Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132362e3131382f33312d3332203d3e203635303238.roa
File:                     3136382e3138312e3132362e3131382f33312d3332203d3e203635303238.roa (raw, json)
Hash identifier:          Zt6VJQ5VuS++XGiNg0vyNG8IyCCY0iM7a2jisn73yS0=
Subject key identifier:   97:A3:05:85:3A:62:75:3F:70:9D:41:00:83:63:23:E8:9A:D3:06:C7
Certificate issuer:       /CN=2E870BD5A2AEB5F6053B769848A273709E6B62AD
Certificate serial:       0FBABAFBE4BCE2E4A858D5CD760069FA50E3419F
Authority key identifier: 2E:87:0B:D5:A2:AE:B5:F6:05:3B:76:98:48:A2:73:70:9E:6B:62:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132362e3131382f33312d3332203d3e203635303238.roa
Signing time:             Wed 11 Feb 2026 13:38:21 +0000
ROA not before:           Wed 11 Feb 2026 13:33:21 +0000
ROA not after:            Wed 10 Feb 2027 13:38:21 +0000
asID:                     65028
IP address blocks:        168.181.126.118/31 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:ba:fb:e4:bc:e2:e4:a8:58:d5:cd:76:00:69:fa:50:e3:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E870BD5A2AEB5F6053B769848A273709E6B62AD
        Validity
            Not Before: Feb 11 13:33:21 2026 GMT
            Not After : Feb 10 13:38:21 2027 GMT
        Subject: CN=97A305853A62753F709D4100836323E89AD306C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:61:4c:ae:04:4d:cc:84:21:15:88:33:10:
                    03:ed:70:46:6b:89:7d:81:fd:3e:95:78:83:28:d9:
                    f0:16:f7:2b:ed:20:42:b2:ec:53:6d:aa:a8:96:f1:
                    bf:0e:e1:7a:a2:72:25:fa:d4:4f:31:e9:f9:7c:dc:
                    c0:59:92:89:0b:66:4a:94:b9:98:a2:2f:1c:83:c6:
                    c8:7c:90:37:b8:b0:41:07:31:f7:f8:0b:52:da:33:
                    ac:c3:1d:61:d5:af:90:3d:6a:00:cc:80:8f:62:ac:
                    3e:a7:df:5d:07:87:be:02:fe:4d:14:67:17:da:5c:
                    01:a0:af:26:1f:e5:24:73:0c:5e:52:3d:5a:3e:ed:
                    ea:04:b4:9c:c2:b3:66:c6:1f:1c:98:11:7b:35:6a:
                    fd:b1:20:92:ab:37:be:f7:5b:ac:d7:a1:80:97:df:
                    6d:06:fb:1f:bc:1c:78:ed:9c:d5:6a:c0:7c:b3:70:
                    9f:fd:a0:8e:a0:c0:d0:ff:2e:f4:54:26:3a:a4:cd:
                    c5:56:26:ad:dd:07:a2:71:9b:28:6e:a5:13:91:bd:
                    fc:e1:36:aa:4a:db:f0:6d:bb:b6:7c:b6:6b:25:60:
                    de:12:ec:1d:bc:c6:e2:41:4d:fe:74:ca:ab:53:ed:
                    ba:d1:d3:5a:db:5f:71:2a:06:4d:f9:bb:d4:ce:a0:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A3:05:85:3A:62:75:3F:70:9D:41:00:83:63:23:E8:9A:D3:06:C7
            X509v3 Authority Key Identifier:
                keyid:2E:87:0B:D5:A2:AE:B5:F6:05:3B:76:98:48:A2:73:70:9E:6B:62:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/2E870BD5A2AEB5F6053B769848A273709E6B62AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E870BD5A2AEB5F6053B769848A273709E6B62AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/0/3136382e3138312e3132362e3131382f33312d3332203d3e203635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.126.118/31

    Signature Algorithm: sha256WithRSAEncryption
         a1:df:c1:1e:26:49:2d:90:33:a5:d1:58:28:fa:3a:6d:06:19:
         71:d9:aa:70:dd:90:8a:9d:f4:52:c5:4a:68:f7:c2:bc:dc:af:
         23:51:89:ed:68:44:fb:08:1d:81:c9:56:a7:f0:e1:db:12:a7:
         3e:27:1a:aa:13:f3:7e:16:9d:a1:dd:d5:2c:a6:47:37:f7:7a:
         b0:2d:88:d0:b5:b0:b7:c4:4b:47:83:e0:79:ec:ff:3e:03:0c:
         87:1a:ef:4b:11:a5:96:69:15:cb:6b:0a:a6:fc:ee:f0:dc:63:
         fc:a8:59:e6:5d:7a:61:b3:e6:5d:a8:66:ca:cf:97:bc:73:3f:
         83:be:7a:b7:6a:4c:71:0a:79:84:89:ed:60:ad:a5:30:43:b3:
         30:bd:a0:23:a1:56:af:7f:a7:af:4c:48:cb:9a:eb:cf:2d:17:
         28:65:b4:7e:dd:0e:01:0b:76:4f:54:85:72:56:9d:66:75:78:
         58:42:b2:ff:cc:78:65:45:77:97:0d:42:4c:8b:bf:48:74:aa:
         4e:8c:ed:aa:3b:86:05:3e:5e:2a:c3:15:82:6d:d9:3a:15:53:
         38:89:63:43:34:c9:3c:81:7f:0f:94:62:a1:96:9b:dc:43:e5:
         03:cd:8b:1b:7e:01:a5:5d:22:3f:e1:b5:5a:43:54:1d:66:6a:
         c6:00:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:33:06 2026 by rpki-client