Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          MX7aalQ2e8+b5y6MTpIKGpK8iJ+uM5wiU23v885DI2E=
Subject key identifier:   8A:90:EB:51:3C:5D:5F:58:E5:95:12:2D:49:25:96:21:6D:C3:FB:E0
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       6ED2801A163F42F3F815B0756662B63BDA64C080
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:49 +0000
ROA not before:           Thu 22 Jan 2026 18:57:49 +0000
ROA not after:            Thu 21 Jan 2027 19:02:49 +0000
asID:                     262713
IP address blocks:        186.208.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d2:80:1a:16:3f:42:f3:f8:15:b0:75:66:62:b6:3b:da:64:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:49 2026 GMT
            Not After : Jan 21 19:02:49 2027 GMT
        Subject: CN=8A90EB513C5D5F58E595122D492596216DC3FBE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:3d:9e:25:21:b4:9c:7d:70:c6:e2:6c:11:
                    ec:80:03:fd:98:bc:17:57:3d:b6:0e:f1:56:6d:e9:
                    df:73:55:ac:8c:2d:cb:22:25:6b:69:18:5c:7d:d7:
                    94:9b:92:bb:8e:ba:ed:37:f1:7c:b2:2d:cd:2f:16:
                    87:21:32:aa:ae:f1:b7:b2:38:b5:80:af:7a:76:eb:
                    a2:bd:86:68:19:a6:3f:cd:98:be:c8:be:46:eb:78:
                    51:a4:e7:08:d4:5a:6f:8e:86:4d:ce:a9:df:fe:34:
                    be:83:29:45:7a:34:0d:06:71:0e:e7:aa:9a:7b:c3:
                    3a:5a:2b:b4:8c:a0:d5:8a:ba:c5:2a:2a:47:c1:12:
                    f5:0f:ab:c4:60:0b:b3:db:ce:ba:27:27:17:a2:ba:
                    03:63:f6:20:76:ab:6d:11:f9:8c:d4:72:c7:eb:53:
                    f5:ad:c3:42:5d:c8:1d:27:94:f2:e5:02:7e:de:10:
                    d7:f7:0c:ab:3f:45:3b:2b:32:a7:30:82:25:e1:03:
                    1f:88:1b:bf:0c:de:c3:c2:37:c2:21:05:f7:24:20:
                    48:e4:1f:40:56:09:3f:a6:47:31:99:f2:85:e9:8e:
                    a7:c6:ee:5f:cb:36:3c:6b:fd:cb:59:83:ca:18:22:
                    75:1d:9c:13:a7:63:f0:b2:00:2c:94:c8:72:27:37:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:90:EB:51:3C:5D:5F:58:E5:95:12:2D:49:25:96:21:6D:C3:FB:E0
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:69:93:84:41:97:49:87:e3:8f:86:49:8f:b3:7a:ec:35:2e:
         49:af:9a:84:23:70:a0:92:81:dd:4e:7b:c4:56:f5:5d:49:0a:
         95:e2:af:09:f6:b0:27:5a:b0:5d:d1:a3:9e:0b:ed:91:a4:b3:
         2e:43:c2:18:07:25:ae:37:75:8c:bb:b7:ad:66:4e:ef:79:95:
         27:16:5d:e4:05:66:0f:73:7e:ed:b7:3e:b1:15:8a:a4:54:d7:
         38:b5:4e:2d:9e:0a:14:1c:98:cf:d6:66:ae:53:b4:82:90:b4:
         44:7a:40:a4:e8:00:8c:b2:02:90:4d:db:b6:0c:7f:a9:fd:dd:
         7b:83:67:2a:90:29:7a:24:32:33:37:4e:ca:b5:f7:11:c6:15:
         10:1a:38:b4:89:84:b1:6c:18:12:2c:97:71:11:93:76:63:7a:
         c9:f4:30:fc:3a:75:e7:36:fe:04:a7:82:d6:d2:11:f6:76:ed:
         cf:83:7a:b7:6f:61:5a:89:85:fe:28:20:3b:6a:57:e6:fc:f9:
         3d:08:e9:94:f4:e0:0e:6c:f3:40:03:92:ae:c1:0f:96:b2:c6:
         00:a9:8b:7d:19:3c:af:64:88:af:33:4a:a3:2f:b0:a2:45:7d:
         b4:65:19:5f:0f:4c:19:21:0e:67:5a:ec:b4:1a:57:46:c7:f3:
         81:2c:81:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:15:22 2026 by rpki-client