Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa
File:                     3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa (raw, json)
Hash identifier:          REEn9lNNtcNmeMou9GAOKfpsvjokMB6BOUoozqjbuDQ=
Subject key identifier:   79:59:1D:3A:5D:5B:46:A4:AA:B6:26:2A:A7:9E:B4:7D:63:F4:1E:72
Certificate issuer:       /CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
Certificate serial:       2B4BC328F886276013195FF92900B492A8584767
Authority key identifier: EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa
Signing time:             Thu 05 Feb 2026 14:11:48 +0000
ROA not before:           Thu 05 Feb 2026 14:06:48 +0000
ROA not after:            Thu 04 Feb 2027 14:11:48 +0000
asID:                     264881
IP address blocks:        168.227.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl
                          rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4b:c3:28:f8:86:27:60:13:19:5f:f9:29:00:b4:92:a8:58:47:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA3BF4282B2E55EC948E8D55C9C500F53DD2E574
        Validity
            Not Before: Feb  5 14:06:48 2026 GMT
            Not After : Feb  4 14:11:48 2027 GMT
        Subject: CN=79591D3A5D5B46A4AAB6262AA79EB47D63F41E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:98:14:90:24:e1:55:2e:30:69:69:5a:15:95:
                    8e:52:92:04:e5:de:02:7b:f2:b7:ef:8b:7f:c1:67:
                    f8:9c:90:6a:fb:50:2b:bd:1a:1d:a6:d5:4d:5d:dc:
                    86:44:d0:a2:90:3c:b5:02:36:2a:ab:50:21:08:0b:
                    a5:c0:a4:f7:98:e8:da:d4:11:99:35:93:4f:82:cf:
                    b5:d2:28:67:7e:38:d7:19:fb:fa:fd:c4:d6:81:43:
                    c5:84:16:fb:cf:59:8c:2a:c5:6b:49:d9:45:0f:8a:
                    c6:36:87:b1:87:cc:c0:30:b2:23:4a:fd:42:55:a1:
                    47:9e:72:e6:32:39:bb:69:63:57:f5:c6:76:71:65:
                    9b:e8:6c:14:7a:4b:66:36:0e:88:b9:63:e2:61:99:
                    e3:bc:9a:f8:cc:10:78:91:81:eb:e6:08:5b:16:cb:
                    43:e3:4c:45:2f:c3:4e:d9:eb:e0:22:20:27:30:30:
                    98:c7:81:18:35:bc:a3:17:0e:a7:61:e8:35:c8:b6:
                    ff:03:2c:f2:f9:91:02:47:8b:21:dd:ff:69:05:79:
                    e6:7e:95:09:47:80:48:0b:dd:37:98:bb:76:4a:fe:
                    90:37:fe:19:ce:49:4a:e5:31:4f:76:19:81:03:e5:
                    75:07:af:4f:8c:b7:4c:05:83:0c:1e:2b:95:8e:67:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:1D:3A:5D:5B:46:A4:AA:B6:26:2A:A7:9E:B4:7D:63:F4:1E:72
            X509v3 Authority Key Identifier:
                keyid:EA:3B:F4:28:2B:2E:55:EC:94:8E:8D:55:C9:C5:00:F5:3D:D2:E5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA3BF4282B2E55EC948E8D55C9C500F53DD2E574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SSqTpiCLEJnD1eo6tooSsQ3Lp2LRL23tGN73DrDFgc6/1/3136382e3232372e3137322e302f32322d3332203d3e20323634383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:71:ca:c7:c0:8e:6c:26:fb:7a:fb:03:e6:db:d8:23:97:
         d5:62:8c:c5:27:92:18:4a:a1:ac:8c:b9:dc:4c:c6:76:42:53:
         ae:fb:b0:04:6f:65:ff:5f:f5:b0:ee:fa:40:e6:91:d1:eb:1e:
         a4:5c:e8:22:88:20:4c:e6:9a:8d:41:a4:84:b4:16:5f:a6:18:
         97:12:7b:a4:85:1d:c7:20:f2:31:72:94:5c:23:16:47:19:34:
         f0:ad:b5:69:af:6a:19:89:0e:83:0b:89:2a:47:94:22:f8:09:
         8a:b1:bc:a1:35:56:95:45:09:64:0a:e6:1a:be:4d:41:de:da:
         34:cc:56:d5:cf:b7:05:f0:21:1b:69:31:87:1c:aa:28:f9:0c:
         c2:1d:7e:14:c1:96:f0:e8:9d:72:54:2a:00:f0:92:f5:1c:67:
         6e:0b:c9:3a:82:aa:e2:0f:57:d7:bf:2b:9b:03:1a:0a:26:07:
         e9:c3:df:c9:23:f5:97:96:b1:0f:d9:9e:61:d8:8c:8c:d3:38:
         d1:0c:c5:2b:0a:2a:16:2f:c5:13:a7:b0:ad:76:99:ff:2d:67:
         46:52:68:ac:02:61:62:dd:6b:28:11:c3:2a:7f:e0:4f:e7:2e:
         eb:a5:c1:df:a3:90:56:a6:f6:96:d4:f4:f8:fc:69:13:0c:00:
         79:c7:23:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:51 2026 by rpki-client