Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
File:                     3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier:          aKXBFj2KstnlCe1CTp7TBwrS9qUcv2JFvVTDNApuk4U=
Subject key identifier:   D9:0D:4C:A7:A9:FB:56:FE:64:42:9F:F7:84:3C:11:71:60:CB:D2:6E
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       79C11B7063A43CC9C4E60A81313E35FBC4B170E6
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
Signing time:             Fri 06 Feb 2026 14:46:33 +0000
ROA not before:           Fri 06 Feb 2026 14:41:33 +0000
ROA not after:            Fri 05 Feb 2027 14:46:33 +0000
asID:                     265485
IP address blocks:        168.197.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c1:1b:70:63:a4:3c:c9:c4:e6:0a:81:31:3e:35:fb:c4:b1:70:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Feb  6 14:41:33 2026 GMT
            Not After : Feb  5 14:46:33 2027 GMT
        Subject: CN=D90D4CA7A9FB56FE64429FF7843C117160CBD26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:a6:ca:fa:f4:d1:64:d3:af:14:90:79:d9:
                    97:bc:66:44:57:0c:77:60:cc:69:1c:3e:de:38:51:
                    47:0d:6b:a5:ea:31:7d:e9:1b:4b:5c:ab:94:15:13:
                    df:ef:81:da:6c:bf:37:47:d2:c9:c5:26:3b:ee:53:
                    a1:c4:77:63:98:98:82:57:9d:a0:8a:e7:ea:43:ad:
                    e7:f0:b3:a8:59:b3:fa:d9:67:c8:d7:16:a3:b9:32:
                    4a:2a:a7:7f:ce:0b:44:98:b9:85:3a:a7:d2:6c:29:
                    10:e6:c8:6b:14:f7:cd:78:6a:3a:34:7b:08:2e:6d:
                    97:cc:2d:34:49:e1:65:07:96:71:67:ed:42:2a:bc:
                    0f:1a:ed:04:a1:d5:11:5d:64:d3:e6:ca:b6:94:06:
                    01:94:ef:04:68:e5:3c:66:c3:e4:68:fe:c7:10:fe:
                    e6:6d:70:93:69:ae:bd:da:eb:d2:bd:e3:94:a9:58:
                    93:c4:f8:c2:8e:a7:6d:e1:86:01:a9:a2:8a:ce:bc:
                    98:2f:73:82:9c:fd:e7:36:f5:21:73:1b:bd:1f:79:
                    e5:a9:c1:4e:34:96:84:60:e8:7d:52:d6:96:c2:b2:
                    ca:06:2c:80:a7:d2:09:43:5d:bb:df:66:fe:54:04:
                    91:8f:34:ef:dc:54:d1:a7:a7:0a:03:3b:37:e9:cd:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0D:4C:A7:A9:FB:56:FE:64:42:9F:F7:84:3C:11:71:60:CB:D2:6E
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:af:ce:ec:1c:06:f1:1d:d5:e5:54:6b:0f:e0:da:54:fe:
         68:87:3e:0c:f3:7d:34:46:a3:3d:85:76:86:c5:e9:b9:59:d1:
         ab:c1:36:ef:95:84:86:7b:85:6c:7d:0b:93:8d:3b:36:de:ad:
         40:75:7e:71:17:e0:15:1e:d1:d6:ed:89:d1:1b:45:db:d7:c3:
         18:d6:11:bf:50:eb:58:2c:fe:84:bf:72:60:d4:4c:da:bc:7f:
         31:3b:47:35:96:ce:9e:6b:40:df:88:9d:8d:bb:4b:b3:96:a0:
         6e:a6:b0:e2:57:6c:a9:ed:6f:0c:fe:dc:62:53:2f:93:0b:30:
         c6:a8:cb:b6:da:53:2c:df:a2:c8:66:d0:26:ee:bc:ad:76:80:
         93:4c:2b:ab:1d:99:2e:ec:29:0f:df:f9:59:52:56:0c:17:60:
         b1:41:4b:4d:47:98:de:33:cc:05:24:49:0b:74:68:35:95:30:
         bd:fe:af:94:40:d3:a0:5a:5a:83:de:35:50:a8:08:da:15:3e:
         18:91:75:41:12:56:9a:84:94:2a:bd:52:78:2b:ab:0d:34:72:
         b4:d4:99:5d:7a:da:0d:91:8e:3c:72:c1:d1:86:72:91:fd:4a:
         b7:11:9b:2a:f8:0f:ac:bf:1b:5f:0d:5f:8c:fc:5f:1c:4a:ed:
         c1:1b:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:37 2026 by rpki-client