Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa
File:                     3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (raw, json)
Hash identifier:          G28Szm1Y8cwfr9wpmu5v7EZ/QxSHLuUrGNxhsN6J2Dc=
Subject key identifier:   30:FC:9B:C2:A6:33:90:C8:1F:0E:E0:DD:9D:FA:69:88:70:C2:B2:3D
Certificate issuer:       /CN=CA09CE87D7962722451F9BB1B0BABEB641024526
Certificate serial:       540CF2BA64FD704488AE7A704DD24A3B1FB9EDDE
Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa
Signing time:             Thu 05 Feb 2026 18:57:33 +0000
ROA not before:           Thu 05 Feb 2026 18:52:33 +0000
ROA not after:            Thu 04 Feb 2027 18:57:33 +0000
asID:                     264921
IP address blocks:        168.228.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl
                          rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0c:f2:ba:64:fd:70:44:88:ae:7a:70:4d:d2:4a:3b:1f:b9:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526
        Validity
            Not Before: Feb  5 18:52:33 2026 GMT
            Not After : Feb  4 18:57:33 2027 GMT
        Subject: CN=30FC9BC2A63390C81F0EE0DD9DFA698870C2B23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:58:7d:b9:ee:1d:a3:63:bd:2d:2e:48:9f:
                    70:e5:b7:cd:de:1a:94:0a:75:41:54:d0:97:33:f8:
                    6c:4b:21:1c:fc:ab:cd:42:28:2a:7e:78:ee:e8:53:
                    f2:30:36:d1:88:c2:28:a2:d7:f1:18:17:6b:44:4d:
                    f7:e9:0b:ee:0e:fc:32:70:d3:fc:a3:38:6b:4b:7c:
                    f2:bd:ed:bd:94:e9:ac:82:41:21:fa:e6:cf:b6:a3:
                    8f:75:76:1a:e9:41:d4:f3:79:f9:06:b2:c9:5a:1e:
                    ab:f3:9c:87:ab:1e:94:96:e3:1f:2d:89:45:6f:ac:
                    27:fe:b6:95:ed:23:05:20:93:de:22:8e:3a:d6:bb:
                    0e:e8:fe:de:9d:d0:17:5b:d2:04:85:2e:d9:99:8c:
                    3d:9c:78:35:7c:a9:4f:95:96:9a:da:0e:7c:1b:d5:
                    d6:ad:59:92:2e:8b:ed:6b:fa:78:cc:40:85:b8:96:
                    5a:8d:78:2c:7d:2b:b2:38:42:df:b7:76:37:8c:94:
                    9f:fd:a5:bb:58:a9:b5:96:2a:7b:77:ed:34:66:86:
                    28:98:a5:5d:e7:a0:0d:cb:2b:9d:f9:d3:66:b2:be:
                    17:b0:aa:47:3d:db:3b:d1:a9:43:d5:cf:40:18:2f:
                    31:59:8a:d2:0b:d9:cc:bb:c7:30:6b:64:fb:73:59:
                    fb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FC:9B:C2:A6:33:90:C8:1F:0E:E0:DD:9D:FA:69:88:70:C2:B2:3D
            X509v3 Authority Key Identifier:
                keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:cd:16:ce:08:45:96:7d:f3:da:05:3f:8f:27:01:87:f1:
         a0:01:4f:d9:be:a5:13:63:97:d9:93:af:be:6c:da:ee:18:01:
         0d:82:26:c1:fb:04:92:b5:b7:a4:0b:b7:57:c6:36:2f:cf:b6:
         5c:cf:41:ae:f4:11:05:ca:87:b2:0e:60:63:13:fb:33:08:cd:
         f8:c0:2c:e5:c8:3d:99:4a:3a:35:49:7f:d2:d7:df:22:56:64:
         6b:70:a5:42:76:4d:0e:01:47:15:db:06:68:ed:6f:7b:80:36:
         8e:28:9c:4c:2e:69:ce:02:6b:fa:8c:b8:16:97:0d:50:c0:ed:
         a0:01:bb:cf:8d:19:e5:b4:78:ca:68:27:8c:3b:0c:c8:71:a3:
         e3:c9:ef:22:96:8d:1a:6b:96:ec:87:03:8e:3d:c3:7f:b1:58:
         e5:86:a3:18:bd:b8:8f:eb:64:20:be:2c:07:a7:e1:e2:f1:2e:
         fa:28:d8:92:2d:07:b8:1e:93:41:39:ab:90:a9:72:5d:8a:4e:
         9b:85:7c:27:8a:48:4b:94:fa:e5:54:31:fb:25:aa:f5:be:f7:
         35:9c:5e:eb:5d:3d:ef:a7:0f:15:ba:c5:cd:57:71:7d:04:97:
         79:ab:e0:a2:23:4e:1a:ba:18:1a:dc:86:6a:d1:04:19:62:2a:
         99:21:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:51:56 2026 by rpki-client