Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
File:                     AS52866.roa (raw, json)
Hash identifier:          9lIoS1hgNbpKcRCom0WoCog1XpJV0huLSnrtCboImlI=
Subject key identifier:   16:54:31:BA:E8:F8:EF:35:7C:CA:4A:9A:41:CD:82:3A:BA:84:5A:76
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       3433D5C5E18F7ADFC8D33AEA417442423A3D79D6
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa
Signing time:             Wed 11 Feb 2026 23:36:08 +0000
ROA not before:           Wed 11 Feb 2026 23:31:08 +0000
ROA not after:            Wed 10 Feb 2027 23:36:08 +0000
asID:                     52866
IP address blocks:        131.100.128.0/22 maxlen: 24
                          138.94.112.0/22 maxlen: 24
                          170.81.244.0/22 maxlen: 24
                          177.125.24.0/22 maxlen: 24
                          186.233.220.0/22 maxlen: 24
                          2804:bdc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:d5:c5:e1:8f:7a:df:c8:d3:3a:ea:41:74:42:42:3a:3d:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Feb 11 23:31:08 2026 GMT
            Not After : Feb 10 23:36:08 2027 GMT
        Subject: CN=165431BAE8F8EF357CCA4A9A41CD823ABA845A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:21:c1:a0:58:58:3c:2e:79:ec:15:f3:43:
                    ee:fc:dc:40:c7:64:20:eb:93:95:5a:cb:93:71:8b:
                    6a:f0:ef:b2:fd:1f:6a:97:ec:ef:dd:44:59:bf:8e:
                    f9:59:da:95:aa:24:db:3b:b8:53:17:14:5d:b7:ec:
                    d8:8a:45:2a:f8:d6:84:9f:dd:6a:5b:de:11:4d:61:
                    04:05:43:17:f1:df:1f:ec:6e:93:0b:0a:77:42:8a:
                    a3:75:bb:d4:64:ed:98:c4:05:c6:b0:5c:8e:24:6e:
                    9d:e5:ea:a6:90:c9:b5:b1:04:c5:1f:c2:3b:34:c5:
                    ce:6c:c7:42:a5:cb:62:fd:02:e5:79:ac:24:1a:ae:
                    6d:68:8d:78:45:61:d7:e1:55:1c:7a:9c:5c:f1:33:
                    c1:cb:d9:bc:99:ea:1d:4e:70:d0:f4:b0:8b:f6:67:
                    fb:39:65:2b:b7:7d:24:09:82:ca:e9:1d:31:fa:e9:
                    9e:8d:23:ba:5b:27:a2:7c:fc:5e:5f:14:a4:9b:a8:
                    0a:f9:c5:21:af:32:a6:85:a0:32:bb:81:df:cf:6c:
                    c7:57:52:ae:5c:b4:0e:9d:d1:cb:1d:91:fe:cd:8b:
                    f1:2c:90:aa:55:8a:4e:70:1d:cc:8b:de:c7:86:4a:
                    48:d7:bb:2a:f9:de:46:79:d7:41:14:fe:52:d3:be:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:31:BA:E8:F8:EF:35:7C:CA:4A:9A:41:CD:82:3A:BA:84:5A:76
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.128.0/22
                  138.94.112.0/22
                  170.81.244.0/22
                  177.125.24.0/22
                  186.233.220.0/22
                IPv6:
                  2804:bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:43:d9:92:99:3b:87:01:25:5e:64:ca:a8:28:5f:d1:f1:32:
         dd:1c:79:28:11:f7:48:99:05:32:36:10:13:c1:be:a8:f6:2d:
         bf:86:3f:aa:56:72:47:9e:ab:a8:2e:df:45:33:5f:19:9b:97:
         82:88:29:86:33:b6:15:54:4d:78:93:ec:03:6a:10:40:37:80:
         85:62:94:d3:36:60:45:b1:15:44:e7:e9:4c:ae:53:61:88:98:
         44:aa:83:e2:4d:d7:a7:92:7f:d9:c0:3c:80:ac:83:67:d7:76:
         24:f5:bb:23:98:bf:d5:32:ef:ee:e5:0d:eb:3d:8c:b5:b4:aa:
         b9:1f:1a:c7:79:99:20:59:85:4d:32:f7:08:2e:9c:f1:b5:d6:
         50:ec:db:5c:08:ee:92:96:6b:1c:69:3a:4e:5f:81:cd:d5:2d:
         da:79:fb:18:a2:10:c7:1a:bd:0e:61:c6:a4:bd:9f:ed:5d:49:
         fd:3e:9a:df:43:30:1d:2f:7c:20:35:73:35:6a:df:8d:df:5f:
         d7:6b:d6:f5:7d:23:b3:93:d8:b4:5b:34:85:d6:07:cd:7b:a3:
         9c:9f:8f:61:2d:ed:48:21:28:3b:cd:a1:99:08:51:2a:e4:70:
         6e:60:9f:d2:fb:e5:7f:24:c9:c4:05:52:02:cf:29:9f:77:2e:
         94:61:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:19:50 2026 by rpki-client