Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          sMMtFRckJdFsWNqx+LB292CQ0yulmr/f/rIDHD4srPI=
Subject key identifier:   25:E4:03:B0:30:A3:64:51:40:9D:8C:9B:C2:26:A2:7C:5B:3D:B8:54
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       773C3D68EDACE2D714D5571F0681CFDA9EB627D7
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     265425
IP address blocks:        168.195.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3c:3d:68:ed:ac:e2:d7:14:d5:57:1f:06:81:cf:da:9e:b6:27:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=25E403B030A36451409D8C9BC226A27C5B3DB854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:a5:89:78:1d:4b:21:7b:c2:1c:f8:02:0b:
                    ba:bd:cc:e9:72:bc:5b:10:50:22:e9:c9:6a:9a:e3:
                    d6:c7:af:75:62:b2:ce:36:c4:e4:29:92:88:b8:74:
                    59:20:9e:b8:49:6e:3b:8d:ed:6e:f0:13:01:48:8d:
                    55:6c:72:ed:06:87:5e:8d:a5:68:82:39:ea:d3:d5:
                    6c:37:32:78:d9:ea:d2:f4:a3:45:1d:1e:98:f7:e4:
                    e7:62:72:9b:dc:98:9e:7d:e0:f2:25:ad:7e:54:9d:
                    36:4b:ad:a6:f2:05:e2:76:a9:7a:ec:91:d4:b8:24:
                    aa:10:fb:3e:da:2b:3c:7c:d1:80:89:5d:7a:36:29:
                    ad:ae:22:1c:4a:c6:74:54:de:9d:a1:4a:5d:d0:f7:
                    32:da:b0:4e:68:45:3e:16:48:c6:7b:38:9b:38:80:
                    59:2f:4a:73:5e:95:03:00:0e:d7:4b:14:7d:17:07:
                    6e:a1:54:ac:6b:f9:4b:0a:42:b5:6c:fb:f8:79:1d:
                    c2:1d:72:7e:6d:b5:b5:fb:19:54:9b:d6:ed:f2:cd:
                    20:e8:3f:80:f4:b4:bc:6a:3f:9e:3f:f2:5c:81:70:
                    96:08:73:41:da:fe:3f:b3:f1:39:06:10:e2:5d:49:
                    13:57:84:66:63:19:47:94:87:1a:91:8e:59:f9:d7:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:03:B0:30:A3:64:51:40:9D:8C:9B:C2:26:A2:7C:5B:3D:B8:54
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33302e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:82:6d:c5:5a:e8:13:9b:a1:ab:74:ff:59:92:aa:24:db:
         ee:b4:cd:70:83:cc:5b:31:ca:9a:bd:c7:f0:3a:29:ac:15:5f:
         fa:9e:99:a3:c9:5c:2a:b2:86:96:e0:a4:81:3d:34:c2:2c:8a:
         4b:97:e6:94:be:c9:31:55:02:55:bc:5e:d0:da:65:d2:42:26:
         a7:fa:d0:8e:17:76:24:82:58:c1:2e:a8:6f:44:36:20:af:32:
         90:bf:73:5c:96:76:94:5d:e1:38:d3:60:ee:24:d6:8b:2e:03:
         1e:25:38:68:77:03:b2:da:50:a2:75:77:5a:6e:02:a8:a2:30:
         0d:9e:f4:a5:ec:84:a1:c5:c1:49:53:bb:f2:be:62:77:bc:ec:
         1c:57:f7:d7:30:ab:04:5b:4b:1e:1e:39:4f:88:cd:b1:33:41:
         9e:06:1a:26:67:0d:dd:f2:7b:d9:5e:91:27:0d:91:04:ae:b7:
         06:23:74:da:b8:be:48:13:3c:9c:51:4f:37:8e:31:53:55:52:
         3c:a1:1c:46:63:b0:0b:ac:17:61:80:26:13:0b:93:e0:40:ae:
         4f:70:0f:ec:58:b8:39:d9:a8:cb:7b:b8:8e:fd:41:93:a4:f2:
         46:11:61:2a:e4:1d:33:e9:4d:19:7b:73:14:71:c8:76:fe:2e:
         51:09:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:04 2026 by rpki-client