Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa
File:                     3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          2weTEjJSSKBdVX821pW9JOdJiXE2DI8mgE2Va2JdF7g=
Subject key identifier:   8C:41:C5:D9:76:F7:AE:0E:7C:FD:B6:8A:8E:3A:95:E6:51:20:78:33
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       48834EAA2B6533C42229EFFE072AC0D689F07BC6
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa
Signing time:             Thu 05 Feb 2026 11:40:37 +0000
ROA not before:           Thu 05 Feb 2026 11:35:37 +0000
ROA not after:            Thu 04 Feb 2027 11:40:37 +0000
asID:                     262868
IP address blocks:        168.227.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:83:4e:aa:2b:65:33:c4:22:29:ef:fe:07:2a:c0:d6:89:f0:7b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Feb  5 11:35:37 2026 GMT
            Not After : Feb  4 11:40:37 2027 GMT
        Subject: CN=8C41C5D976F7AE0E7CFDB68A8E3A95E651207833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:9f:5e:84:c7:f2:de:b9:38:1c:0f:3a:5d:
                    14:a3:07:73:c2:86:53:cd:c8:99:7a:22:b1:0a:e4:
                    79:21:96:23:80:4d:b1:f5:82:6d:bf:f2:59:56:94:
                    dd:b7:26:ff:da:77:38:e0:3e:08:a3:f2:65:29:43:
                    93:cd:8d:65:45:df:60:b8:bb:af:76:5b:eb:5d:d3:
                    af:87:07:fe:a6:4c:29:cf:cf:c9:92:43:25:7a:cc:
                    54:4f:2e:27:70:3a:d8:51:b7:51:c2:5c:7a:50:ea:
                    54:b8:08:9d:bf:e2:c9:3f:ed:09:c3:bb:04:bb:fa:
                    7a:18:65:bd:f1:2d:24:9e:79:d0:96:61:31:68:7b:
                    02:bf:f0:6b:f1:4a:d5:e2:cc:62:45:aa:df:7e:82:
                    f7:57:51:7b:a5:ad:ec:38:ce:55:a8:c2:59:48:de:
                    4c:b7:a9:ac:ec:cf:2a:27:1e:f8:d0:a6:fd:ca:7d:
                    4b:d6:8b:92:61:51:cd:25:3b:79:ae:4c:32:05:95:
                    03:9d:0d:6a:10:fb:fc:66:d8:f6:7d:a7:88:c4:9b:
                    7d:20:68:e1:0f:53:ca:85:70:f0:2c:20:68:35:71:
                    fe:88:e4:4f:7c:94:c7:7a:72:23:d6:c6:3f:22:f5:
                    43:76:b2:e7:96:ce:80:e6:35:26:1f:87:8d:54:91:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:41:C5:D9:76:F7:AE:0E:7C:FD:B6:8A:8E:3A:95:E6:51:20:78:33
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136382e3232372e37342e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:41:60:d6:b7:d8:01:76:83:35:ed:d5:da:1a:6c:ab:06:9b:
         b7:9a:b5:0d:e4:42:20:b8:75:e3:e6:f7:e1:a2:08:a6:a5:7e:
         f1:c7:0e:0c:2b:47:a9:0e:69:55:5a:90:e5:12:17:f9:7e:bc:
         85:6f:60:c3:42:4d:b7:79:da:a6:08:b6:42:14:51:12:be:c6:
         cb:7f:bd:52:ef:0f:b6:11:04:4d:c9:cf:ef:10:86:f8:dc:47:
         e9:6a:23:f4:fa:49:07:d0:94:39:72:35:28:74:b4:e1:df:b6:
         eb:e4:1b:01:00:5d:fb:75:c8:e9:63:b2:28:8d:55:d6:b2:23:
         e6:3b:a2:7e:f6:18:66:2c:f4:a7:18:23:ad:40:b0:e4:14:5c:
         84:0f:14:3f:37:ac:92:4f:9d:1b:f7:e0:ae:95:4c:b6:47:76:
         04:b8:54:1f:a2:80:74:96:c2:47:18:44:9f:96:42:55:cf:76:
         11:ec:c1:89:7f:d7:34:a8:bc:48:3b:6f:83:07:fe:07:ee:af:
         82:b6:9e:5f:ed:36:f4:9e:17:88:cd:b7:16:46:ce:3b:05:f9:
         fb:04:59:40:90:3b:1f:7f:b8:28:1f:20:5d:de:07:4f:cd:42:
         a7:07:7c:02:b1:f2:d6:b1:89:8e:2d:a3:8c:75:eb:99:e3:6a:
         bf:82:5c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:06 2026 by rpki-client