Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
File:                     3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          LXkXpj/k39vHqv9sEVEWX/rh5ZuEppUnYgDxhqN9/Ko=
Subject key identifier:   D0:B7:05:CF:C5:45:8B:51:78:8C:6E:5D:A9:07:7D:E9:02:76:33:7E
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       70B14E6028C163A14487952D03F6EEB01A5B620D
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     61918
IP address blocks:        170.150.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b1:4e:60:28:c1:63:a1:44:87:95:2d:03:f6:ee:b0:1a:5b:62:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=D0B705CFC5458B51788C6E5DA9077DE90276337E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:e1:39:67:28:de:26:6c:ce:41:f5:de:31:
                    ea:1a:73:fd:79:67:e8:06:1c:4a:88:e5:64:60:0d:
                    67:fc:39:1d:0e:cf:f2:ad:c0:31:19:ce:4c:fa:04:
                    bb:c9:39:c8:74:68:60:a1:80:b8:c2:4d:e2:77:a2:
                    78:e8:8a:95:4e:45:45:5d:69:b0:83:fd:79:39:e8:
                    bd:c1:23:36:41:03:8b:d6:6c:7b:2a:c4:8f:f9:8a:
                    d0:b4:98:8c:f0:6b:6f:b8:d1:fa:ce:d1:7c:dd:b6:
                    02:40:e0:10:35:8a:a3:e8:04:39:55:37:5f:2b:f7:
                    71:44:4c:9b:20:e4:9f:02:78:3e:72:ce:15:b1:54:
                    05:ca:b2:0d:e0:6e:0a:0b:77:f8:cd:ba:2c:da:fa:
                    87:54:6a:59:3b:5b:0a:4e:ca:55:34:30:b3:17:7e:
                    65:3c:3d:29:08:00:c6:00:f0:18:90:2c:00:ec:b5:
                    55:f4:dd:5b:9a:a5:e6:20:ef:38:b8:16:94:80:fc:
                    2c:8a:d7:2e:b5:c1:81:fb:a6:b3:32:e6:fa:2a:11:
                    2b:a8:cf:d5:d6:81:d4:3d:46:59:e6:3a:a0:89:d4:
                    71:ef:f7:7b:aa:56:29:04:35:e3:01:a4:00:5b:ce:
                    f4:0f:ac:5a:4e:39:4a:fb:8c:f1:55:4c:3b:3f:09:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:05:CF:C5:45:8B:51:78:8C:6E:5D:A9:07:7D:E9:02:76:33:7E
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233352e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:cc:94:97:9a:92:88:58:1f:a0:02:2c:f9:47:61:3c:48:bc:
         0d:ab:b4:72:9d:62:c2:88:e2:a8:75:59:58:e9:6a:9c:8c:10:
         10:08:bb:54:11:0a:f1:9f:bf:fb:7c:20:7c:f2:f6:48:f6:05:
         f7:13:bb:c5:06:ad:b1:fd:4b:2f:4f:99:32:b0:8e:e6:2e:f5:
         bb:5f:f4:7d:5f:3c:d1:2c:66:23:9f:17:74:46:1a:c9:a7:29:
         8b:71:4b:a7:d0:b4:8d:49:49:95:60:90:60:c9:c3:05:56:6e:
         dd:59:a3:60:2c:40:25:fc:bf:1e:50:aa:87:14:e5:e1:b3:45:
         d6:50:df:b8:a3:18:b7:0e:65:23:68:83:40:c5:a2:11:8c:8d:
         1b:73:ba:13:88:6f:9a:f4:18:eb:84:db:c5:33:b3:1a:b7:3b:
         8f:aa:75:1d:d1:a2:27:25:2d:81:65:4f:d4:22:f4:a7:b5:b4:
         53:3c:49:56:5e:f7:9f:99:6e:fe:ac:83:08:6f:ee:d7:54:0e:
         96:06:ed:fe:94:39:63:d4:ca:72:15:68:f0:13:88:69:3f:6d:
         94:33:ba:16:d2:d0:6c:e1:56:1a:86:1a:c5:5b:c2:a9:72:34:
         b9:6c:14:cc:36:d3:6c:4f:55:c9:89:c6:85:70:fa:61:fc:1e:
         72:f8:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:55 2026 by rpki-client