Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52674.roa
File:                     AS52674.roa (raw, json)
Hash identifier:          1CZ3m9XaJArBp6ddvi43fm009svaPexp4Am97MNA+fM=
Subject key identifier:   A9:44:27:4C:EA:9A:41:C7:C1:CD:FE:4E:42:39:D8:13:97:A5:13:48
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       16F95E30C6847AC15F8B13CAD157AD92E212C55C
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52674.roa
Signing time:             Wed 11 Feb 2026 23:36:07 +0000
ROA not before:           Wed 11 Feb 2026 23:31:07 +0000
ROA not after:            Wed 10 Feb 2027 23:36:07 +0000
asID:                     52674
IP address blocks:        131.161.40.0/22 maxlen: 24
                          168.227.236.0/22 maxlen: 24
                          177.67.88.0/22 maxlen: 24
                          2804:1d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f9:5e:30:c6:84:7a:c1:5f:8b:13:ca:d1:57:ad:92:e2:12:c5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Feb 11 23:31:07 2026 GMT
            Not After : Feb 10 23:36:07 2027 GMT
        Subject: CN=A944274CEA9A41C7C1CDFE4E4239D81397A51348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:d2:93:3f:ff:32:9e:a4:2c:c7:ad:42:ca:
                    3a:0b:51:5e:ff:9c:aa:48:1b:21:99:ee:85:77:ea:
                    3e:7b:56:c9:96:bb:4e:67:64:89:45:db:4a:bd:52:
                    a0:17:3d:5a:4c:4a:1b:d8:dd:6f:0a:ba:3b:63:d9:
                    ef:52:b6:f8:85:31:9e:1d:4a:12:a1:4d:cb:9c:41:
                    94:a4:ad:db:01:f0:db:73:d9:59:30:9b:de:01:1b:
                    87:2f:c2:4f:04:06:8f:f1:46:c5:6b:8d:00:f8:bd:
                    40:2e:38:05:cd:b3:b3:b2:5c:03:5d:50:13:64:dc:
                    3f:4f:84:e3:aa:67:8e:99:71:fb:11:53:9a:2e:76:
                    fe:eb:7b:a8:72:4a:c7:be:2b:5b:75:29:21:e2:07:
                    cb:60:fb:02:6b:95:01:e8:85:9b:9b:0b:30:ed:42:
                    33:7f:e2:a5:66:d5:77:6c:4f:d2:82:53:0d:51:d0:
                    31:8a:de:93:d5:63:4c:ea:c9:ac:43:5d:48:1d:bc:
                    fb:88:b8:0c:52:7a:72:7a:cf:e2:fd:e7:45:0d:87:
                    6a:8d:2e:49:57:91:f8:95:21:21:17:2f:62:ca:69:
                    34:55:72:84:80:f6:ec:b5:46:99:76:f5:16:8e:73:
                    b7:a2:9e:8e:0c:89:a2:00:e9:46:0d:a5:45:3f:7b:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:27:4C:EA:9A:41:C7:C1:CD:FE:4E:42:39:D8:13:97:A5:13:48
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.40.0/22
                  168.227.236.0/22
                  177.67.88.0/22
                IPv6:
                  2804:1d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:e5:e8:3e:b2:7b:9b:b8:e2:c9:bf:ef:33:5a:26:ac:9e:
         ec:c7:29:f2:87:68:20:0b:1a:b8:cb:50:ab:b7:f9:e4:5d:c1:
         e0:4d:d1:c4:2b:ce:7c:9c:0a:34:bb:34:9c:6f:ad:55:ae:1d:
         3e:5a:f6:32:a2:98:d0:d8:69:52:6f:6f:2c:dc:49:ea:4f:0d:
         bb:fa:c3:94:d1:da:b9:ab:58:94:98:e9:22:8e:82:cf:0b:f0:
         3e:5b:be:cf:ed:d8:8d:0b:a2:c2:0b:b6:dd:79:ad:57:40:09:
         63:00:3c:8e:ab:fc:08:9f:a9:ca:1f:ad:de:57:c9:2a:28:0f:
         b8:0c:dd:d8:6e:03:4a:30:3f:b4:e2:9c:9c:68:86:15:82:68:
         17:83:dd:7f:75:9e:7c:82:00:cd:8b:ea:02:c4:08:e1:88:a3:
         cd:8c:58:58:b4:46:fc:5c:be:25:5f:46:1b:02:9d:aa:75:6a:
         f0:b6:c4:50:d5:4a:2f:a8:74:44:70:db:f1:d9:a0:c8:6d:75:
         23:a0:3d:14:8c:f0:07:ef:1b:a3:4e:0f:06:77:85:23:a9:79:
         17:ff:00:f3:8e:8c:32:60:2c:eb:4b:c9:1f:62:7a:fc:b2:83:
         d1:6a:c8:e6:a6:5f:fe:30:cd:43:5d:34:bf:85:2e:92:21:2f:
         22:1a:3c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:59 2026 by rpki-client