Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
File:                     3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (raw, json)
Hash identifier:          e4E3vMJmvzuFUBj3Gl3MPDMXsuyK/NWYw9KKWpE7NIU=
Subject key identifier:   9E:53:A1:89:F6:A7:57:1D:40:3F:75:95:81:D2:5F:C9:0E:5D:73:8C
Certificate issuer:       /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial:       51DA0F8B14CF9692175743E89A029F487BA39A42
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa
Signing time:             Sat 07 Feb 2026 23:14:58 +0000
ROA not before:           Sat 07 Feb 2026 23:09:58 +0000
ROA not after:            Sat 06 Feb 2027 23:14:58 +0000
asID:                     263919
IP address blocks:        170.0.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
                          rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:da:0f:8b:14:cf:96:92:17:57:43:e8:9a:02:9f:48:7b:a3:9a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
        Validity
            Not Before: Feb  7 23:09:58 2026 GMT
            Not After : Feb  6 23:14:58 2027 GMT
        Subject: CN=9E53A189F6A7571D403F759581D25FC90E5D738C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:0d:d3:f0:af:1e:e9:84:cb:3b:66:73:5e:
                    50:88:10:e0:f8:7a:d1:ff:28:ce:d0:24:d5:c1:62:
                    66:a8:b0:04:71:d1:44:49:e5:d1:dc:83:29:0c:01:
                    66:c2:66:19:a2:98:2f:e1:fa:25:68:6e:94:36:6a:
                    bf:41:3a:4a:1d:9b:50:5f:20:52:c9:b1:b7:6f:27:
                    37:35:38:20:ff:b4:e9:28:d7:b5:f7:2f:77:20:7e:
                    c6:5c:cb:68:7e:f7:a4:44:10:be:64:c9:6e:75:8e:
                    e8:d5:01:dc:ef:e9:65:27:4a:ce:b7:f7:89:24:1a:
                    84:74:66:06:59:b6:85:dd:34:7d:47:c7:39:c2:3f:
                    16:fa:12:4d:bb:0a:32:96:09:5a:90:3a:c8:0d:15:
                    84:1d:5b:3b:d3:94:f5:80:b3:2a:54:18:2a:40:f8:
                    89:cc:10:1f:c2:d8:37:62:8a:18:97:c1:d2:56:32:
                    b8:c8:b4:ee:17:cf:29:73:27:6e:14:b2:5d:cd:c0:
                    f0:e7:9e:a9:f6:87:a7:9e:91:85:c7:c6:fd:89:ff:
                    ab:79:23:be:aa:ae:35:9f:cb:13:ec:47:14:5c:28:
                    c3:60:cf:7d:18:85:48:71:97:a6:77:87:0b:11:a6:
                    c4:8c:2c:18:8b:cf:6a:67:5a:62:0b:d9:a2:a6:c2:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:A1:89:F6:A7:57:1D:40:3F:75:95:81:D2:5F:C9:0E:5D:73:8C
            X509v3 Authority Key Identifier:
                keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/3137302e302e3230382e302f32322d3234203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:4c:56:c7:a7:0c:2d:ea:cd:8a:2f:14:4e:33:f4:f6:f3:b6:
         31:ec:18:5e:e5:5a:a5:75:a4:a2:6a:8a:cc:ab:e7:2a:cd:77:
         13:06:8a:88:13:e4:97:ed:e8:b4:a8:ac:e1:f2:6a:de:fa:e0:
         9a:b3:36:cd:6a:3d:3a:68:db:be:3f:bd:fe:c4:a2:60:43:39:
         7d:63:dd:93:1e:f9:36:db:a2:af:37:2a:76:58:59:f6:72:c8:
         63:3a:bc:9b:da:9f:18:3b:0d:95:85:07:e6:b6:1a:84:e7:b3:
         c2:a5:c4:e3:c3:35:e6:c2:a1:44:d8:af:c0:f6:40:7c:0f:48:
         6d:24:3d:8d:d9:7e:9f:13:c8:a3:30:c7:b5:fe:01:85:1f:0a:
         1f:8f:47:e6:5c:75:8c:c5:bd:72:d5:aa:93:61:c6:7f:35:1d:
         38:8e:9c:51:a8:07:bd:94:83:a2:01:ef:01:9d:93:39:39:5c:
         02:4d:97:a8:79:23:a9:ec:c0:b9:58:dd:e5:f0:3f:02:e9:f4:
         49:f6:a2:01:0a:bb:17:4f:3a:ef:98:e7:c8:4a:ac:82:08:91:
         9c:3a:ae:79:36:8d:0c:76:a7:04:bf:31:90:63:a7:48:2b:46:
         10:c7:6e:d9:9b:5c:e8:4d:4b:1c:c4:b6:21:de:46:ad:61:bb:
         c3:17:3f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:27 2026 by rpki-client