Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa
File:                     3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa (raw, json)
Hash identifier:          jjEKAR49e2FmWzOsZqwS6K6qcfPFNnwg5B9l7dS82Hg=
Subject key identifier:   D4:91:AF:C6:A4:75:9A:B5:86:56:66:38:AD:07:80:9A:54:A1:74:DC
Certificate issuer:       /CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
Certificate serial:       20E54097D5DBEF0AEC69318DE03B42C719BBF461
Authority key identifier: 0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa
Signing time:             Fri 06 Feb 2026 06:26:36 +0000
ROA not before:           Fri 06 Feb 2026 06:21:36 +0000
ROA not after:            Fri 05 Feb 2027 06:26:36 +0000
asID:                     270785
IP address blocks:        189.51.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl
                          rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e5:40:97:d5:db:ef:0a:ec:69:31:8d:e0:3b:42:c7:19:bb:f4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Validity
            Not Before: Feb  6 06:21:36 2026 GMT
            Not After : Feb  5 06:26:36 2027 GMT
        Subject: CN=D491AFC6A4759AB586566638AD07809A54A174DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:d2:62:3d:fe:3c:73:3f:8a:4d:91:0a:f1:
                    6d:4b:cf:88:11:6d:23:4b:41:b6:e1:34:0f:6b:cc:
                    62:fa:9e:ea:df:94:c4:23:55:14:65:64:fb:70:5a:
                    4b:ce:75:f9:69:68:c3:57:98:bd:38:98:ad:28:1d:
                    ba:55:bf:0a:1a:69:c9:07:7f:e0:c1:71:10:a0:71:
                    79:0d:df:c1:50:5f:4a:88:a9:1c:5e:67:c5:09:79:
                    84:3d:be:29:12:fc:10:58:82:2f:d3:34:89:32:60:
                    a3:2a:d6:a6:e3:04:bb:64:bd:e0:63:3a:ff:7d:0f:
                    46:89:66:51:53:5e:f1:a5:44:35:d4:7e:10:16:9d:
                    0d:c0:da:86:b8:8c:a7:4c:f3:d5:1e:99:19:a5:20:
                    95:f3:8e:d1:a3:79:f7:0d:6b:4b:cd:a7:2f:cc:b6:
                    00:b5:34:61:d5:04:2a:13:0d:e4:4a:21:81:fa:2b:
                    12:d8:a5:12:32:ea:43:1e:06:c3:73:35:e2:64:91:
                    0b:7b:76:f5:17:7e:21:74:c2:6e:1e:d4:86:e0:6b:
                    76:99:ea:56:99:a1:49:d8:ea:45:ba:15:02:ff:84:
                    8c:d8:a2:29:6b:c5:02:e2:2f:3c:58:3f:75:3b:21:
                    99:56:86:e2:e6:cb:7e:0e:51:aa:6c:ca:95:66:c7:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:91:AF:C6:A4:75:9A:B5:86:56:66:38:AD:07:80:9A:54:A1:74:DC
            X509v3 Authority Key Identifier:
                keyid:0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/3138392e35312e3136302e302f32322d3234203d3e20323730373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:79:cc:81:4f:51:74:85:7c:ed:77:0a:76:da:c6:85:32:
         ed:9c:ff:b2:16:70:2d:fc:41:b3:af:89:7a:e3:d9:21:9b:61:
         fc:39:93:52:98:cd:30:f5:19:50:43:2a:d7:ea:4f:77:15:15:
         ac:1e:db:9c:85:69:f1:a9:dd:0f:ec:d0:69:ef:e6:2a:88:70:
         8a:a6:a7:e1:20:ec:10:8a:f3:fe:89:96:5c:78:ad:ea:4b:cd:
         a1:02:2d:4d:ba:3c:84:b8:39:0f:de:8c:c2:13:b7:c7:88:70:
         9b:7c:d1:97:83:6b:85:2d:e5:c8:d5:22:e7:ab:4d:d2:db:d0:
         00:72:29:2b:72:a5:14:0f:ed:af:39:f7:4b:a0:99:33:14:98:
         35:37:17:15:a4:9e:a9:96:df:2d:cd:81:d8:0b:de:9d:e4:ac:
         43:1f:8e:ed:af:6a:f3:4b:9a:b2:ff:db:eb:8b:16:9e:94:c6:
         e7:d8:f6:71:c8:c9:66:42:04:3a:dd:e6:11:5e:2e:e3:b2:93:
         71:d7:e0:e0:c6:6f:66:f3:d4:8e:b2:75:02:ed:36:f4:ae:7a:
         e8:39:c7:f1:33:c6:f8:43:cd:5d:f2:c6:4c:99:a3:df:98:ef:
         b6:68:5d:72:2d:9e:d3:21:25:97:48:9a:8a:b8:32:42:f3:0d:
         be:71:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:59 2026 by rpki-client