Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa
File:                     3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          ILvDH5Kydy+k+ljZxdSsGwzbGwRSfKGmemhOm/std7w=
Subject key identifier:   C7:10:BF:EA:58:8C:BC:30:94:AB:ED:25:7D:9D:EE:32:91:BC:90:C4
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       1663B1E8F192D681867DA994BEFEB8301E3D42A7
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:38 +0000
ROA not before:           Thu 05 Feb 2026 11:35:38 +0000
ROA not after:            Thu 04 Feb 2027 11:40:38 +0000
asID:                     262868
IP address blocks:        164.163.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:63:b1:e8:f1:92:d6:81:86:7d:a9:94:be:fe:b8:30:1e:3d:42:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:38 2026 GMT
            Not After : Feb  4 11:40:38 2027 GMT
        Subject: CN=C710BFEA588CBC3094ABED257D9DEE3291BC90C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:8e:bf:85:f2:1c:26:b8:ba:54:ef:86:23:
                    8a:9a:d6:4d:27:e5:61:b3:0b:89:bc:dd:75:37:3e:
                    01:1f:d0:e9:47:e9:a6:b9:1d:d7:bd:0a:25:9b:af:
                    b7:3c:15:08:fb:a7:e1:f4:7f:01:62:20:22:5f:74:
                    ff:4b:3e:87:27:f1:5e:0e:c9:76:64:51:37:16:34:
                    2d:79:ca:c7:93:65:47:84:12:29:5a:1f:b8:69:aa:
                    90:aa:65:9a:8e:06:a0:f8:92:b8:7b:20:a2:94:00:
                    50:e4:d7:78:7d:d3:c0:de:87:38:17:a9:bc:69:26:
                    23:d3:d0:82:fa:ec:03:81:1f:ef:9c:c6:b7:0a:21:
                    dd:cd:f5:c4:fd:57:18:8f:4e:ac:78:ff:31:26:e8:
                    ab:cb:e4:0b:a1:73:1d:2f:48:e3:ca:b1:83:cb:4b:
                    d0:e2:1b:c1:4b:8e:23:30:06:07:b9:40:17:08:fc:
                    17:64:30:70:de:fc:6d:4e:11:99:83:e5:71:f8:f9:
                    65:ef:a9:19:8b:8f:3e:a8:c3:ca:b2:15:bf:bf:41:
                    2e:c3:b7:eb:4c:f8:9f:79:49:c0:f2:06:7e:8d:c2:
                    83:97:d7:0a:2e:0e:8e:21:d5:5b:19:03:9c:9b:e2:
                    f4:d6:bc:8c:03:e3:e5:40:ef:b2:b9:ea:80:60:08:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:10:BF:EA:58:8C:BC:30:94:AB:ED:25:7D:9D:EE:32:91:BC:90:C4
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3134382e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:32:18:21:3c:97:df:11:78:6a:b1:0b:7e:a2:cd:01:93:
         1c:22:2c:52:37:5c:b0:27:71:98:63:e3:db:59:32:a2:de:61:
         52:42:70:df:77:1c:4c:e2:af:65:69:83:4c:e5:86:29:33:bd:
         cc:ea:6b:e8:be:13:67:80:c3:17:7f:d9:90:e7:44:46:17:ab:
         fb:17:cc:5d:99:d3:99:78:9e:2d:4f:83:68:9d:a2:2b:0e:09:
         19:e1:ed:1e:d7:98:74:02:93:77:2c:f1:7b:75:37:27:4c:ba:
         74:38:06:78:71:00:19:5c:e9:af:1e:01:43:b2:6f:a4:13:af:
         e1:90:ac:54:cc:0e:60:4b:93:75:a0:b4:87:4a:48:55:c9:ab:
         1e:1c:4f:fb:76:17:0a:1b:e2:41:02:64:4f:1b:28:63:cf:a0:
         7a:89:a5:e5:57:7f:18:b5:13:80:a7:10:58:d4:5d:4e:0d:1d:
         9c:8b:56:10:cf:1e:0e:af:4a:4a:c5:22:a8:39:21:c5:f2:aa:
         32:be:ca:9d:33:e8:d4:68:ee:23:16:29:41:71:ce:af:1d:25:
         b4:10:06:db:df:b7:1f:ca:e7:11:32:c3:9b:da:bd:6a:4a:25:
         a5:75:96:39:a4:a8:1e:f4:02:38:e0:bc:09:83:11:c5:a4:ae:
         d4:c2:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:03 2026 by rpki-client