Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa
File:                     3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          U4JkWOQQu8nzBVHTwvrrqDkAdxoMLnru0TF3DyYD550=
Subject key identifier:   6F:1E:DB:2C:4A:51:F5:7B:FA:3E:A2:EB:FB:A5:5D:9A:A8:71:90:BE
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       5C7CB18D07851AADFD21D481B5DEF433A003E711
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:37 +0000
ROA not before:           Thu 05 Feb 2026 11:35:37 +0000
ROA not after:            Thu 04 Feb 2027 11:40:37 +0000
asID:                     262868
IP address blocks:        168.197.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7c:b1:8d:07:85:1a:ad:fd:21:d4:81:b5:de:f4:33:a0:03:e7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:37 2026 GMT
            Not After : Feb  4 11:40:37 2027 GMT
        Subject: CN=6F1EDB2C4A51F57BFA3EA2EBFBA55D9AA87190BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:8e:e8:cd:47:08:32:6a:ae:61:1f:8b:dc:
                    15:9a:a3:85:5b:ca:22:03:87:c7:47:2c:a5:01:b5:
                    2a:fb:3f:46:4a:8d:1f:75:da:48:90:9d:bc:62:f0:
                    78:e4:b3:9c:48:1f:a0:d1:ec:98:5f:42:d7:42:46:
                    6c:55:7b:c9:cc:2f:34:83:51:da:15:1a:09:28:a2:
                    97:17:2c:ae:80:69:2c:8b:59:4d:4e:8c:e1:39:cc:
                    c1:80:24:9e:4b:37:8b:ee:92:0f:12:d2:c0:50:1e:
                    9f:bc:2d:39:84:9f:3a:27:40:b8:e4:5c:03:04:70:
                    35:d8:fe:1a:6d:f9:e9:3c:b4:a7:3c:95:3a:bf:e4:
                    07:47:6f:0e:53:5e:1a:b7:42:9e:14:c1:0d:d2:0a:
                    d8:fd:5c:a2:18:e0:06:fe:e7:07:58:a6:50:54:90:
                    3c:34:fd:2c:86:76:44:03:02:7a:b7:29:12:1f:a3:
                    31:7f:9f:53:a2:a1:75:ff:13:0b:21:35:e8:01:f4:
                    58:2b:aa:71:19:ea:dc:45:f8:39:e0:9a:5b:83:45:
                    31:a5:79:14:ab:0f:9f:36:85:6c:f5:63:4f:88:07:
                    d8:6a:17:65:2e:57:39:61:89:4c:7a:be:ab:81:6c:
                    b7:96:be:5f:91:7d:7e:a4:45:95:e4:11:9a:f2:0e:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:DB:2C:4A:51:F5:7B:FA:3E:A2:EB:FB:A5:5D:9A:A8:71:90:BE
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3139372e3231322e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:da:8c:8f:b1:48:3d:17:45:de:4d:c7:d7:89:db:73:56:78:
         a6:1d:83:38:32:b5:8c:cf:14:0e:89:0b:c3:eb:e6:1f:0b:1a:
         8f:bc:9d:25:ee:cc:5f:cb:69:2b:25:66:83:4b:a0:16:89:4c:
         9f:43:4d:16:d3:08:df:cd:72:63:a1:c9:90:47:7f:9a:31:80:
         5d:de:03:4b:ff:b6:f1:13:6a:37:f2:c3:7e:09:ef:7a:17:8f:
         4a:4d:c0:2f:ec:67:f1:5b:ed:7e:44:ad:0f:04:9c:ef:e1:61:
         a4:7a:70:1c:b6:5e:4b:68:c0:81:ea:4c:5e:cb:f0:0a:ba:2a:
         88:c7:17:a9:c1:d2:9c:06:3c:ce:47:cb:cd:68:59:cd:3b:46:
         eb:fc:39:95:e8:ed:c5:9d:60:e5:f7:5c:42:71:c6:f4:b6:6e:
         b6:88:79:89:cf:f6:80:87:dc:c3:24:18:ec:48:c9:23:4e:b6:
         9d:c1:1a:b6:ab:a2:89:a2:df:6d:c8:b1:e2:b5:a7:2c:5c:df:
         6c:1e:ef:4f:bd:32:48:c2:bd:5c:90:10:3d:45:9b:93:65:23:
         90:6a:f9:aa:6c:cc:94:49:75:0e:db:83:66:12:00:e7:87:b4:
         fa:95:dd:07:29:a5:40:d2:fc:88:4d:9a:90:c5:21:6b:e7:30:
         0d:36:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:00 2026 by rpki-client