Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138392e31342e302e302f31382d3234203d3e203232363839.roa
File:                     3138392e31342e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          GvzQErerUEH6DAk+Mqaxe1kgPtRMm7ycmI/w7IezIro=
Subject key identifier:   74:89:A5:4D:D5:45:62:E6:28:89:EB:77:BC:E3:78:F5:6F:BE:CF:AD
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       0C78338F112FD8E14D0C6E540C258CEFC89EA5DA
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138392e31342e302e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 06 Feb 2026 02:48:51 +0000
ROA not before:           Fri 06 Feb 2026 02:43:51 +0000
ROA not after:            Fri 05 Feb 2027 02:48:51 +0000
asID:                     22689
IP address blocks:        189.14.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:78:33:8f:11:2f:d8:e1:4d:0c:6e:54:0c:25:8c:ef:c8:9e:a5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Feb  6 02:43:51 2026 GMT
            Not After : Feb  5 02:48:51 2027 GMT
        Subject: CN=7489A54DD54562E62889EB77BCE378F56FBECFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:24:3c:cc:94:99:bb:43:49:f0:8f:09:7e:
                    9c:66:1a:f2:d2:66:40:f7:ba:cb:b0:11:77:2c:ef:
                    1e:8d:5e:c1:cd:6e:25:fd:9c:e2:f1:74:52:44:5f:
                    70:32:16:32:cb:1e:66:92:24:ea:32:ad:13:b7:30:
                    ef:2c:5b:f1:31:e4:72:f4:bc:73:9c:21:61:61:27:
                    12:71:16:eb:04:a3:a4:fc:67:cb:85:1c:e8:75:3a:
                    b9:d4:34:53:bd:78:da:4b:ae:2c:b3:bb:50:79:f0:
                    41:5c:bc:95:1f:81:ca:82:a5:35:f5:60:bb:07:8e:
                    15:65:7e:8b:eb:9b:46:73:70:43:62:bb:92:d8:cc:
                    3e:46:a6:f1:8c:4b:23:ae:12:d1:44:2b:91:e5:73:
                    52:44:9b:0b:6f:ef:94:21:b6:9b:24:fc:57:d3:6b:
                    3d:ed:14:a7:63:55:bd:4e:f0:c3:11:80:b3:6a:fc:
                    1f:77:17:b7:20:ef:72:3b:57:d2:c5:6d:1c:7a:70:
                    ee:68:ec:7b:0b:e8:6e:94:c8:f5:37:3f:9c:01:b9:
                    e4:93:91:b9:44:1d:66:c3:90:7a:d9:50:81:e3:2d:
                    27:e6:ff:3d:b6:37:9a:86:41:94:b3:8a:0c:28:66:
                    6d:f5:bb:b6:e7:02:60:6c:47:eb:3b:ec:89:f7:d4:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:A5:4D:D5:45:62:E6:28:89:EB:77:BC:E3:78:F5:6F:BE:CF:AD
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138392e31342e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:15:28:9d:b7:0e:05:73:5a:1c:aa:e1:cc:9d:21:d6:7a:ab:
         fe:f1:44:c1:fe:00:17:b3:e9:d6:64:1c:36:04:6c:f1:fe:8b:
         26:12:38:5e:e0:a3:b8:4e:54:db:e4:78:99:b8:2b:cd:f0:bb:
         f4:c3:3d:99:dc:03:07:e4:a8:ba:df:3d:7b:71:b3:51:6b:94:
         2d:76:a9:e3:bd:d5:68:ed:54:72:21:e4:54:f6:21:ff:b1:eb:
         44:f2:ca:2d:16:64:46:e3:62:d0:2a:64:6d:d1:35:8f:44:ba:
         a1:4c:25:f5:7b:25:85:2b:c9:da:d6:75:f8:24:cb:f6:57:44:
         90:19:e8:e1:6b:e8:ca:2e:b8:6f:b1:06:08:cf:39:c4:f5:b2:
         1e:b6:0e:d1:3d:27:c4:1d:d7:fc:f8:54:59:dc:c6:67:3b:44:
         e7:1c:af:98:da:b4:c8:56:f1:c0:b3:fe:04:96:f2:37:0a:01:
         03:99:43:6e:38:b3:ba:c3:45:04:03:52:1e:ef:e6:19:b6:ef:
         62:d1:6f:e8:87:07:54:97:b3:42:d6:59:00:a3:23:4f:10:e4:
         95:4f:2e:0e:7e:b7:53:cc:a8:0a:53:67:5b:ff:c0:eb:59:3f:
         c7:ac:01:c1:9c:02:25:63:6a:2b:f4:0e:9d:3e:61:71:5d:fc:
         cc:8f:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:35 2026 by rpki-client