Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
File:                     3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier:          FTlkQXa7O4sFt4ipC8Jhg6L5RxR8giELYB1k7DdzKO8=
Subject key identifier:   CA:1C:2A:99:A4:2D:C5:52:23:99:68:0D:AD:84:EF:25:96:1F:D6:36
Certificate issuer:       /CN=204D83224DFC23066770463534F38F9038643D9D
Certificate serial:       5760C53A97BB7B174FE10FC6D8AF91618DC678E0
Authority key identifier: 20:4D:83:22:4D:FC:23:06:67:70:46:35:34:F3:8F:90:38:64:3D:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/204D83224DFC23066770463534F38F9038643D9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
Signing time:             Mon 16 Feb 2026 22:00:18 +0000
ROA not before:           Mon 16 Feb 2026 21:55:18 +0000
ROA not after:            Mon 15 Feb 2027 22:00:18 +0000
asID:                     265393
IP address blocks:        168.194.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/204D83224DFC23066770463534F38F9038643D9D.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/204D83224DFC23066770463534F38F9038643D9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/204D83224DFC23066770463534F38F9038643D9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:c5:3a:97:bb:7b:17:4f:e1:0f:c6:d8:af:91:61:8d:c6:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204D83224DFC23066770463534F38F9038643D9D
        Validity
            Not Before: Feb 16 21:55:18 2026 GMT
            Not After : Feb 15 22:00:18 2027 GMT
        Subject: CN=CA1C2A99A42DC5522399680DAD84EF25961FD636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:a3:ff:70:26:b5:8b:d8:24:49:15:e2:9d:
                    31:2c:b5:7c:73:62:14:6d:35:57:26:bb:f3:af:a9:
                    9a:8e:d2:45:6d:af:e4:8c:77:5b:a6:4b:61:bd:42:
                    a6:3b:da:22:ad:fc:fd:88:08:74:b6:ad:74:59:e2:
                    b8:7c:dd:6d:5e:bb:12:1d:38:b5:ef:2d:9b:fb:83:
                    36:49:3c:36:50:11:b3:7d:8a:76:2b:47:22:d4:80:
                    a4:62:b4:9c:b3:4a:72:a3:48:3d:af:d8:4b:11:bd:
                    f9:c0:a5:76:f2:07:f9:60:24:28:45:44:b8:d6:ae:
                    54:ae:df:46:8c:07:44:64:65:c5:c1:51:26:ee:8d:
                    a7:cc:5c:2a:bf:00:3d:8a:9c:d4:13:9f:87:10:f1:
                    1a:df:e9:e2:ad:f9:fd:d3:b1:4d:d7:46:2b:7c:c3:
                    a8:5f:81:a2:d0:8e:1f:43:c3:5f:05:c2:4b:a2:a2:
                    73:42:80:1f:2d:b3:41:af:61:df:c3:ae:cc:1d:12:
                    b4:d6:f8:92:8f:4b:10:0f:23:3c:2b:12:c7:2e:c9:
                    e0:92:4a:8c:a0:c8:7f:20:ac:af:61:00:8e:f2:b0:
                    a0:b0:45:58:f9:f2:3a:00:50:66:d6:4c:0e:88:10:
                    35:9f:11:b5:ba:d4:62:44:53:5b:70:c9:fe:18:f6:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1C:2A:99:A4:2D:C5:52:23:99:68:0D:AD:84:EF:25:96:1F:D6:36
            X509v3 Authority Key Identifier:
                keyid:20:4D:83:22:4D:FC:23:06:67:70:46:35:34:F3:8F:90:38:64:3D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/204D83224DFC23066770463534F38F9038643D9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/204D83224DFC23066770463534F38F9038643D9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:0e:69:ff:88:7a:a8:7f:1b:52:25:ce:65:07:f8:b6:61:4d:
         e9:ed:f5:c7:1b:11:10:46:fd:75:1a:79:6d:e2:83:80:f6:5a:
         ae:bf:b9:71:2b:18:31:2b:57:5e:2d:e1:8c:f5:3e:fc:17:a7:
         16:c2:3c:31:1e:7a:70:af:f6:2e:08:2e:a3:f2:d7:e5:1b:ea:
         33:ab:fe:dc:34:97:42:17:7c:35:9a:b1:38:34:6e:89:6f:14:
         a1:36:0c:4d:83:bc:5c:69:ba:69:39:4a:7b:83:c3:ca:7c:5e:
         5e:44:8d:bb:b9:35:93:86:f0:f6:50:05:f3:a9:d8:09:dc:87:
         ac:07:95:ec:aa:22:c0:2d:04:18:e3:26:aa:dd:ae:22:48:19:
         d8:56:f9:80:ed:a2:ea:44:c0:26:c7:ba:ef:b8:a6:01:99:3a:
         11:3f:c0:1f:7b:4b:6b:d8:bf:0b:7d:2e:ab:76:d0:3e:1d:11:
         bf:30:c6:21:9e:6b:31:fe:af:60:34:49:24:fa:ad:23:2b:96:
         30:35:06:d7:76:fe:ca:4b:5c:95:b3:8f:f4:5a:3e:5f:aa:c8:
         9c:da:ee:c2:0e:c1:d4:c6:66:4f:24:88:82:bb:fc:eb:2b:2d:
         f0:6e:fe:03:9a:a2:fe:81:6f:d2:5b:e1:f3:59:82:ab:e3:0f:
         33:c6:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:54 2026 by rpki-client