Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa (raw, json)
Hash identifier:          LoIelVvsczA4GGxaVWkjpZku3YwfLzIc81GSGUpapAI=
Subject key identifier:   8C:27:E1:74:D0:21:27:7D:98:0D:B8:70:0A:4A:F3:52:B6:08:40:D4
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       6DC08D9FBD71E769F4C571B8FBF9A61003DB54A9
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     265425
IP address blocks:        168.195.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c0:8d:9f:bd:71:e7:69:f4:c5:71:b8:fb:f9:a6:10:03:db:54:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=8C27E174D021277D980DB8700A4AF352B60840D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:a2:56:61:aa:5a:3d:2e:cf:f1:c2:ea:4a:
                    90:80:6a:5a:c6:75:20:06:80:c6:75:fa:4f:c3:5d:
                    8a:a0:55:69:e7:5b:a7:c7:c9:64:bf:23:51:1e:72:
                    a1:3e:e7:f2:c9:74:f0:46:c8:30:bb:b9:0b:fd:c4:
                    57:f1:d3:a2:4f:76:de:6c:d1:fb:5e:a0:c5:be:b8:
                    cb:72:b5:a3:72:a1:20:77:1d:b3:ee:31:50:e0:d2:
                    df:21:5c:41:f4:68:c9:a1:87:df:98:29:42:48:71:
                    ba:df:46:7f:65:69:2b:a1:c6:69:54:24:fc:f5:d6:
                    e0:51:9c:2b:18:99:fe:81:13:fc:86:2e:54:be:7c:
                    ce:eb:34:bd:9e:4f:6c:f5:38:23:5b:34:84:9a:85:
                    0d:07:ae:61:de:0b:11:c1:29:7b:e6:37:26:43:8a:
                    1a:12:ea:82:e2:72:5c:d3:70:31:78:45:b5:4a:83:
                    dc:21:0f:dd:73:31:72:b1:2c:09:2d:fc:d3:2c:9e:
                    07:a3:f4:2d:66:dd:2b:a0:df:53:49:5a:a3:8b:e8:
                    7b:cc:ea:1f:be:b4:d4:c8:19:fd:13:6b:4e:bf:3b:
                    12:95:03:06:42:f7:2e:25:7d:2b:f8:0d:c5:69:40:
                    25:fc:a8:9b:9d:4f:6d:1e:c8:12:7c:ba:95:87:d1:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:E1:74:D0:21:27:7D:98:0D:B8:70:0A:4A:F3:52:B6:08:40:D4
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32332d3233203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:24:8d:42:50:65:b5:4d:a3:3d:a5:b9:7f:02:db:85:28:
         dc:50:63:1b:b2:83:a8:ad:3a:44:bb:0a:1f:17:0a:0a:2e:63:
         f8:48:20:f8:cf:7a:57:18:54:bf:ff:91:df:33:7e:c0:47:aa:
         f1:b7:14:cc:9d:31:ee:1a:f0:0b:cf:79:99:88:27:00:2c:db:
         fc:e0:f4:72:a3:4c:d0:72:72:90:0b:c8:37:79:27:5e:37:6c:
         43:da:dd:f2:10:44:7e:82:3c:ec:2d:02:a5:81:0d:9f:95:74:
         06:21:7b:be:48:82:a0:5b:ae:6f:8a:7f:8a:5b:d8:c4:6f:1e:
         96:c5:99:10:38:28:5d:26:69:10:bb:95:98:c8:d9:27:0c:12:
         4e:da:82:02:bd:ce:b3:47:1b:97:9d:53:c5:9f:6d:c8:1f:6f:
         49:77:da:28:bf:b9:4a:ef:1f:1d:b9:de:97:d7:7b:dc:18:d8:
         0a:eb:28:84:73:67:68:8e:39:db:50:f9:48:3d:c6:4c:83:20:
         8c:74:01:c1:74:1b:e8:4e:df:44:18:bf:69:1d:1e:6b:53:a6:
         18:6e:3f:a7:99:3d:57:9e:b7:94:15:75:4f:70:ce:61:e7:eb:
         b0:77:5e:5b:b6:80:46:a1:eb:70:b4:eb:d8:38:78:04:40:00:
         bd:c5:24:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:14:15 2026 by rpki-client