Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa
File:                     3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          Tx/WETKWk8Sq05ZRvj0E4FM6hpfQcquiApB6f9muGi8=
Subject key identifier:   3F:CD:E1:D7:C6:FC:89:D8:30:E0:38:4D:41:A2:21:5C:89:80:94:0F
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       5450513A97805D8773E1859C603D0FE3E83E478C
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:38 +0000
ROA not before:           Thu 05 Feb 2026 04:38:38 +0000
ROA not after:            Thu 04 Feb 2027 04:43:38 +0000
asID:                     262642
IP address blocks:        168.205.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:50:51:3a:97:80:5d:87:73:e1:85:9c:60:3d:0f:e3:e8:3e:47:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:38 2026 GMT
            Not After : Feb  4 04:43:38 2027 GMT
        Subject: CN=3FCDE1D7C6FC89D830E0384D41A2215C8980940F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:d6:34:54:03:a2:7a:e3:b7:57:31:f3:9a:
                    42:5c:21:6e:a7:14:a1:b9:95:b4:5f:1a:56:da:7a:
                    96:4a:ca:cc:3c:60:8b:57:82:47:2a:8d:3f:fd:7c:
                    8d:7d:26:1c:9a:f2:37:6e:97:bb:db:0e:ef:a5:f9:
                    0b:83:9b:23:92:66:9d:ec:3e:ac:3a:44:eb:99:6a:
                    0c:39:ab:4f:43:38:ee:83:0c:86:b4:ef:52:74:71:
                    12:cd:88:9b:72:2c:04:0a:e9:59:7d:be:f4:28:05:
                    25:d0:c0:fb:6e:b9:bf:dd:a6:17:a6:1e:cb:31:d6:
                    9d:ea:62:54:0c:d9:f5:98:47:01:4e:d1:71:fb:94:
                    87:2f:b8:70:25:67:1a:46:16:dc:2e:4d:03:cb:05:
                    cc:7c:09:5f:4a:b8:d5:f8:05:1d:b0:b9:fc:27:1c:
                    be:2b:1c:5c:71:bf:9c:0d:d2:f2:1a:29:19:f3:c3:
                    92:43:c9:2d:c7:f1:a7:cf:be:27:d2:ba:9b:74:ac:
                    8b:82:f2:b8:fd:ba:18:b5:03:02:de:69:2b:bb:d3:
                    4e:25:f7:d6:6d:cb:15:7d:bd:38:91:57:6a:81:1c:
                    e1:e2:7d:99:b9:bc:ef:4d:3f:93:a6:72:6c:4a:cf:
                    f5:e4:f9:52:b5:fb:04:b2:13:9e:40:46:86:26:08:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CD:E1:D7:C6:FC:89:D8:30:E0:38:4D:41:A2:21:5C:89:80:94:0F
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:54:16:c9:f7:fd:35:c9:47:54:50:40:bb:f1:c7:f5:b2:
         22:61:ff:be:94:11:28:da:21:5e:6c:4e:9a:05:00:0e:db:b2:
         74:cc:5b:5d:37:33:48:b6:4b:c5:86:a4:dd:6f:8b:fd:cc:22:
         7e:61:6e:0c:bc:34:9b:69:d8:bd:1d:07:8a:17:bb:c4:4e:80:
         39:9a:9e:f9:81:c1:1c:34:37:73:5d:e8:65:62:0b:a2:75:56:
         77:26:b6:d4:63:17:29:ef:ff:c3:31:35:3a:f7:56:47:d1:ed:
         70:fb:7d:8b:a6:4d:b6:8d:64:96:d2:82:0b:2a:d8:85:29:92:
         64:5f:64:3e:93:c5:eb:52:1f:35:94:9d:2c:04:55:a0:09:31:
         00:60:a9:fc:f9:99:0c:13:8f:f0:6a:d6:75:9f:49:b1:a2:da:
         c6:90:c3:83:03:86:17:7a:e2:7a:0d:86:a2:60:47:64:42:43:
         5b:1a:20:15:3d:69:6a:09:5a:ac:cd:3f:1b:a4:79:3d:3f:74:
         78:7b:da:cc:61:23:c3:db:07:a3:86:f7:cd:4d:f1:db:fe:91:
         2f:3a:f7:20:40:a6:c1:54:a6:f4:d0:e9:a2:6b:49:da:7e:58:
         9e:79:42:0e:4e:cd:07:cb:37:b4:e9:ea:0f:b6:29:58:9a:21:
         8e:00:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:09 2026 by rpki-client