Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
File:                     3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          o3LHKRIcgv/nOlkm43SURv/w9D3vqsg46gz9k6Sqx5U=
Subject key identifier:   B4:5C:2F:C1:7E:4C:62:9A:7D:6D:94:28:E6:96:9C:A8:58:BB:D4:27
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       0B9778EEDFCF7F2F415BFCAF23A9AFA662171C9C
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 05 Feb 2026 10:46:18 +0000
ROA not before:           Thu 05 Feb 2026 10:41:18 +0000
ROA not after:            Thu 04 Feb 2027 10:46:18 +0000
asID:                     268097
IP address blocks:        131.108.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:97:78:ee:df:cf:7f:2f:41:5b:fc:af:23:a9:af:a6:62:17:1c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Feb  5 10:41:18 2026 GMT
            Not After : Feb  4 10:46:18 2027 GMT
        Subject: CN=B45C2FC17E4C629A7D6D9428E6969CA858BBD427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:8f:c2:d3:1a:51:f1:4e:c7:dd:60:cd:8f:
                    b1:c6:0b:7f:5d:a0:a2:17:44:aa:45:6a:9b:01:ae:
                    d3:42:6d:b1:93:fd:1d:8b:8e:6d:a9:a2:7a:58:56:
                    88:22:25:b8:82:49:67:f4:83:9a:ce:66:5c:5d:0f:
                    92:6f:cb:63:c1:86:2a:4d:da:7c:d6:04:28:63:97:
                    a8:32:6e:eb:df:43:f7:38:ed:56:a5:8e:72:32:12:
                    ca:30:48:eb:94:bb:57:34:6e:4b:d5:54:37:9e:98:
                    55:92:f0:66:27:2d:1c:a5:96:78:85:1b:2f:a4:af:
                    60:38:86:fa:a7:a6:31:cb:ec:09:8e:57:7f:42:48:
                    7b:ec:6a:d9:01:e0:33:76:b4:b5:63:5c:7d:a8:af:
                    9b:b9:50:65:fd:77:91:12:e1:e0:6a:5f:57:58:a4:
                    8a:31:db:c2:e3:3e:73:af:af:9c:eb:de:e3:aa:58:
                    dc:f8:87:5e:fe:8b:e2:0e:5c:52:5b:8d:4e:ff:c4:
                    be:f5:25:1a:25:fe:79:a0:1a:1a:a6:4b:88:81:cb:
                    14:94:29:c9:ef:45:0c:de:e4:13:fd:36:4f:63:bc:
                    b0:2d:cc:24:06:c9:de:1d:82:f7:4d:c2:15:4a:db:
                    58:01:79:02:ac:8d:99:cc:b4:72:84:e8:1a:e4:44:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5C:2F:C1:7E:4C:62:9A:7D:6D:94:28:E6:96:9C:A8:58:BB:D4:27
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:f5:14:76:1f:61:99:ad:45:5c:fc:39:76:d6:e4:27:f9:
         7a:6a:a6:a1:1a:54:cd:57:e7:f1:57:b6:2e:78:45:1d:37:a3:
         5e:f8:c9:66:3c:10:92:19:14:f4:29:fa:25:9c:ec:6e:e5:74:
         f0:90:f7:5c:a1:8d:a8:2b:ff:f1:5c:d9:16:dc:21:11:77:71:
         a9:b5:a6:75:09:08:8d:8f:05:5c:57:f9:63:1a:21:e8:0a:73:
         ea:aa:38:7c:75:f0:86:9e:92:c0:12:b1:dc:28:3f:13:e5:3a:
         4b:3f:08:95:0b:ad:75:e8:d5:83:37:32:76:9b:63:75:ec:75:
         ff:c7:83:09:01:b4:96:fe:54:75:3b:d9:3a:a6:40:a7:5b:2f:
         f6:f5:a6:f0:ab:c6:9d:f5:bf:4a:2e:3b:e7:dd:5e:df:de:95:
         2f:0f:db:54:0d:b6:38:3c:b0:fe:33:6b:91:28:3f:80:8e:97:
         03:2c:ba:b4:1e:0c:21:86:6b:5e:9f:c7:77:86:82:7c:0b:63:
         06:77:a2:83:20:6f:38:e3:89:2b:da:9b:85:a8:27:17:cb:0b:
         5e:0d:42:bb:93:2e:16:8b:16:88:04:93:16:13:37:76:1f:66:
         23:c8:bb:b0:66:74:b9:bc:31:b0:59:a5:76:f3:bd:0c:eb:3e:
         12:c8:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:29 2026 by rpki-client