Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e362e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          5JDle2hhFEsPcIyzixSzzsDxzpSVNbzLjtyxWhMp9W8=
Subject key identifier:   6D:71:D9:83:2A:44:48:A9:7A:9E:A7:C5:06:AA:E3:7F:39:AA:64:D6
Certificate issuer:       /CN=E93268A3714096FCDDC12A8EEEA393524021C87B
Certificate serial:       08EFBEBAFA14A401DBA0499A843CDA1D94C21AAC
Authority key identifier: E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa
Signing time:             Thu 22 Jan 2026 19:02:48 +0000
ROA not before:           Thu 22 Jan 2026 18:57:48 +0000
ROA not after:            Thu 21 Jan 2027 19:02:48 +0000
asID:                     262713
IP address blocks:        186.208.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl
                          rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ef:be:ba:fa:14:a4:01:db:a0:49:9a:84:3c:da:1d:94:c2:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E93268A3714096FCDDC12A8EEEA393524021C87B
        Validity
            Not Before: Jan 22 18:57:48 2026 GMT
            Not After : Jan 21 19:02:48 2027 GMT
        Subject: CN=6D71D9832A4448A97A9EA7C506AAE37F39AA64D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:61:2c:0e:f6:5b:61:ec:08:ef:ea:57:57:
                    7a:40:5a:7c:85:49:4c:92:8f:0c:ae:fe:af:52:e9:
                    ed:7a:8c:10:71:62:89:0b:78:f3:c2:28:c5:59:7f:
                    d7:fe:1c:a8:db:30:f2:d7:e5:51:bc:bd:7b:f7:2f:
                    a2:7a:78:a7:a4:81:f9:01:80:9b:30:67:aa:2d:2d:
                    cd:97:26:02:28:9b:db:4f:19:de:3e:6d:65:c9:21:
                    fe:ec:9a:33:dc:20:4a:c3:93:99:4f:d0:a9:e1:42:
                    20:30:8c:e6:b9:aa:a2:45:f0:58:09:37:68:51:93:
                    9d:7b:0a:20:23:f7:37:9f:1d:a7:bb:34:33:c8:d4:
                    63:1d:f8:3e:0f:e0:07:11:74:02:33:b7:21:5c:b9:
                    43:47:2e:bd:b9:cc:0a:77:1b:2c:f7:c2:13:e3:81:
                    61:64:52:6c:4b:91:e3:1e:03:7f:4c:70:3e:64:7a:
                    6a:1e:c0:0a:fd:3c:23:95:4f:9a:ba:c8:58:60:38:
                    65:a6:98:20:0f:49:48:80:79:5b:ee:44:1f:64:93:
                    d0:59:12:2d:72:4b:90:11:82:11:c9:29:6c:5e:a3:
                    ca:59:c3:2d:62:54:2f:85:3b:c7:44:09:46:fb:7c:
                    68:74:89:87:36:1f:ed:be:ca:59:e1:e7:96:70:a5:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:D9:83:2A:44:48:A9:7A:9E:A7:C5:06:AA:E3:7F:39:AA:64:D6
            X509v3 Authority Key Identifier:
                keyid:E9:32:68:A3:71:40:96:FC:DD:C1:2A:8E:EE:A3:93:52:40:21:C8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/E93268A3714096FCDDC12A8EEEA393524021C87B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E93268A3714096FCDDC12A8EEEA393524021C87B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1a:9f:f9:dd:c3:d2:19:b8:2e:ec:06:45:8c:28:9c:a6:2b:
         08:fb:b0:bf:2d:a9:b4:08:58:22:c5:ff:2e:b4:06:3e:05:c3:
         71:cf:8d:9f:d1:05:cb:62:81:93:16:cf:71:c9:7a:7e:82:95:
         f0:9f:5b:82:6c:8c:58:27:0c:0d:19:ea:2f:d8:6e:2e:d9:41:
         18:17:4d:ff:74:f2:55:0b:d5:26:19:9c:25:57:46:d9:0c:d4:
         d0:f1:55:cd:f9:30:80:a7:1d:86:0b:8f:c8:9d:4b:82:a4:a0:
         04:46:38:c5:22:7d:e9:7f:d9:6c:82:a8:da:d7:3f:b9:b6:4a:
         08:b0:ac:f3:fd:b4:a3:08:e1:d2:90:8e:f3:35:07:ef:9d:74:
         52:4a:c0:ea:ff:93:9d:fb:e6:68:93:b1:50:5f:76:56:7d:e9:
         e4:12:7c:4d:49:17:c8:df:c5:c7:64:54:88:67:2f:c7:ed:d0:
         00:69:06:cd:41:2c:24:21:f8:2c:a1:b1:53:c9:47:a7:52:a7:
         c0:c1:13:8e:be:ff:b6:c7:e1:06:cc:1f:57:22:a4:41:f1:f5:
         ee:24:ac:c7:ad:86:e5:37:ed:33:e5:9f:95:5a:97:32:59:c7:
         f5:08:92:50:f1:81:89:9c:e5:f9:50:1c:bd:2e:b0:41:94:0a:
         34:89:7b:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCO++uvoUpAHboEmahDzaHZTCGqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkzMjY4QTM3MTQwOTZGQ0REQzEyQThFRUVBMzkzNTI0
MDIxQzg3QjAeFw0yNjAxMjIxODU3NDhaFw0yNzAxMjExOTAyNDhaMDMxMTAvBgNV
BAMTKDZENzFEOTgzMkE0NDQ4QTk3QTlFQTdDNTA2QUFFMzdGMzlBQTY0RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhmEsDvZbYewI7+pXV3pAWnyF
SUySjwyu/q9S6e16jBBxYokLePPCKMVZf9f+HKjbMPLX5VG8vXv3L6J6eKekgfkB
gJswZ6otLc2XJgIom9tPGd4+bWXJIf7smjPcIErDk5lP0KnhQiAwjOa5qqJF8FgJ
N2hRk517CiAj9zefHae7NDPI1GMd+D4P4AcRdAIztyFcuUNHLr25zAp3Gyz3whPj
gWFkUmxLkeMeA39McD5kemoewAr9PCOVT5q6yFhgOGWmmCAPSUiAeVvuRB9kk9BZ
Ei1yS5ARghHJKWxeo8pZwy1iVC+FO8dECUb7fGh0iYc2H+2+ylnh55ZwpXKDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbXHZgypESKl6nqfFBqrjfzmqZNYwHwYDVR0j
BBgwFoAU6TJoo3FAlvzdwSqO7qOTUkAhyHswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN043aVRUNHFHNTRvcmFTY3RlODFja1ZRWThxTWF3QjJwRjMxWDU1RTZY
OTEvMC9FOTMyNjhBMzcxNDA5NkZDRERDMTJBOEVFRUEzOTM1MjQwMjFDODdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5MzI2OEEzNzE0MDk2RkNE
REMxMkE4RUVFQTM5MzUyNDAyMUM4N0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdON2lUVDRxRzU0b3JhU2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAv
MzEzODM2MmUzMjMwMzgyZTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAutAGMA0GCSqGSIb3DQEBCwUAA4IBAQCZGp/53cPS
Gbgu7AZFjCicpisI+7C/Lam0CFgixf8utAY+BcNxz42f0QXLYoGTFs9xyXp+gpXw
n1uCbIxYJwwNGeov2G4u2UEYF03/dPJVC9UmGZwlV0bZDNTQ8VXN+TCApx2GC4/I
nUuCpKAERjjFIn3pf9lsgqja1z+5tkoIsKzz/bSjCOHSkI7zNQfvnXRSSsDq/5Od
++Zok7FQX3ZWfenkEnxNSRfI38XHZFSIZy/H7dAAaQbNQSwkIfgsobFTyUenUqfA
wROOvv+2x+EGzB9XIqRB8fXuJKzHrYblN+0z5Z+VWpcyWcf1CJJQ8YGJnOX5UBy9
LrBBlAo0iXvT
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:31:26 2026 by rpki-client