Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          UhCtHuZTZGaKLEQtOFgnU7ImjMruubBq7aZyaZeUpzo=
Subject key identifier:   AE:F5:24:9D:5E:94:5B:E8:11:DA:38:F4:07:76:8F:EC:B2:57:21:87
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       21EC243DC348D606CEF0794E0E75EF36E60E1677
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     61918
IP address blocks:        170.150.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ec:24:3d:c3:48:d6:06:ce:f0:79:4e:0e:75:ef:36:e6:0e:16:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=AEF5249D5E945BE811DA38F407768FECB2572187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:fb:81:d1:d6:6a:10:ea:63:52:83:4f:6a:
                    df:a9:06:6e:15:a4:c0:8a:92:f1:bf:1b:af:85:76:
                    56:90:30:c2:65:36:a5:f5:ff:49:be:ed:91:ad:87:
                    13:d2:b0:b8:e4:cd:77:2d:50:2e:36:fb:ac:71:95:
                    56:49:7a:24:6a:46:56:60:a8:04:a2:32:57:86:f3:
                    0c:aa:ba:55:16:0b:01:70:fb:80:f6:83:d1:95:79:
                    08:0e:dc:24:1c:94:08:85:cb:d6:75:5c:56:05:3d:
                    1f:09:80:80:3c:44:9f:37:52:f6:17:4f:a1:b7:ac:
                    94:32:3d:91:cf:ac:4b:10:8b:f1:21:81:de:89:99:
                    f4:6a:72:90:a4:19:2a:27:1d:d6:1f:f3:68:d1:7a:
                    1a:66:e8:17:8b:e0:f7:6b:7c:6e:da:c7:8c:8b:fa:
                    5c:a6:ef:3c:a1:f7:bb:51:dc:85:e2:f5:97:5f:ed:
                    f3:04:cd:ee:48:89:4e:57:36:b7:10:5f:46:20:1d:
                    23:b2:2d:67:60:be:b7:55:38:d1:c0:4c:3a:f8:3b:
                    59:0a:a1:97:89:b8:ca:28:66:d5:ca:41:c0:bb:11:
                    39:e2:80:0d:c4:07:6a:a7:a8:aa:39:d6:4c:8c:22:
                    fe:da:0a:ef:ca:08:e2:18:27:fd:b3:2c:29:d8:6a:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F5:24:9D:5E:94:5B:E8:11:DA:38:F4:07:76:8F:EC:B2:57:21:87
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233322e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e5:b2:61:4e:37:f4:75:c8:bd:29:5b:00:c4:cf:4f:12:d4:
         9b:f1:8a:1b:21:f9:b5:f7:aa:c7:94:eb:77:b7:da:93:c2:eb:
         a0:1a:cd:01:f7:30:09:c6:11:82:df:59:db:b2:45:c4:9e:bf:
         3a:61:bf:ca:10:eb:ef:0c:2a:13:43:5b:ce:16:0c:fb:36:69:
         ba:a7:13:ce:86:75:31:fb:e7:16:ec:e2:a9:03:25:dc:16:03:
         76:7d:b4:d9:81:22:40:fb:55:63:a8:bb:bd:f5:ab:f6:30:81:
         bd:6b:23:1e:70:d0:e6:56:39:06:85:2c:b2:4e:91:33:cf:d5:
         9d:c8:3c:26:43:c6:f1:cc:9f:34:db:1b:31:a1:79:cc:a3:95:
         57:a2:59:84:0f:a0:fb:1a:00:a7:f8:e5:3f:fb:78:aa:f3:90:
         16:90:0a:d2:0b:ad:52:82:99:b7:5f:6e:e5:2a:20:1c:ec:29:
         13:0f:7c:3e:24:f5:b0:36:cc:80:85:0d:2c:17:17:4d:4b:55:
         c8:45:30:93:d3:5a:c7:dd:d0:1d:55:fb:71:10:cb:f7:d6:c8:
         90:87:73:3a:2a:3e:86:98:04:4c:f9:6b:f4:0b:45:c1:b1:fd:
         a7:ed:ef:30:7e:81:43:e7:ec:25:7a:bd:73:64:08:08:66:b0:
         d8:d5:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:54 2026 by rpki-client