Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa (raw, json)
Hash identifier:          F0I3pdm51kNpYd+GU7F76ZoSPfnowi/cOiFFQnbVL54=
Subject key identifier:   D6:16:32:33:31:D7:5D:B1:E6:B4:4F:28:B0:6A:FE:03:D8:49:38:A0
Certificate issuer:       /CN=204D83224DFC23066770463534F38F9038643D9D
Certificate serial:       0A116D6AE566D5FA753E9FA969061C1C5D7AD660
Authority key identifier: 20:4D:83:22:4D:FC:23:06:67:70:46:35:34:F3:8F:90:38:64:3D:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/204D83224DFC23066770463534F38F9038643D9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa
Signing time:             Mon 16 Feb 2026 21:59:52 +0000
ROA not before:           Mon 16 Feb 2026 21:54:52 +0000
ROA not after:            Mon 15 Feb 2027 21:59:52 +0000
asID:                     265393
IP address blocks:        168.194.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/204D83224DFC23066770463534F38F9038643D9D.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/204D83224DFC23066770463534F38F9038643D9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/204D83224DFC23066770463534F38F9038643D9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:11:6d:6a:e5:66:d5:fa:75:3e:9f:a9:69:06:1c:1c:5d:7a:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204D83224DFC23066770463534F38F9038643D9D
        Validity
            Not Before: Feb 16 21:54:52 2026 GMT
            Not After : Feb 15 21:59:52 2027 GMT
        Subject: CN=D616323331D75DB1E6B44F28B06AFE03D84938A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cc:76:54:b3:6b:95:e8:b1:07:71:30:a1:eb:
                    7e:5c:73:99:ba:be:d0:63:26:12:fb:1e:54:7c:d4:
                    a5:36:06:d9:6f:61:69:75:f2:9c:9c:be:5c:90:e0:
                    64:c5:35:56:c5:f6:51:aa:dc:7d:57:50:a0:d1:57:
                    e2:5f:76:71:87:c9:86:65:66:3d:df:7f:de:d6:7a:
                    cb:37:bb:97:9f:a0:8b:dd:c6:62:f9:b3:ce:9b:10:
                    9e:d9:b3:85:cc:ca:a0:13:79:fc:1c:cf:15:a5:74:
                    8b:81:63:ab:94:79:bc:89:4d:15:90:c3:00:78:18:
                    cd:b3:5f:c6:0d:0f:4b:d6:9a:4b:e2:3b:13:2c:25:
                    0d:18:d9:3f:27:8e:fc:ac:da:fb:41:a3:0f:a8:68:
                    3c:f8:c8:fe:36:51:f0:6e:ba:4e:1a:d9:08:80:5d:
                    5f:c5:b8:ca:b3:24:1d:c1:36:f0:d6:fc:20:d8:8b:
                    03:50:46:07:a7:c2:77:41:5b:12:58:b1:8e:3c:98:
                    ed:72:6f:32:0e:da:03:1e:9c:a6:1f:2d:68:62:1d:
                    52:28:9b:2e:d0:7b:cb:62:c2:fe:32:e5:c9:a8:07:
                    88:99:0f:19:1f:bd:83:91:e1:42:54:36:c5:fa:b7:
                    05:a6:d3:8b:9e:68:9b:d6:df:2c:a9:89:6d:31:ac:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:32:33:31:D7:5D:B1:E6:B4:4F:28:B0:6A:FE:03:D8:49:38:A0
            X509v3 Authority Key Identifier:
                keyid:20:4D:83:22:4D:FC:23:06:67:70:46:35:34:F3:8F:90:38:64:3D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/204D83224DFC23066770463534F38F9038643D9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/204D83224DFC23066770463534F38F9038643D9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32332d3233203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:0e:de:f6:86:0e:e3:4b:43:f3:1f:03:b6:b9:a0:0b:28:
         63:71:a5:3a:ba:28:fe:00:1c:26:f7:56:14:d4:0f:b8:80:5e:
         00:ad:f0:49:8d:a6:d0:e2:1b:e4:16:81:a2:db:51:9f:e4:40:
         ca:b9:bd:81:fd:36:90:fe:c4:0f:50:d1:e2:a8:6b:02:99:ec:
         02:b0:48:eb:cf:c3:c1:b8:ba:d1:eb:14:63:ad:46:4f:e8:fe:
         54:4d:09:10:e5:6d:cd:81:41:4f:18:4e:2c:f6:13:8c:be:ea:
         59:e1:97:43:13:77:2c:3e:ee:ca:69:7a:24:72:87:45:ab:dc:
         71:99:d3:ab:a4:5e:eb:71:34:2f:23:17:d8:19:84:1a:80:98:
         29:c0:06:21:49:7a:27:34:99:29:62:18:f2:57:5e:9b:75:8d:
         6d:34:89:ea:a5:ca:9d:80:6c:72:64:17:a4:b9:5a:f2:a8:6a:
         4a:2a:e1:0a:1e:56:dc:54:2e:06:0b:07:f0:07:6d:1e:1c:8e:
         76:10:e9:58:c8:9c:44:4a:86:58:7a:6b:82:a5:70:e5:21:16:
         fa:f8:47:20:0a:cf:3a:21:a4:e5:1c:13:bd:88:20:a6:f3:a5:
         e4:77:c5:e0:44:6f:ce:0f:f8:22:5e:99:4e:57:11:70:26:16:
         9c:b1:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:58:48 2026 by rpki-client