Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
File:                     3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa (raw, json)
Hash identifier:          gZpqsdH9qwdByoVHf07v44l38ZQ81dP8Gj/yTr/9fJE=
Subject key identifier:   25:E2:CE:DD:8D:54:23:26:7C:B4:84:2C:98:EE:B7:15:56:D2:EF:F7
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       3F3BD51B235554DF26DCF438C6A124359A2EF40C
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa
Signing time:             Thu 05 Feb 2026 15:10:27 +0000
ROA not before:           Thu 05 Feb 2026 15:05:27 +0000
ROA not after:            Thu 04 Feb 2027 15:10:27 +0000
asID:                     263563
IP address blocks:        168.232.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 20:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3b:d5:1b:23:55:54:df:26:dc:f4:38:c6:a1:24:35:9a:2e:f4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Feb  5 15:05:27 2026 GMT
            Not After : Feb  4 15:10:27 2027 GMT
        Subject: CN=25E2CEDD8D5423267CB4842C98EEB71556D2EFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:97:ac:9d:61:ec:42:02:1d:33:17:50:84:
                    8c:5b:bc:7c:7e:49:57:e9:2e:bc:03:05:f2:57:3d:
                    09:c6:5c:c3:cc:e8:99:d6:12:88:c2:c4:82:12:df:
                    98:9a:ed:2e:dc:02:d8:ed:16:01:30:21:94:09:2d:
                    c7:41:72:26:ca:8c:b9:e3:c3:80:94:10:23:9e:22:
                    3a:ad:87:2e:65:f7:de:30:2e:5a:23:41:b2:d4:00:
                    48:80:23:71:8e:b2:92:39:6a:ee:d4:f3:1d:dc:ea:
                    47:35:c2:be:85:8e:b9:db:0e:fe:7e:f4:83:89:83:
                    fb:34:e4:46:ea:1f:a9:b3:6a:2c:07:4f:fa:fb:4f:
                    d0:df:0e:bb:4c:05:62:ab:c8:62:e5:fd:de:5c:91:
                    78:29:a2:f0:31:48:17:0a:61:98:2f:14:49:35:e0:
                    1d:85:13:5f:e9:32:89:27:ba:9f:22:87:33:0c:87:
                    92:30:20:e9:1d:ee:c9:de:e2:b1:44:fc:9e:ae:ad:
                    f1:ba:29:60:52:ec:2f:28:1d:7f:12:04:1e:64:84:
                    00:30:8c:00:5a:7e:76:cb:ab:e4:f5:ae:0a:74:47:
                    fb:b2:4b:19:16:bf:43:f8:4a:e6:ea:4c:88:1f:bb:
                    e9:f6:c1:38:37:ef:d6:3e:a7:71:64:6a:b5:f4:05:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:CE:DD:8D:54:23:26:7C:B4:84:2C:98:EE:B7:15:56:D2:EF:F7
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138302e302f32322d3232203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:90:0a:74:da:d2:26:5d:b1:a1:fa:09:70:5c:c3:06:8d:db:
         b6:f1:bb:08:1b:fd:df:6a:7b:e0:2e:51:35:bc:8c:ea:28:1f:
         1d:4a:f9:e2:41:cd:0f:84:dd:15:f9:44:a4:cf:9e:ac:e8:20:
         d7:81:17:5f:61:ee:3b:d9:52:63:ed:52:06:d3:9b:80:fa:5f:
         c8:4d:f7:09:0c:87:05:f2:f7:38:a4:fa:42:ba:a3:2c:b8:6a:
         26:87:23:59:9d:ee:29:57:70:92:b0:74:e5:f3:03:f4:18:33:
         24:2a:ed:49:d1:bf:b3:24:bc:43:fd:0c:14:c5:75:c5:cf:6e:
         0e:52:e1:a0:1f:26:2a:ce:17:a5:8b:0b:18:fb:a4:74:c2:19:
         ed:47:24:ee:5e:df:86:ed:5d:81:90:42:38:98:e4:ac:10:5c:
         ab:ad:9b:b5:ee:39:2b:a4:23:52:30:7c:6e:d2:a7:cb:74:d9:
         4a:4e:33:a9:2f:cc:b8:6d:b6:fd:b8:37:9d:7d:41:25:b0:08:
         e2:50:4f:3d:3d:40:1b:99:10:3c:fd:aa:58:4b:0d:09:17:14:
         b0:98:a1:ba:a9:e2:77:bb:ae:c2:81:fa:c1:94:ff:d0:9f:30:
         c7:d2:a5:2f:e3:b5:db:78:ef:d8:c3:77:29:8c:d1:af:bb:ae:
         61:bf:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:19:26 2026 by rpki-client