Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa
File:                     3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa (raw, json)
Hash identifier:          QJ6nkEvEM/1KIJWXLCzSvDVdtEdwh9Rqq1fjQWB+jcc=
Subject key identifier:   63:C9:EE:0D:93:EA:D7:8C:0C:1B:27:9C:CB:1F:D6:18:4F:10:AA:6A
Certificate issuer:       /CN=29693FC359A5A86688559CF55626142C53AF60AF
Certificate serial:       35896D17BF30495D4A649832E1F34FF55E3EFEC7
Authority key identifier: 29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa
Signing time:             Fri 06 Feb 2026 01:34:10 +0000
ROA not before:           Fri 06 Feb 2026 01:29:10 +0000
ROA not after:            Fri 05 Feb 2027 01:34:10 +0000
asID:                     264926
IP address blocks:        168.228.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:89:6d:17:bf:30:49:5d:4a:64:98:32:e1:f3:4f:f5:5e:3e:fe:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29693FC359A5A86688559CF55626142C53AF60AF
        Validity
            Not Before: Feb  6 01:29:10 2026 GMT
            Not After : Feb  5 01:34:10 2027 GMT
        Subject: CN=63C9EE0D93EAD78C0C1B279CCB1FD6184F10AA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:d3:fa:3e:2b:1b:cf:3a:71:5b:9e:ad:55:
                    75:88:87:f1:0d:ab:4a:b3:f1:17:c3:56:33:1b:35:
                    38:17:12:a1:c6:33:0b:1a:1d:91:2c:44:cf:41:96:
                    24:b6:82:35:44:6a:3e:4a:c1:b0:4c:8f:15:8a:2e:
                    9f:51:47:fc:f5:e4:55:6c:cb:31:b9:ef:80:3f:82:
                    74:1a:aa:36:31:5d:47:97:ec:64:e1:a6:e0:33:db:
                    8c:64:2e:21:5a:4e:d6:d1:05:2f:56:e7:b3:45:32:
                    15:45:89:e3:11:b4:c5:ba:8b:d5:4a:61:8e:7e:a5:
                    4f:1e:ae:77:8e:b2:de:aa:a9:43:66:1f:17:c8:38:
                    cd:a1:4d:ca:4a:16:e8:cf:80:52:14:ae:bc:44:e5:
                    fe:c5:85:23:a2:27:8c:7f:b8:f1:e1:2b:0b:78:f6:
                    ff:e4:0c:43:1a:c7:18:8f:80:25:15:6f:3e:44:d0:
                    d7:6e:48:fb:44:b6:1f:b7:79:28:3a:1d:2f:8c:92:
                    fc:8d:a6:98:4f:72:3a:b5:f0:a5:15:72:0a:4a:cd:
                    1f:21:ac:92:80:3d:01:c0:c0:25:21:ca:28:41:03:
                    7f:f6:d5:d2:5a:b0:d0:fb:9e:d7:16:7f:40:75:58:
                    66:7d:b6:2f:43:b3:3b:ac:60:bd:40:3e:3d:fd:3b:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C9:EE:0D:93:EA:D7:8C:0C:1B:27:9C:CB:1F:D6:18:4F:10:AA:6A
            X509v3 Authority Key Identifier:
                keyid:29:69:3F:C3:59:A5:A8:66:88:55:9C:F5:56:26:14:2C:53:AF:60:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/29693FC359A5A86688559CF55626142C53AF60AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29693FC359A5A86688559CF55626142C53AF60AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/1/3136382e3232382e3137362e302f32332d3233203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:5d:b3:3c:e2:e9:6f:5a:3a:b5:0d:64:92:9e:c5:40:49:86:
         aa:e1:10:5a:c4:f7:8d:2d:f6:43:ee:43:2f:48:a2:99:be:23:
         91:98:0a:aa:e1:a4:22:5a:68:07:89:47:0c:61:0c:d1:14:a2:
         63:de:f7:ea:8f:50:23:2a:ce:16:a4:80:3e:c5:60:e0:3b:5e:
         06:2f:d4:1e:0b:a6:ec:5b:f6:e5:d0:33:51:32:73:d9:4d:45:
         c4:e2:76:2b:4c:34:5e:87:a2:ec:4e:7d:be:84:31:81:9c:9f:
         c1:b5:4a:85:01:af:4d:3d:4b:e5:40:98:2a:79:c6:36:d4:de:
         f0:24:bc:d7:89:46:6f:46:b2:28:7d:9b:72:ef:e0:c6:56:35:
         7d:44:1a:11:94:dc:c0:85:d7:f2:60:4d:0b:c2:82:47:1b:82:
         3c:7c:d0:da:0a:e1:ec:fd:bf:15:cd:b8:ad:b2:1b:db:d8:73:
         b4:d4:97:8c:ab:a4:33:a5:a2:22:ae:c7:e8:bb:28:4c:67:8d:
         dc:30:6c:ec:d6:67:e4:b2:e1:42:1c:91:e3:b4:38:9a:ab:bb:
         6b:50:0e:99:9e:cc:fb:48:07:43:81:68:c1:c3:00:c3:b4:f2:
         08:ce:a0:30:5f:4a:12:7f:3c:27:c4:ac:78:8b:2b:e9:4c:e9:
         eb:dd:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:22 2026 by rpki-client