Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
File:                     3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa (raw, json)
Hash identifier:          +kM4r3C8eqQzWi/pimFeGRTX1PXlXtjkVcfNH2mB46Y=
Subject key identifier:   FB:BF:94:D8:1C:3D:50:F3:F0:BC:C0:B7:CC:25:19:04:2F:88:76:CB
Certificate issuer:       /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial:       43163F17346AC615B33C361EF5FD3176B8E2E365
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa
Signing time:             Fri 06 Feb 2026 14:46:33 +0000
ROA not before:           Fri 06 Feb 2026 14:41:33 +0000
ROA not after:            Fri 05 Feb 2027 14:46:33 +0000
asID:                     265485
IP address blocks:        168.197.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
                          rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:16:3f:17:34:6a:c6:15:b3:3c:36:1e:f5:fd:31:76:b8:e2:e3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
        Validity
            Not Before: Feb  6 14:41:33 2026 GMT
            Not After : Feb  5 14:46:33 2027 GMT
        Subject: CN=FBBF94D81C3D50F3F0BCC0B7CC2519042F8876CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:06:10:a8:0a:83:9c:4f:44:5c:ac:25:95:
                    9e:16:20:f4:ff:da:cd:73:39:e7:ed:0c:9b:00:88:
                    93:b9:41:3a:c3:7e:5a:65:a9:71:b6:fd:d1:95:69:
                    bf:1b:5a:60:c2:80:77:db:f4:88:ce:01:8e:80:7f:
                    78:a4:aa:bc:5a:8f:ea:ad:e9:2e:9f:12:63:a4:95:
                    ba:53:ba:8c:b5:c8:83:37:fa:e4:14:58:51:ff:f3:
                    a1:31:bb:bc:11:5c:77:de:f3:e0:52:af:e8:a0:62:
                    bd:c6:d6:a5:04:bd:f3:b3:68:4c:3a:c5:5e:a3:32:
                    32:2f:c9:90:30:f9:50:b7:bf:31:76:ae:2a:0d:b0:
                    ca:19:c4:8e:c8:e8:e2:bd:67:37:b3:0f:7a:e3:ea:
                    60:88:6d:5d:3e:31:e9:06:78:c9:55:bb:2a:9b:1b:
                    d2:f1:46:68:f4:3c:27:3e:2a:43:55:40:42:23:61:
                    57:ee:1f:75:1c:3e:22:65:af:c6:eb:b4:df:de:8a:
                    4c:18:aa:bc:08:c7:76:57:e7:1f:5e:c9:49:b3:88:
                    31:94:5f:00:22:e8:ce:f0:af:44:5d:e9:dc:f2:4f:
                    61:07:38:71:22:c6:bb:4e:d2:f9:aa:ab:67:90:02:
                    31:1b:1e:f5:6a:a0:3c:87:e9:5a:fd:bb:bf:96:4f:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BF:94:D8:1C:3D:50:F3:F0:BC:C0:B7:CC:25:19:04:2F:88:76:CB
            X509v3 Authority Key Identifier:
                keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135372e302f32342d3234203d3e20323635343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:50:b0:ff:1b:f9:1e:38:18:c2:7d:65:ef:9a:97:1a:92:
         b0:6b:9a:e9:e4:28:bc:27:70:74:e2:ff:f3:c7:bb:3b:7c:2e:
         ee:dc:3c:7e:af:59:74:81:0f:59:23:ed:55:c0:df:6b:e8:f7:
         41:8c:6c:65:91:02:1d:27:5f:55:70:0c:d8:12:49:c6:cb:7d:
         49:5c:b3:45:bc:74:d6:38:db:40:de:da:f6:fd:a1:0a:24:46:
         ea:45:53:ba:0e:64:80:eb:6d:f8:de:f4:24:16:5c:7e:0f:a8:
         84:b4:b8:77:e9:52:23:59:5a:6a:e4:a0:33:d2:e7:0b:9d:b6:
         e9:48:52:6e:f6:2d:2e:b0:a8:f5:c4:cf:f8:29:e5:71:64:bf:
         0e:f8:29:30:ce:1d:9d:b6:08:4e:65:07:2a:71:82:4e:af:2d:
         4a:71:1b:bc:f6:51:c6:27:d0:78:60:f1:ce:01:66:f2:ef:fc:
         1a:38:13:00:5a:47:fa:97:4f:e4:55:76:da:c1:e1:96:d8:00:
         e8:ce:94:53:67:2e:74:da:ed:d6:1e:25:12:ba:bd:3f:45:36:
         ea:cb:55:a6:87:88:65:b7:38:ef:be:d5:e1:e6:47:38:08:07:
         d8:91:3b:ad:c4:b1:44:f8:03:7f:ba:d3:8c:b6:bd:73:76:a4:
         13:18:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:55:02 2026 by rpki-client