Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
File:                     3139312e372e3133362e302f32312d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          ehOw3hY8hSah0Bjoe8G/ozN/tOh09EBO1WahkcUUxb8=
Subject key identifier:   06:2E:84:57:AC:A6:30:43:FA:A5:3C:90:D2:0C:FE:96:BD:A5:B8:FA
Certificate issuer:       /CN=B8BF0367B559121777A21A84D953A717D6E82AEA
Certificate serial:       0F56C992ABC3DA8F8D11865AECAB5D8BEC541874
Authority key identifier: B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa
Signing time:             Thu 05 Feb 2026 06:12:00 +0000
ROA not before:           Thu 05 Feb 2026 06:07:00 +0000
ROA not after:            Thu 04 Feb 2027 06:12:00 +0000
asID:                     263321
IP address blocks:        191.7.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl
                          rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:56:c9:92:ab:c3:da:8f:8d:11:86:5a:ec:ab:5d:8b:ec:54:18:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF0367B559121777A21A84D953A717D6E82AEA
        Validity
            Not Before: Feb  5 06:07:00 2026 GMT
            Not After : Feb  4 06:12:00 2027 GMT
        Subject: CN=062E8457ACA63043FAA53C90D20CFE96BDA5B8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:75:d2:b9:eb:df:d4:12:c6:8b:f3:07:9c:
                    97:4c:a4:11:01:0f:47:33:fa:95:63:45:33:c6:0b:
                    16:70:97:d9:b2:b5:9c:2a:fd:4b:3d:ee:5f:3a:76:
                    b4:e6:e6:bc:2c:52:c7:ca:5c:27:f2:01:4c:27:f1:
                    13:c6:1d:1a:11:1c:78:92:e8:d8:57:66:51:46:1c:
                    dc:d1:ed:16:58:57:40:db:db:d9:bf:12:73:26:57:
                    26:e8:ae:54:41:75:ff:b9:3a:50:4c:24:58:a1:02:
                    7c:6a:6c:a5:04:66:98:ac:b5:55:d8:1a:b3:59:79:
                    20:68:ab:06:03:a8:33:d3:e1:72:11:bf:6d:e5:ac:
                    c1:51:13:b9:fc:09:0e:90:43:8f:1a:ef:58:02:1d:
                    18:92:5f:91:dc:9a:bd:a0:8b:ec:4b:dc:00:62:96:
                    6b:7e:6b:2c:9c:36:47:9f:89:11:69:5e:2a:7f:14:
                    4b:26:08:2d:f9:4a:6d:a6:2e:4e:ac:69:68:0d:30:
                    7d:95:1a:6f:f4:3d:27:ed:77:21:c0:3e:ea:73:44:
                    39:21:f1:fa:86:18:63:cc:bf:ee:d2:95:ff:9f:3d:
                    fc:1a:db:64:e3:bf:40:c8:8e:9b:5d:39:4b:23:ee:
                    1c:fe:1c:7f:70:63:1a:1c:6e:6a:d9:b8:6a:07:9f:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2E:84:57:AC:A6:30:43:FA:A5:3C:90:D2:0C:FE:96:BD:A5:B8:FA
            X509v3 Authority Key Identifier:
                keyid:B8:BF:03:67:B5:59:12:17:77:A2:1A:84:D9:53:A7:17:D6:E8:2A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/B8BF0367B559121777A21A84D953A717D6E82AEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF0367B559121777A21A84D953A717D6E82AEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/1/3139312e372e3133362e302f32312d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:a0:8a:51:4e:39:be:fb:55:a0:6d:6f:23:cf:04:4f:03:
         ca:e3:b1:e1:b3:aa:08:64:fb:10:8a:c5:16:5c:4a:2e:1e:2a:
         91:a5:97:0d:a3:9a:4e:c2:f2:f6:a9:40:10:77:cb:59:4b:74:
         f2:e0:14:06:73:6c:38:d4:03:2e:2b:29:0e:26:a2:62:d7:49:
         6b:24:2f:ec:ce:9e:dd:4e:92:c2:ce:83:e4:64:4f:9f:74:c9:
         da:cf:d4:14:77:bd:24:75:91:97:bb:63:59:b2:74:f8:d0:80:
         97:9d:11:48:de:a3:19:22:77:10:71:32:1a:60:b0:44:38:6c:
         07:8f:00:c7:df:58:d5:c9:3d:4c:f5:3b:e9:8c:70:60:c6:96:
         0d:98:fd:dd:eb:fd:5d:e4:cf:02:6e:c6:d9:77:36:e2:0c:43:
         39:22:9a:42:ef:b3:45:af:82:5c:27:6c:9f:b7:6d:67:bb:c1:
         c4:da:40:5d:1e:5f:f6:26:58:03:dc:b1:05:4b:a5:3c:f1:f2:
         59:ab:a7:6e:47:e9:8b:49:5e:2d:d5:75:3d:f1:36:38:14:6c:
         13:ba:f4:c9:2c:51:34:2a:2b:a2:76:a0:3d:68:0e:32:6f:cd:
         75:80:87:e2:bb:63:98:20:b4:29:56:75:cf:8b:c9:ef:6d:cd:
         db:62:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:55 2026 by rpki-client