Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          UOQrhpiQuITGJrdHytgCUvS7V7IkjA/MO9R1MjW9ih4=
Subject key identifier:   C8:56:C3:B1:55:8E:EB:E6:69:4D:EF:01:74:44:B9:E7:78:30:DC:FE
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       6A8C0CB4E3EFD103384706B2913A3FF2638DD970
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     265425
IP address blocks:        168.195.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8c:0c:b4:e3:ef:d1:03:38:47:06:b2:91:3a:3f:f2:63:8d:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=C856C3B1558EEBE6694DEF017444B9E77830DCFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:33:98:9c:0e:d0:50:33:51:f0:11:5e:04:
                    d7:2c:64:57:21:8c:30:60:62:6c:92:7c:ff:9b:87:
                    a9:cf:c2:99:e4:83:45:9a:f6:08:e6:31:68:5b:37:
                    92:78:db:38:36:3c:01:89:c6:f6:33:5c:fc:1b:fe:
                    8f:de:43:a3:b5:5c:98:67:ed:18:f4:c1:07:de:9f:
                    06:38:b9:a6:0c:3b:31:72:c7:27:f4:ec:3e:df:18:
                    68:e6:c5:7f:ed:8e:61:f6:85:c2:4c:64:54:e2:fc:
                    25:8c:56:78:a8:4f:cf:51:e8:36:b9:d6:70:c5:29:
                    f3:2e:e7:0e:91:91:78:4c:57:c7:a7:a5:53:bf:ba:
                    da:21:72:91:2b:62:13:82:a4:5a:b1:12:b3:4b:28:
                    74:b3:d6:05:93:00:82:a4:52:7f:cc:30:61:b2:90:
                    dd:ad:0c:42:48:47:bf:1b:7d:e4:29:d0:06:e9:bd:
                    8d:ed:85:d2:51:ce:a7:0a:2a:25:37:bb:27:41:02:
                    0e:3e:7d:31:b1:71:11:a2:a4:de:f0:f0:86:33:1b:
                    a2:83:9c:a9:ed:66:c8:1b:c9:e0:95:59:8f:da:75:
                    47:a7:66:e8:cd:81:94:65:cf:38:7d:02:d0:d1:43:
                    76:4d:b8:44:ac:11:2c:db:d1:72:b6:4c:23:a3:bc:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:C3:B1:55:8E:EB:E6:69:4D:EF:01:74:44:B9:E7:78:30:DC:FE
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e32392e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:44:49:56:64:5d:2b:b4:73:4f:06:fc:db:d7:37:28:ee:1a:
         12:e8:e0:d8:bb:a7:ce:8d:dc:3a:eb:83:a9:26:fd:ba:df:a9:
         16:2d:5c:ab:e6:85:1d:2d:02:e5:2d:a2:1d:47:70:62:37:49:
         5e:94:ed:94:a6:fb:7c:50:38:f6:b6:80:0a:5f:f5:d8:2e:fc:
         2a:e0:0d:ef:1c:5b:40:a7:cf:f6:5e:42:fe:7a:88:4b:a8:b9:
         43:1a:c9:38:95:49:5f:cc:37:f0:b9:09:a6:4f:86:47:72:42:
         d5:85:2e:6c:68:c2:39:da:f8:25:a2:8b:bf:b3:04:ec:9a:48:
         15:96:9b:38:8f:9a:70:9b:2b:86:f3:f4:95:69:2a:8e:78:ae:
         93:88:f7:c2:81:dd:1e:04:a7:76:c3:f9:07:83:10:45:9e:0f:
         08:bf:a2:63:a5:1a:bb:6a:99:90:da:53:02:95:e6:68:aa:a6:
         65:e7:cb:bd:73:8a:72:d5:8f:96:d1:74:45:1f:e8:da:46:e0:
         7e:56:b8:f5:b4:ee:2e:0e:77:08:d2:dd:f7:4c:07:54:d4:94:
         77:74:24:21:a9:cb:b9:7f:80:6a:cd:3e:31:8d:3b:74:b6:60:
         02:1e:0f:1a:14:04:2d:7f:a0:72:19:6b:a8:14:c9:6d:6d:aa:
         14:d3:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:59 2026 by rpki-client