Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          Upc2t48mABVc/B3tiHVEZpNtKpbkYjDV3xXRghrciVg=
Subject key identifier:   D9:A6:11:40:6A:5C:A1:2C:F4:79:A8:C4:57:82:1B:44:94:DE:3D:72
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       1F1846D2C856B3EA2A643E4655F6CD9895D9782C
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa
Signing time:             Wed 04 Feb 2026 23:53:36 +0000
ROA not before:           Wed 04 Feb 2026 23:48:36 +0000
ROA not after:            Wed 03 Feb 2027 23:53:36 +0000
asID:                     270652
IP address blocks:        190.11.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:18:46:d2:c8:56:b3:ea:2a:64:3e:46:55:f6:cd:98:95:d9:78:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Feb  4 23:48:36 2026 GMT
            Not After : Feb  3 23:53:36 2027 GMT
        Subject: CN=D9A611406A5CA12CF479A8C457821B4494DE3D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:06:bb:8d:3f:91:96:38:49:56:40:88:30:
                    90:d8:06:93:4a:01:bf:3f:51:b1:13:66:7a:2e:e5:
                    70:9a:01:89:6c:35:6d:a2:72:dc:b6:ef:dc:d1:bd:
                    aa:3e:24:b7:c4:73:c4:2e:55:ae:b6:47:f7:dc:23:
                    28:6f:2c:94:c5:f5:dc:cc:3e:e0:7a:7d:4e:cd:be:
                    9c:72:32:2f:2b:5b:96:0e:70:11:93:2a:11:cc:6c:
                    7b:36:68:0c:31:b1:8b:df:49:f6:ad:b2:de:76:91:
                    a0:37:ca:45:9a:54:66:8a:11:92:17:fc:d7:0a:03:
                    fe:d5:86:6d:c4:0e:20:b0:bf:c0:e3:4a:ac:9d:ea:
                    c0:fe:e8:be:db:8d:f7:3d:61:d2:11:af:e7:58:12:
                    d8:a1:ca:1f:c9:37:a6:f4:0f:ec:a3:92:8a:8e:92:
                    d8:da:79:be:7c:4b:21:c8:0c:c7:75:16:4f:ad:27:
                    27:6b:dc:61:35:63:a8:de:27:b2:f9:53:1e:76:b4:
                    8e:8c:b8:7e:61:62:8d:a7:8a:7c:a1:04:0f:e8:17:
                    2f:de:71:dd:65:52:5a:fd:ca:42:8e:c5:56:e6:30:
                    60:9f:89:88:06:78:37:09:e2:46:9c:d0:c5:92:5e:
                    a4:5c:7c:8a:cd:3d:5d:a5:7f:45:8c:0a:bf:d4:1c:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A6:11:40:6A:5C:A1:2C:F4:79:A8:C4:57:82:1B:44:94:DE:3D:72
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3231302e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:7c:c0:1e:5f:04:66:6f:98:5f:e8:3c:99:f0:1b:22:c9:
         6e:e9:de:2d:91:5f:93:4e:9c:d0:4a:19:c8:37:0d:b3:43:16:
         08:b1:22:ab:0d:ac:86:38:79:65:0b:8d:80:9a:39:d8:56:0a:
         2c:d4:fe:e7:7b:01:5f:b7:66:a0:56:dc:62:1e:cb:ab:4d:62:
         56:83:8a:45:74:62:63:9e:b8:e4:3c:85:e8:b5:0c:0b:16:fa:
         ff:8f:59:27:de:ca:a4:42:d4:45:3f:23:c9:dc:26:68:08:b1:
         c3:69:b3:d2:2d:99:ec:5d:cf:36:0d:e8:11:b9:95:ec:20:df:
         f2:95:48:34:fe:c0:0d:a3:b6:c7:86:30:0b:6a:c1:c0:f4:18:
         38:7e:24:46:85:1a:26:5b:ac:21:63:39:9f:34:f0:07:1e:6c:
         d2:af:5a:77:6d:fc:31:75:73:68:40:31:f9:96:c7:8a:97:96:
         79:b4:a4:11:d9:35:e8:2e:b7:89:4d:63:37:b4:1e:b5:0c:fd:
         95:0a:81:05:73:1c:c9:1c:f4:fe:b8:19:0c:b0:f3:b9:93:10:
         bc:e4:76:5b:9c:89:cc:29:85:c2:70:73:92:58:fe:55:4e:78:
         4c:66:cf:07:4e:11:b5:71:7b:88:1f:d8:4e:db:59:38:d4:10:
         92:3a:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:01 2026 by rpki-client