Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32302d3230203d3e20323632373133.roa (raw, json)
Hash identifier:          s674kMhVlfp0pKldmJ5man8/3mVCAhAluOHFSVBVg48=
Subject key identifier:   C8:D5:E8:2C:FB:C1:B6:B5:E7:09:61:59:3D:39:8C:C3:A4:D4:61:16
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       2B6958577E53F96BB201BC436AC73FA4EB4A337F
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:46 +0000
ROA not before:           Thu 22 Jan 2026 18:57:46 +0000
ROA not after:            Thu 21 Jan 2027 19:02:46 +0000
asID:                     262713
IP address blocks:        186.208.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:69:58:57:7e:53:f9:6b:b2:01:bc:43:6a:c7:3f:a4:eb:4a:33:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:46 2026 GMT
            Not After : Jan 21 19:02:46 2027 GMT
        Subject: CN=C8D5E82CFBC1B6B5E70961593D398CC3A4D46116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:dd:4f:f8:04:14:56:5b:c2:d2:9c:ca:d8:
                    b8:3b:e3:49:50:7c:7a:1b:ab:b9:e9:07:b3:8d:82:
                    13:c5:0e:c3:80:d0:a4:86:7e:a8:d9:30:b6:90:8e:
                    9d:19:55:ae:42:dd:13:ee:67:3d:47:ea:1b:dc:1e:
                    b2:4c:37:a6:5e:d4:e3:c8:50:df:4b:81:2c:0c:4b:
                    64:39:4b:f7:e3:86:74:d4:70:ea:18:f8:b9:5a:e3:
                    9c:09:f6:56:3e:11:ea:0e:41:e7:58:fe:5a:9c:48:
                    1f:fa:27:b3:a4:04:2a:e1:c9:c9:79:7c:5d:cb:ec:
                    8e:14:13:3c:60:ed:4f:49:9f:d8:44:ac:a8:ba:80:
                    d5:5f:39:54:a0:99:6c:e9:80:9f:5a:5b:21:b5:e9:
                    84:36:e0:ef:c4:6b:7e:e2:00:10:c8:a5:68:a9:34:
                    64:c2:83:e0:10:79:7c:7a:47:80:86:8d:05:01:d4:
                    fa:cd:e7:53:26:e4:eb:55:4d:81:9f:0f:36:3c:8f:
                    92:4d:85:2a:d7:a0:26:b3:6a:89:2e:6f:0e:15:a0:
                    62:88:4b:f2:1b:8b:29:52:69:3e:2a:96:63:4e:7c:
                    4d:61:30:e2:6a:5e:25:4b:53:a2:70:8c:40:47:0f:
                    1b:f9:65:1b:3a:fc:f2:f3:4d:e4:b7:89:d0:f1:be:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D5:E8:2C:FB:C1:B6:B5:E7:09:61:59:3D:39:8C:C3:A4:D4:61:16
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:20:68:20:cb:6b:26:05:98:d9:a3:15:ab:0b:70:f9:a4:ec:
         51:49:1d:6f:2a:f8:bb:c1:04:fc:9b:f5:95:89:e0:af:b2:e8:
         3b:e0:01:6c:b3:f4:85:2b:3c:a8:f7:08:9b:b7:3b:bf:28:b4:
         fa:2f:48:95:91:2f:d7:6d:f0:4b:a8:19:1e:94:e7:f3:65:c0:
         9c:5c:e7:ea:3e:ef:d4:9c:d6:67:e7:fd:dc:b7:a5:41:a8:59:
         93:68:20:84:8c:6b:1e:88:14:1a:10:6f:a5:f1:38:42:ea:1b:
         bc:14:7d:d1:bc:3d:71:14:ff:52:32:4e:d9:bd:39:6d:5f:26:
         22:8f:61:35:23:73:89:a8:57:f0:7b:e1:a3:36:0c:46:75:68:
         5f:ca:07:61:ad:d8:80:31:60:e0:22:b1:80:39:4d:e4:fb:b8:
         01:41:20:61:2a:84:83:c3:db:00:7c:bf:c4:1a:49:56:9f:f7:
         80:1f:23:40:a8:bf:a0:9b:1f:d9:5b:3d:55:14:17:49:30:de:
         33:cc:1e:84:03:c5:e1:7d:ca:1c:7d:ef:d1:7d:2b:d5:7b:c7:
         dd:8f:46:5c:d9:45:d7:59:6e:cd:f5:8c:20:ff:4e:bb:b4:88:
         9d:df:fd:38:d7:24:f6:d9:a0:c1:bc:ab:46:c9:b8:65:71:77:
         3a:79:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:15:55 2026 by rpki-client