Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
File:                     3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa (raw, json)
Hash identifier:          lN7KYt8FAhD4Ue2umu70mTWNaZQm9gko80XwRBNVTfQ=
Subject key identifier:   D1:E7:15:5A:B6:D1:52:23:3D:FC:C4:AB:0B:94:EE:F1:F2:CC:29:14
Certificate issuer:       /CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
Certificate serial:       40374820FE9F647F1E52EE954C70511B2CE362AF
Authority key identifier: 0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     265425
IP address blocks:        168.195.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl
                          rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:37:48:20:fe:9f:64:7f:1e:52:ee:95:4c:70:51:1b:2c:e3:62:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=D1E7155AB6D152233DFCC4AB0B94EEF1F2CC2914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8d:38:69:4a:09:62:b4:2b:f1:55:d6:fb:26:
                    45:fb:df:4c:a4:c6:28:34:1b:6c:fd:e4:a6:bd:1f:
                    56:fa:3d:19:1c:65:c8:48:3a:f5:29:d4:c9:d7:ac:
                    dc:4f:d9:db:b7:33:99:e8:a4:7e:08:b7:6a:d7:c3:
                    2e:dd:25:03:e5:53:03:79:81:b2:84:46:48:8e:cd:
                    c4:dc:bc:6d:92:7e:4d:cb:67:db:ed:6f:71:4b:3c:
                    25:af:3b:5e:36:72:0c:9d:be:aa:83:45:85:33:da:
                    02:ec:7d:e5:a5:1c:4a:ab:1c:d6:de:1e:28:4a:87:
                    48:62:c4:81:50:43:0d:37:b1:d1:9d:b9:07:8f:97:
                    18:65:85:15:59:59:bc:e5:67:ca:a2:ca:a7:72:d3:
                    91:c5:00:9f:37:f4:f5:56:41:85:08:44:4a:c2:25:
                    ec:6a:4c:3a:b2:ee:e3:d6:ae:9d:39:a8:65:2a:3d:
                    07:78:e9:54:e1:28:95:5a:2d:c5:ef:36:d9:61:ae:
                    fb:96:91:d4:50:41:b1:70:24:66:6d:88:1a:1a:f7:
                    d3:0e:7a:b6:56:8e:f2:cb:36:c5:ce:e5:00:69:93:
                    3f:b1:ff:d0:05:fd:d2:90:34:8c:18:cc:21:1b:2a:
                    35:87:bb:46:70:1a:de:a1:ac:30:33:72:93:84:95:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:15:5A:B6:D1:52:23:3D:FC:C4:AB:0B:94:EE:F1:F2:CC:29:14
            X509v3 Authority Key Identifier:
                keyid:0B:06:D3:BD:42:AE:29:5F:17:CF:52:D5:8A:5B:A3:0B:CE:91:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B06D3BD42AE295F17CF52D58A5BA30BCE91BFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EW1S5FsaMHi4NoZ9FyQuKyiyMxCuPg6UxiP6x5A7U4h/2/3136382e3139352e33312e302f32342d3234203d3e20323635343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:81:e2:e1:21:bc:f0:aa:63:e9:fd:67:5b:a8:30:fd:f0:
         40:ba:9f:1c:47:ca:56:e5:35:78:32:b2:7c:f3:cd:b5:31:be:
         4d:b5:f6:5a:5b:3e:6a:62:b3:d0:d7:1b:61:82:ef:86:12:b7:
         73:5a:b5:4b:81:1e:3b:a2:1c:50:1a:c6:db:2a:39:6c:6d:50:
         1e:60:f7:b5:4d:80:aa:cc:0b:a8:5f:f9:3c:1a:9e:ed:2f:20:
         f9:49:21:1e:86:3f:b0:b3:bb:72:72:74:54:e4:35:eb:af:61:
         b2:29:8d:81:21:0d:23:74:43:0f:0a:7c:cf:82:9d:b1:20:92:
         53:02:67:ad:b8:64:3d:8e:7b:b8:d0:29:0c:a4:64:ec:85:77:
         5b:9a:45:6a:3f:2d:42:3f:4e:46:d9:ef:c0:29:dc:f6:64:ed:
         f3:18:70:d9:c2:8d:f8:fe:1a:01:06:6f:26:ec:f6:1b:eb:cf:
         0f:64:d9:11:f1:0c:f0:35:02:17:4d:9e:55:19:0f:65:8c:d1:
         ab:0d:05:d4:d0:e6:c0:f5:0a:d7:1c:49:4b:6c:4a:00:d6:34:
         6e:63:b7:05:0a:7b:ce:1a:95:b9:80:b7:1c:7c:7b:b2:a6:1e:
         5f:d1:ee:ac:ee:0d:37:24:d8:ec:2d:3c:5f:54:27:35:80:0e:
         e8:70:4e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:50:36 2026 by rpki-client