVx+nh4f+oaSG+F+ejDNYKTa5ZupSXQajfOzftgs0=
Subject key identifier:   5E:4D:D2:DC:05:4D:E3:C2:C0:87:9F:2E:50:6D:F8:5C:00:7D:7A:B8
Certificate issuer:       /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
Certificate serial:       0AB055A3DF695508B071554738D000CF2FA6138A
Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa
Signing time:             Wed 04 Feb 2026 20:46:08 +0000
ROA not before:           Wed 04 Feb 2026 20:41:08 +0000
ROA not after:            Wed 03 Feb 2027 20:46:08 +0000
asID:                     266154
IP address blocks:        192.140.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b0:55:a3:df:69:55:08:b0:71:55:47:38:d0:00:cf:2f:a6:13:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
        Validity
            Not Before: Feb  4 20:41:08 2026 GMT
            Not After : Feb  3 20:46:08 2027 GMT
        Subject: CN=5E4DD2DC054DE3C2C0879F2E506DF85C007D7AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:ce:57:7e:78:9a:fb:b2:e6:70:fb:75:72:
                    66:78:cb:d3:97:98:66:e3:91:9f:ec:d0:db:ba:4a:
                    19:e5:af:54:18:7d:98:1d:9e:3a:6e:c6:bc:d2:dd:
                    3a:c7:16:46:9a:80:a3:01:24:6e:cc:80:0f:53:6b:
                    cb:53:4f:f3:08:61:04:b4:31:e8:43:29:cc:81:84:
                    a6:c1:1d:2b:4d:05:18:81:85:0e:a1:0d:b7:4b:7b:
                    6e:8b:89:ee:bc:a1:02:1a:19:df:53:b6:09:6d:a2:
                    6d:b5:83:e1:c1:cb:4e:c0:1a:f8:9f:96:b5:d1:85:
                    72:20:85:ec:b7:d5:75:b6:33:9f:83:63:d8:b2:92:
                    8f:ff:ae:4a:20:d4:8e:b7:23:46:f0:a4:a7:27:a1:
                    f5:69:69:3a:18:6d:06:7f:06:e9:18:71:e5:8a:23:
                    07:b7:37:81:4d:e2:78:7e:1b:bc:8f:df:92:e2:6b:
                    c4:fa:1d:26:d0:6a:4c:56:d3:cd:7f:9b:17:86:4b:
                    c9:f9:82:a9:71:30:db:cb:ee:4a:ef:4f:5c:db:c3:
                    f7:a8:e4:a1:80:6b:7a:5f:29:9d:e9:83:c3:17:4e:
                    16:f2:e5:ac:60:ef:a7:7b:c3:17:62:cb:49:9e:62:
                    d5:7d:ad:16:f7:b3:2d:9a:70:e1:b9:a7:f1:6a:fd:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4D:D2:DC:05:4D:E3:C2:C0:87:9F:2E:50:6D:F8:5C:00:7D:7A:B8
            X509v3 Authority Key Identifier:
                keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/3139322e3134302e382e302f32322d3234203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:0c:a1:88:df:c5:d9:51:12:09:2f:84:30:76:a7:ea:5d:c3:
         58:39:c9:32:8e:af:69:29:9c:c3:cf:b9:a8:e5:b7:2a:09:1b:
         e9:86:45:0f:ad:ef:d7:04:f1:c8:93:a6:80:26:e7:a5:3a:c2:
         9c:1d:6a:6a:7d:e3:27:ea:ff:76:c2:33:a3:12:15:e4:5d:f2:
         ff:01:5a:1f:39:18:20:8c:84:55:44:e7:1d:15:41:e0:a9:96:
         92:98:2b:c6:4b:48:96:ee:74:f1:25:f2:67:f1:e7:63:e1:12:
         7a:97:50:05:17:18:f6:45:e6:d2:13:65:78:e2:d3:e1:ac:41:
         7b:80:88:e3:31:d4:ab:b9:b4:69:55:3b:fc:f3:b3:d7:42:fa:
         11:42:87:d7:ed:af:d8:d8:98:fe:65:ab:a0:86:63:33:a6:62:
         95:29:05:39:f8:f7:f5:4c:fe:b7:46:e5:b8:a8:c8:41:18:d4:
         d3:39:34:d4:85:3c:39:6b:d7:42:9e:ea:57:99:e2:97:5e:bc:
         cf:43:f1:51:b0:8a:38:10:f9:45:8f:6b:f1:11:21:b9:50:ba:
         72:cf:b6:a1:db:60:fb:5f:6c:c2:8e:1c:61:fd:34:4b:b5:90:
         1c:2c:33:ff:4f:02:2d:df:f6:c2:d0:37:88:96:5d:23:99:73:
         2e:2b:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:56 2026 by rpki-client