Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/3138362e3233352e3132382e302f32342d3234203d3e203533323032.roa
File:                     3138362e3233352e3132382e302f32342d3234203d3e203533323032.roa (raw, json)
Hash identifier:          1mPfQX99fsfphn8WBqCzX+BIIK50ftjVLIO6KErtsaI=
Subject key identifier:   75:71:37:89:8A:43:C5:A6:E3:D2:AA:1A:0A:83:0B:41:47:05:C2:EA
Certificate issuer:       /CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA
Certificate serial:       40838CAD01A12BF02C9E6F1C59275DA6C81E0D7E
Authority key identifier: FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/3138362e3233352e3132382e302f32342d3234203d3e203533323032.roa
Signing time:             Thu 05 Feb 2026 10:19:19 +0000
ROA not before:           Thu 05 Feb 2026 10:14:19 +0000
ROA not after:            Thu 04 Feb 2027 10:19:19 +0000
asID:                     53202
IP address blocks:        186.235.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl
                          rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:83:8c:ad:01:a1:2b:f0:2c:9e:6f:1c:59:27:5d:a6:c8:1e:0d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA
        Validity
            Not Before: Feb  5 10:14:19 2026 GMT
            Not After : Feb  4 10:19:19 2027 GMT
        Subject: CN=757137898A43C5A6E3D2AA1A0A830B414705C2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:76:1f:16:73:e6:2d:49:d3:2e:fc:7d:20:
                    f7:38:c7:77:9c:de:3e:76:ab:bb:75:6d:ce:0f:01:
                    6e:98:6c:cc:8a:99:f7:6b:24:4f:e6:e9:b2:ae:46:
                    c7:10:c2:16:cf:4a:3b:bc:d5:ba:4a:d2:80:29:63:
                    12:8e:f6:04:6e:02:0f:1e:0e:c1:24:91:a6:97:85:
                    01:2b:66:13:6c:ed:71:7e:2f:8a:a2:c0:18:4a:0f:
                    2e:30:65:74:e0:c8:66:39:a7:0d:03:48:07:88:aa:
                    78:30:4c:83:7e:07:1e:db:a8:de:ff:a2:27:00:b0:
                    2c:89:8e:08:34:2d:bf:d8:ba:96:99:55:39:7c:84:
                    5c:da:23:09:3c:ff:92:84:d5:8d:07:56:bc:d7:53:
                    c4:4e:8b:ac:fa:1c:43:67:28:47:af:d2:ec:9c:c8:
                    ab:77:9e:3f:d7:b2:8f:8d:ce:94:ef:2a:7e:d6:21:
                    fa:b1:ab:0a:7a:70:ad:88:01:b5:93:bc:76:37:8d:
                    28:2b:44:d7:75:12:7d:84:4a:79:a4:ea:1c:f4:a5:
                    6d:2f:79:32:19:fb:0b:91:8d:e4:97:1a:3e:e9:e0:
                    52:98:e8:09:4c:c4:69:a4:d4:45:fc:43:5e:57:54:
                    3d:25:ce:77:44:93:bf:70:db:a3:92:c5:b6:1f:53:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:71:37:89:8A:43:C5:A6:E3:D2:AA:1A:0A:83:0B:41:47:05:C2:EA
            X509v3 Authority Key Identifier:
                keyid:FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/3138362e3233352e3132382e302f32342d3234203d3e203533323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c5:59:e2:50:78:e6:57:20:2d:99:d9:1c:1b:26:8b:61:a3:
         17:92:04:01:41:73:ea:47:20:11:fc:ed:cf:01:6f:f0:cc:9b:
         5f:87:80:7e:89:6e:2a:0f:4f:a4:7d:84:85:5a:15:9c:91:74:
         3d:68:06:c3:0d:3b:5c:2b:61:87:0d:21:0a:e9:d6:41:fb:5c:
         d9:38:90:dc:46:f9:a9:ec:67:e4:54:d4:32:cf:94:0d:02:ed:
         8a:4a:df:32:1a:f1:c9:7d:97:55:c4:44:ff:50:c6:04:5c:34:
         47:18:7c:dc:3d:d5:29:49:9d:11:1e:49:0c:3d:87:34:00:66:
         fc:c1:26:b3:2c:38:2e:91:96:05:26:fc:3d:f8:3e:6e:dc:50:
         b9:04:e9:49:6c:c0:1d:42:8c:28:f2:52:25:8c:a0:cb:40:9e:
         a7:cd:5b:b9:25:6d:52:1e:30:59:bc:2d:9f:96:fa:f4:80:a7:
         46:33:db:bc:be:13:54:32:1f:f2:49:ca:85:e7:44:34:9f:3d:
         9a:54:37:0b:6d:a1:59:8c:39:f3:80:ee:e1:58:3f:61:02:cb:
         f0:ec:73:0f:c0:00:94:4a:00:63:95:f9:99:c9:56:22:36:44:
         97:c0:5b:9b:aa:bc:67:ba:f3:5f:e2:b1:56:c0:ea:ef:7e:56:
         25:5f:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:34 2026 by rpki-client