Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          0zr4HOWglDBMRBEvjEimG8Y3xElJAQKy0sYxjOEmiO4=
Subject key identifier:   CF:0F:FF:9C:23:F8:B4:8D:29:5D:96:89:E3:9B:23:96:03:16:6C:82
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       4082BB83B6D5CEB240ED29F9514B001AAA9C319B
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     265425
IP address blocks:        168.195.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:82:bb:83:b6:d5:ce:b2:40:ed:29:f9:51:4b:00:1a:aa:9c:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=CF0FFF9C23F8B48D295D9689E39B239603166C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:bd:db:80:60:51:e1:63:e1:83:fa:d3:8b:
                    be:09:c0:a7:b3:91:2a:a1:fc:4b:b2:d4:98:f6:ea:
                    77:0b:69:5d:42:05:3f:2d:85:1c:3e:63:bc:bb:15:
                    9a:c2:56:a7:63:44:1e:b4:45:86:7b:5e:11:e6:44:
                    ab:5b:83:a3:81:34:88:2f:14:ec:6f:8f:09:9a:54:
                    f5:a4:26:07:11:1d:73:1c:89:89:a3:b3:36:21:fc:
                    d8:a8:6c:e6:f7:3c:16:8f:b0:df:29:d5:fc:15:f1:
                    c7:25:72:22:38:38:64:86:c4:54:2a:94:58:9b:83:
                    e3:e5:84:47:1a:e9:12:b8:8c:de:34:0d:e5:d7:81:
                    f8:84:3f:21:cf:03:62:09:b2:c1:0e:47:f8:b3:e8:
                    8d:ff:8d:14:04:1f:84:83:a5:1f:25:28:9b:fe:e3:
                    02:82:cf:6f:a7:06:53:2c:4b:0b:29:9d:c2:4a:0f:
                    f8:38:74:cc:c8:af:61:67:d0:ef:3b:fc:e3:78:74:
                    ed:ae:4b:f2:01:07:c4:78:d3:9b:f5:c3:30:3f:1c:
                    9f:dc:ec:f3:ec:0f:e4:74:6a:f6:58:35:5c:9c:e0:
                    9f:bf:65:62:41:69:8a:4d:f3:b1:d6:6d:b6:16:e2:
                    ce:61:fc:70:db:56:0b:1d:fa:42:a3:24:01:bc:5f:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:FF:9C:23:F8:B4:8D:29:5D:96:89:E3:9B:23:96:03:16:6C:82
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32382e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:0b:01:be:5f:13:e1:03:12:67:67:d8:2d:6c:d3:ac:3e:
         c4:07:09:39:4e:19:aa:42:e0:89:fb:44:38:b1:3f:bf:8a:df:
         4f:a8:af:31:2c:28:2a:ab:b2:87:ae:62:48:f6:ad:7b:a8:24:
         ef:e6:7f:fc:6a:06:e6:d3:44:83:9c:95:9c:20:34:af:72:3b:
         29:3a:2b:84:2d:46:63:d4:a2:bd:ba:49:5e:61:80:d4:82:64:
         dd:9d:3d:b4:07:6f:bf:af:59:50:fc:b6:7d:df:94:ff:84:8e:
         f4:5c:55:40:42:9e:16:ec:1d:75:8e:7e:c7:7e:3d:fc:05:07:
         99:cf:c5:ca:b2:ed:eb:6d:fc:8a:25:1a:b8:bb:1d:09:c5:22:
         c2:0c:c7:31:63:d7:ad:20:34:80:41:c4:90:cc:98:61:59:b7:
         a7:9c:e8:f3:16:d6:b5:43:67:99:fe:91:3b:68:be:25:88:b0:
         18:9e:90:3c:74:52:42:9e:7a:3f:e1:cc:e8:54:2c:dc:af:b1:
         3c:c4:06:1d:28:d0:44:72:71:de:cc:0e:10:66:12:bf:c6:a7:
         ef:bc:72:ca:8a:5a:8d:a0:20:1b:24:5a:94:df:1c:9c:d2:89:
         cd:a5:2b:e4:1a:54:3f:9a:2a:ed:1f:41:cc:30:57:f8:86:53:
         b5:26:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:59 2026 by rpki-client