Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa
File:                     3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          4/kgNAyYedFRPnGn88vu/zWqUqSISjPyIQmChDU0Bak=
Subject key identifier:   96:8E:3E:43:6E:08:2F:92:51:8F:17:54:7D:FC:B7:88:CD:7D:30:81
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       5ED24EC80015C0A7D6DB63DBE695B42A14C39EDC
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa
Signing time:             Thu 05 Feb 2026 09:43:53 +0000
ROA not before:           Thu 05 Feb 2026 09:38:53 +0000
ROA not after:            Thu 04 Feb 2027 09:43:53 +0000
asID:                     264589
IP address blocks:        143.202.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:4e:c8:00:15:c0:a7:d6:db:63:db:e6:95:b4:2a:14:c3:9e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Feb  5 09:38:53 2026 GMT
            Not After : Feb  4 09:43:53 2027 GMT
        Subject: CN=968E3E436E082F92518F17547DFCB788CD7D3081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:a4:70:4c:04:98:cd:11:3a:73:25:15:8e:
                    5c:50:1f:2c:30:7c:36:13:71:11:5d:1d:8c:99:93:
                    96:ac:ca:72:94:f2:d5:a8:62:78:64:df:d5:16:04:
                    68:e4:cf:ca:8b:7d:31:3b:8a:ce:5a:cd:88:da:41:
                    a1:5c:84:fc:7b:50:fc:c1:ad:65:59:cd:48:c4:f9:
                    e3:60:f4:63:47:e5:6c:c4:5f:2c:0c:c3:b1:a2:53:
                    24:cb:63:8e:f4:ce:ab:bf:48:e5:28:98:0a:2e:21:
                    2a:b3:05:5c:28:8a:e5:67:33:04:9f:3e:5b:0a:0a:
                    23:22:c3:27:9b:3e:7c:40:62:ec:96:fa:66:75:ab:
                    74:6a:be:6a:73:db:b2:7a:8d:e0:38:25:21:b4:a3:
                    e2:30:0a:47:c6:ed:bc:1e:ba:64:f8:86:c1:a6:e7:
                    b1:73:f5:95:23:0e:6b:68:64:6d:5b:86:4e:14:f5:
                    24:78:26:64:60:84:a2:a9:c7:df:84:68:a2:6b:47:
                    84:6b:4b:ab:8f:da:37:65:34:bb:15:49:47:b8:92:
                    59:73:4a:79:4c:2a:1c:17:2b:6a:c6:30:30:79:71:
                    d5:ec:8a:b4:c5:7c:83:78:41:37:40:82:f4:38:35:
                    0e:a9:ef:33:c8:fc:35:57:02:b7:65:97:c7:19:0f:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:3E:43:6E:08:2F:92:51:8F:17:54:7D:FC:B7:88:CD:7D:30:81
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3233302e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:40:89:f6:9c:f9:d3:e0:94:93:0f:66:6b:77:40:7e:c6:b3:
         97:ca:a1:ed:ed:4a:2f:8b:e4:ba:0a:d7:8a:a6:8b:1f:80:0a:
         54:e7:06:01:eb:7c:87:60:f7:c1:fc:24:ae:4f:62:3f:85:19:
         af:e9:cb:15:84:69:a9:57:16:11:d9:56:ce:70:91:0d:04:cd:
         20:37:79:54:63:db:c1:54:99:5e:d7:a7:c3:85:88:13:c9:0d:
         2e:d6:41:72:31:0f:4b:44:96:4a:b1:cf:78:57:08:0c:2e:39:
         9d:7e:12:18:4b:61:ac:df:0b:c8:fc:0c:6b:91:6e:77:2f:92:
         92:53:39:36:bb:76:1f:df:94:75:ce:cd:e8:b8:79:dc:f1:16:
         bd:de:d4:21:d8:15:4d:55:e1:6e:99:36:b9:6a:48:30:d6:86:
         e1:15:2e:30:0a:f3:0d:2a:56:4e:b3:36:d3:de:e6:fc:c4:bb:
         24:96:70:64:d6:57:5f:dc:e0:72:a7:7a:dc:aa:8c:7a:b0:56:
         ac:81:d1:91:c5:98:d3:fa:a1:33:21:7b:f3:92:c6:94:82:ff:
         4b:ff:f9:d1:8c:52:e6:23:f1:ea:98:48:5e:cb:c3:d8:bc:8e:
         da:27:43:b4:44:64:62:ba:c0:4c:82:42:cb:07:2d:e5:80:26:
         3d:5d:b8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:20 2026 by rpki-client