Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa
File:                     3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          BGlhxMeo7zoLpzRuVslU5GcAP7/KP8NpsDnv9LFDj3A=
Subject key identifier:   EA:60:D7:77:8A:F0:8A:50:AB:35:20:7A:CF:21:41:D2:70:CC:6F:B4
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       79B0CDB82DCD9F12BF315A047FD8FBB3FC580571
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 05 Feb 2026 10:46:18 +0000
ROA not before:           Thu 05 Feb 2026 10:41:18 +0000
ROA not after:            Thu 04 Feb 2027 10:46:18 +0000
asID:                     268097
IP address blocks:        168.194.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 21:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:cd:b8:2d:cd:9f:12:bf:31:5a:04:7f:d8:fb:b3:fc:58:05:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Feb  5 10:41:18 2026 GMT
            Not After : Feb  4 10:46:18 2027 GMT
        Subject: CN=EA60D7778AF08A50AB35207ACF2141D270CC6FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:df:36:0c:b0:36:ed:8d:58:3c:e3:81:86:
                    26:00:56:1d:8e:8a:59:77:7e:cc:69:91:2f:40:f3:
                    e5:4f:a3:3e:09:42:44:1f:24:08:7d:6b:34:ce:e9:
                    d0:71:2a:25:aa:f3:0c:a4:6f:f8:e1:f6:47:ff:e4:
                    c9:a2:d0:08:9c:1f:ff:0d:84:6c:40:48:ba:72:d6:
                    cc:33:76:87:02:b6:58:7f:07:db:65:00:03:4f:ec:
                    32:11:3e:e1:07:ba:a8:df:d7:de:c8:bf:1c:23:35:
                    c4:fd:49:cb:0d:1d:b2:ed:d9:51:3d:ea:d7:b7:d5:
                    ca:1b:a1:37:b0:bb:cf:ea:f3:2c:ce:de:76:a4:7d:
                    6c:09:34:62:a0:f0:06:91:8b:a4:9f:f5:ac:09:77:
                    a5:65:ff:a2:02:12:5d:36:b5:8b:ea:ca:4d:80:9c:
                    a7:80:0a:57:05:8b:f9:7a:b0:46:6f:21:20:db:11:
                    1a:e5:a2:b9:79:aa:b6:d3:d5:3a:40:7b:05:7b:ee:
                    4f:15:74:3f:24:fd:37:b1:10:1c:fb:2e:f9:10:54:
                    97:54:ee:27:da:36:5d:7f:fa:c4:d1:90:bf:26:e2:
                    71:9f:44:d7:81:ea:ee:2e:08:e3:65:72:ed:b8:30:
                    21:9c:a6:bb:5b:ba:56:b7:33:9f:01:42:19:fe:51:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:D7:77:8A:F0:8A:50:AB:35:20:7A:CF:21:41:D2:70:CC:6F:B4
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3136382e3139342e3230382e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:02:ec:ce:39:c4:eb:69:a4:66:6d:19:3b:c5:63:0c:4c:
         97:be:52:16:81:8b:62:f6:ec:c5:58:ae:23:c2:48:cb:e3:1f:
         7b:cd:42:14:cb:37:17:62:46:ae:1e:fe:e3:3b:76:9a:e2:da:
         68:b4:a0:e5:94:79:b9:4d:6c:ac:18:4e:98:76:35:cd:99:d9:
         99:39:c3:72:db:a2:0b:88:5e:43:8f:af:0f:90:6b:bd:60:dc:
         cd:0a:74:bb:81:3e:bc:57:0f:7a:6f:be:bb:28:5f:cb:30:c5:
         23:4a:a1:c8:09:c9:48:b3:9c:e8:63:b1:3c:07:8d:15:9c:11:
         4d:88:15:62:ab:da:27:14:5d:a6:4a:ec:f8:34:71:df:5f:59:
         9f:78:83:7f:27:21:13:ee:28:6b:dd:df:f3:75:21:5c:8f:7d:
         cf:9f:1d:3d:06:4f:87:b1:55:af:16:a4:f1:f6:47:2f:fd:36:
         d4:31:21:78:0a:aa:2e:55:be:99:b1:48:9c:d1:49:98:b1:98:
         72:6a:81:a8:d3:20:05:6f:1d:e4:d8:e6:83:35:3a:82:59:22:
         f4:f7:a5:70:60:6d:3c:9f:a4:00:8d:a3:e1:08:e8:76:20:13:
         02:6b:74:c4:55:2a:83:74:e1:d8:0d:5e:dc:56:9d:00:c4:80:
         94:7b:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:41:09 2026 by rpki-client