Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa
File:                     3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa (raw, json)
Hash identifier:          +A3hPO1vEqmAQBLFaUVedV+qesyZdchHYQYzHxOy/UM=
Subject key identifier:   44:A1:38:C7:84:32:6B:DD:89:D6:C4:88:6D:71:FF:AE:19:D9:9F:D7
Certificate issuer:       /CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
Certificate serial:       486682324DC75DDB804358A0B41BF0650E2BFC55
Authority key identifier: 4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     266210
IP address blocks:        160.238.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl
                          rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:66:82:32:4d:c7:5d:db:80:43:58:a0:b4:1b:f0:65:0e:2b:fc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:ee:16:a9:6e:8b:1e:2d:3f:21:b5:1d:94:
                    2a:5b:58:5b:37:1f:f5:5e:5a:74:0c:6a:49:c8:b7:
                    34:26:3c:ce:f2:da:25:90:18:3b:75:eb:2c:ad:82:
                    14:8e:a0:c6:db:0d:cc:5d:e0:c6:4d:63:8b:01:5b:
                    1d:77:9d:92:82:37:4a:5c:04:b0:ea:38:ff:c4:43:
                    16:27:c1:d0:8d:97:54:68:58:ed:c8:27:18:a9:60:
                    fd:06:26:ab:b4:48:be:f1:c4:d0:06:a6:6b:98:02:
                    32:e7:08:f5:de:d4:4a:b1:64:be:99:b7:d4:dd:f8:
                    d7:52:c2:b8:f4:44:66:49:f2:0a:9c:d9:7c:0a:53:
                    4f:04:23:09:9f:33:92:2f:4c:56:c7:15:91:cb:f8:
                    91:8c:c7:22:88:20:62:b3:3b:0d:ba:0b:0f:40:32:
                    65:ab:b7:81:f1:ad:e0:8b:42:b6:db:a6:91:8a:e4:
                    5d:35:b6:27:3c:4d:57:f3:79:b0:12:90:96:d6:41:
                    32:f7:7d:48:5b:9a:7b:da:2b:ff:81:1b:cd:83:08:
                    c5:53:4a:61:58:4c:ff:8b:db:1d:33:5e:4c:59:89:
                    a9:b4:72:2b:a2:bc:87:f1:7d:8a:86:ad:49:12:1b:
                    25:f9:b9:87:d4:57:ce:75:20:12:01:03:47:51:30:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:38:C7:84:32:6B:DD:89:D6:C4:88:6D:71:FF:AE:19:D9:9F:D7
            X509v3 Authority Key Identifier:
                keyid:4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:82:bc:10:fe:64:f1:d0:e8:a8:53:4a:96:a3:b4:64:ef:
         7e:7d:37:9f:98:09:44:a6:77:74:01:d5:46:33:88:65:77:69:
         f8:f8:bd:9d:1e:31:5e:66:ec:36:dc:98:aa:0d:d9:e2:cf:45:
         5d:e3:51:04:53:32:d2:75:3e:2c:dc:28:c4:2d:1a:5c:1b:20:
         54:48:29:18:17:f5:08:b3:99:bf:8b:80:8e:f6:2b:f3:cb:b9:
         a2:35:a1:58:9d:bf:ce:8e:42:d3:dc:73:46:53:60:d1:5c:3c:
         27:da:4b:7b:c9:96:20:36:16:ed:65:ba:53:ca:5f:02:ad:ea:
         f3:13:1b:f5:4e:7a:34:bf:36:dc:98:50:54:b3:fe:f6:82:41:
         58:58:d1:6b:50:db:d1:db:dc:e0:fb:44:c5:0d:9c:f1:a8:dd:
         7a:0d:8e:13:3d:5b:f3:b6:72:4b:ee:35:51:38:b1:c6:65:23:
         2a:c3:9e:cd:23:3d:16:8c:24:7f:c9:66:f6:3e:69:5a:17:3a:
         74:c3:ae:d6:1d:c3:b9:80:2b:67:3f:9d:8e:77:1e:5a:b3:95:
         1b:a4:4b:d1:2f:f6:52:4d:9e:86:48:6f:b4:57:7c:86:3c:e3:
         75:1c:8b:53:b7:a9:c6:4d:92:8f:2a:b4:08:d7:d5:6c:c5:12:
         47:96:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:26:33 2026 by rpki-client