Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa
File:                     3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa (raw, json)
Hash identifier:          WtmejgrYVk0CLn+x2LARxjrqibaWOjPgSWiIquzM4k0=
Subject key identifier:   AB:46:5C:92:D2:75:2C:15:B2:BC:D6:D4:B6:EE:F4:F5:65:4D:B3:AC
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       44A487CD88DA2620469A8239FE5CCB12D8CC4FF9
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa
Signing time:             Thu 05 Feb 2026 02:43:32 +0000
ROA not before:           Thu 05 Feb 2026 02:38:32 +0000
ROA not after:            Thu 04 Feb 2027 02:43:32 +0000
asID:                     265462
IP address blocks:        168.196.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a4:87:cd:88:da:26:20:46:9a:82:39:fe:5c:cb:12:d8:cc:4f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Feb  5 02:38:32 2026 GMT
            Not After : Feb  4 02:43:32 2027 GMT
        Subject: CN=AB465C92D2752C15B2BCD6D4B6EEF4F5654DB3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:60:d7:04:8b:47:e2:02:d0:f0:9c:8b:28:
                    f0:29:26:29:fb:50:bb:c8:dd:a4:32:ec:f7:7c:a0:
                    c4:ab:ca:b6:90:10:79:7d:05:27:d6:39:44:ce:eb:
                    64:9f:87:fa:16:e9:08:73:f3:d3:8e:55:e4:e8:7e:
                    26:0e:35:96:13:37:92:eb:5b:ab:ba:90:2b:dc:ec:
                    36:d9:61:8c:e5:53:6c:92:1c:96:5f:0e:14:57:9b:
                    a7:e7:30:7d:69:70:20:19:af:31:33:68:5f:d2:f7:
                    30:2e:58:96:b2:83:9b:b5:f0:4e:35:34:42:3a:4c:
                    f0:61:60:60:64:30:cc:08:8f:76:33:29:ae:20:03:
                    74:3d:37:06:0b:8c:a0:63:f1:5a:dd:0c:a0:60:92:
                    bf:83:44:02:ba:99:34:ba:92:fe:9a:86:cc:17:c7:
                    d1:c7:a2:e5:30:35:6c:8a:31:9d:03:70:41:46:37:
                    fc:15:da:5b:6c:a2:64:12:83:46:6d:a2:72:ce:c5:
                    60:75:58:4e:d6:f1:a7:08:a1:28:71:53:38:6f:31:
                    88:d7:2c:62:d0:a2:cb:44:46:1c:4c:2c:4d:17:c9:
                    0e:d4:45:7a:25:ab:8b:bf:c3:a0:6e:d9:f4:47:1a:
                    60:76:4e:3a:e1:bf:57:4c:76:6a:4a:c6:25:3c:5b:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:46:5C:92:D2:75:2C:15:B2:BC:D6:D4:B6:EE:F4:F5:65:4D:B3:AC
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32332d3233203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:68:05:7b:a2:ec:3f:ee:37:c1:b8:0a:57:1a:64:b5:2c:
         c7:95:b8:d4:c8:95:87:dd:c3:21:4f:75:33:d0:32:b1:20:b4:
         95:9d:f1:d1:6c:19:96:32:f6:71:40:14:63:f9:a8:ab:43:0c:
         91:8d:d8:ba:f8:c3:f6:91:fe:9c:45:51:f4:48:a0:9b:55:b5:
         98:0c:46:6e:87:3d:8d:5c:27:66:7c:13:72:15:c3:f8:c7:f0:
         49:db:a4:83:55:67:07:d3:8c:e3:31:ea:83:e9:05:3f:88:1a:
         ec:e9:90:71:08:0a:00:9b:5d:27:c8:8b:67:35:a8:63:d0:22:
         ad:42:e7:d3:6a:41:06:b4:cb:06:05:ba:bb:9d:a4:fd:f6:1f:
         67:16:03:12:34:6d:1b:ae:94:6e:17:a8:2d:c5:14:13:2a:94:
         51:05:1b:81:d3:a3:33:e7:c6:b4:49:77:38:8d:31:f2:1c:3a:
         32:0e:2d:92:7e:fb:55:a2:c6:79:80:38:dc:13:a0:81:4d:a7:
         71:60:c4:87:76:12:1b:a0:40:c9:13:93:73:46:25:43:ca:05:
         c4:a4:67:35:4e:2e:7a:5b:0f:74:cf:59:ad:0e:80:b8:b4:b3:
         31:75:39:e0:b3:fe:16:f1:97:a3:ff:84:76:87:50:fa:df:96:
         24:ed:70:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:24 2026 by rpki-client