Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa
File:                     3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          z2njSNmiXLaEzWUGWicxi4tfTv6R5NS7urpMPmuYrP0=
Subject key identifier:   56:9D:A1:27:DE:B2:B1:BD:DC:AE:16:5D:AE:AC:14:37:F3:44:BD:D1
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       08A27B605856F6FFEB9C5CD6C5D5A298FC137D87
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:38 +0000
ROA not before:           Thu 05 Feb 2026 04:38:38 +0000
ROA not after:            Thu 04 Feb 2027 04:43:38 +0000
asID:                     262642
IP address blocks:        168.205.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a2:7b:60:58:56:f6:ff:eb:9c:5c:d6:c5:d5:a2:98:fc:13:7d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:38 2026 GMT
            Not After : Feb  4 04:43:38 2027 GMT
        Subject: CN=569DA127DEB2B1BDDCAE165DAEAC1437F344BDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:91:00:fc:ea:09:42:e9:c9:f9:0a:d7:4a:
                    67:49:b3:49:9e:fb:7d:6a:62:5d:09:60:5c:c6:0b:
                    bb:46:ac:09:b1:75:da:19:a9:c4:df:c1:04:cd:b1:
                    8a:1a:de:ca:4d:c5:3f:be:f9:85:f9:eb:b6:41:2a:
                    81:82:60:26:8c:6b:39:0a:ab:06:5a:49:87:b0:3c:
                    ca:95:fe:ed:b8:9b:08:73:2b:97:2b:fc:53:28:a2:
                    8a:f4:db:e5:da:97:a9:d7:17:fb:24:cf:07:11:73:
                    d9:24:ca:94:20:f9:4b:a7:a2:14:67:a5:61:27:f7:
                    e3:4e:99:97:b3:bf:25:c0:b1:d4:8a:0d:70:6d:91:
                    ae:c7:de:9e:17:c5:28:bb:1b:62:ad:a5:f6:f3:34:
                    e2:e9:8c:32:83:bc:06:c9:6a:da:d4:11:c8:8e:12:
                    25:cd:59:4d:3b:ff:cd:95:94:94:dc:e5:6f:bb:27:
                    7d:c8:57:82:b9:ea:df:61:de:c3:2d:86:96:d6:97:
                    a0:2d:64:ac:53:7c:4f:c0:57:15:05:a7:67:ca:12:
                    a7:74:3a:ac:cf:f3:26:aa:c3:8c:8a:a6:26:52:92:
                    9b:50:61:3c:0c:6a:02:93:a5:42:53:54:eb:17:21:
                    9f:5d:94:f2:d6:3d:2f:d6:50:86:d2:32:4b:34:37:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9D:A1:27:DE:B2:B1:BD:DC:AE:16:5D:AE:AC:14:37:F3:44:BD:D1
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134312e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:15:07:0e:86:6a:60:94:07:5a:03:46:06:32:3b:2b:ff:06:
         93:e6:3e:fa:69:81:55:d2:27:17:54:7a:e8:90:8a:13:01:9c:
         b3:34:96:3c:f6:ba:35:b0:4a:69:fb:8e:47:4f:ac:68:70:4d:
         60:b8:25:9e:89:35:a1:25:d8:8e:db:f0:38:51:23:de:40:0a:
         ad:e6:bc:22:67:67:0b:87:2e:0c:9c:06:5f:2b:c2:a2:58:b6:
         30:a6:cc:dc:48:f8:00:e2:ef:71:7b:f5:69:0f:9f:ae:c8:26:
         ac:0f:61:f8:57:a7:fa:70:e6:88:21:4b:bd:d1:04:1c:84:02:
         01:73:90:be:16:23:74:e6:b9:8b:f4:bd:03:36:5d:f6:88:9d:
         76:89:4c:85:93:05:e7:9f:de:ef:ea:3a:bc:04:26:66:d2:a2:
         c4:0a:e4:ba:48:3e:7c:75:f9:31:07:4c:70:77:37:b9:f2:e9:
         37:b2:c3:79:a2:15:4d:67:e7:d2:de:3b:17:99:f7:16:d1:61:
         ca:f8:ff:ad:19:de:f1:7a:5d:01:e1:cf:03:19:cc:ee:bb:7f:
         b2:16:96:a5:b1:09:66:d4:fa:ef:2a:a8:95:eb:36:4b:b2:8c:
         86:5e:09:b5:e8:ac:22:90:f5:6a:c1:24:3f:9f:b7:5a:63:82:
         6d:38:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:46 2026 by rpki-client