Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa
File:                     3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          a3NSaf8O5rtF+nL3Dto1x7Af3yPAsVR18Cxc0K796x4=
Subject key identifier:   B2:FA:DB:E9:6D:0D:56:8B:C8:E3:4B:DE:98:80:16:F9:18:09:9B:E8
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       2B0E34494765C2C0642E363EEB63E790AEB2D1EF
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 06 Feb 2026 02:48:52 +0000
ROA not before:           Fri 06 Feb 2026 02:43:52 +0000
ROA not after:            Fri 05 Feb 2027 02:48:52 +0000
asID:                     22689
IP address blocks:        186.236.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0e:34:49:47:65:c2:c0:64:2e:36:3e:eb:63:e7:90:ae:b2:d1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Feb  6 02:43:52 2026 GMT
            Not After : Feb  5 02:48:52 2027 GMT
        Subject: CN=B2FADBE96D0D568BC8E34BDE988016F918099BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:6d:f6:4e:a8:4e:d1:3e:c0:5d:69:aa:cb:
                    34:4d:4e:90:36:6d:71:0f:f1:26:9a:f1:9f:15:bf:
                    a9:14:c9:8e:71:11:1c:ad:93:86:42:1f:3f:09:5b:
                    93:87:76:f8:18:1c:f0:e9:46:83:30:f2:b0:d7:a6:
                    e2:30:f1:cc:bf:95:10:d7:1f:05:c7:52:41:61:f7:
                    23:5e:a9:05:52:9a:43:4e:3a:57:f1:7e:ee:57:40:
                    fc:2d:6c:95:a9:23:20:ed:60:f9:72:5a:3c:6c:92:
                    dc:19:82:44:6e:70:f5:44:fc:0f:82:9f:5c:ea:93:
                    50:7a:58:46:e6:c3:58:22:ec:e4:c2:c0:73:14:74:
                    21:81:3f:95:91:5f:ae:07:09:a3:b7:ed:5b:e7:3a:
                    1c:0e:4a:09:fe:14:64:ad:65:0b:9a:e8:e4:57:16:
                    71:5e:e3:cc:ce:29:87:bd:75:35:b3:03:2e:c5:52:
                    b4:83:f1:04:39:04:d5:86:74:1e:4e:d8:42:e0:ca:
                    77:53:44:3b:14:ca:2a:36:66:21:0c:4c:5f:77:4a:
                    db:da:d6:1e:a8:0d:ca:0e:3d:1a:26:ce:c6:15:5e:
                    70:bc:aa:73:6f:cd:7b:ec:e4:e2:92:72:aa:f3:30:
                    27:85:e0:18:eb:9c:ee:2e:90:4b:65:59:92:dc:0f:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FA:DB:E9:6D:0D:56:8B:C8:E3:4B:DE:98:80:16:F9:18:09:9B:E8
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138362e3233362e3132382e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bb:30:f9:cd:3d:01:ec:17:31:e4:9b:d3:94:40:24:0d:ed:fa:
         ae:60:9e:aa:d5:b3:95:4e:9f:81:81:72:39:67:d3:82:02:15:
         b9:d8:7a:50:e2:e0:68:fe:e1:22:b1:98:56:c8:ed:87:19:ba:
         5e:07:ec:d2:57:68:20:3c:5f:be:33:e8:d9:25:4a:36:ea:be:
         d8:70:4e:72:f8:9a:f0:b2:dc:b4:b1:47:19:89:df:cd:97:1d:
         cf:5a:c0:96:ae:16:6d:06:f7:44:26:44:27:f8:54:2d:83:69:
         10:24:25:8b:3e:5a:63:08:f9:68:12:24:f6:36:16:cb:93:ae:
         8c:99:16:6e:04:16:4d:f8:bf:11:f5:19:fb:29:92:a2:25:42:
         51:66:29:e4:89:80:29:8e:a2:c8:6c:67:81:96:4c:b1:8c:97:
         57:5a:a3:7a:f3:af:b8:53:b0:f8:20:fd:c6:be:43:e2:bb:b1:
         9f:e7:c0:16:93:28:eb:76:a3:a1:04:10:ac:77:27:3e:9b:29:
         dc:ae:22:62:84:d5:61:95:e7:ed:9e:ef:0d:bc:47:42:f7:6a:
         c5:4b:42:69:27:08:da:8a:71:f1:24:e3:d7:7c:42:c4:51:46:
         84:0a:2a:d6:13:7c:a3:d3:7e:47:dd:8c:e7:96:e7:41:9e:d7:
         00:1d:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:12 2026 by rpki-client