Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
File:                     3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa (raw, json)
Hash identifier:          FjKTlMIO87CiGU77jJlHY8o1tIY8oogU61SaoGjIYZk=
Subject key identifier:   42:C2:BE:E2:E1:BB:C7:E7:32:69:15:A5:B9:D4:ED:DA:41:D7:14:D8
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       7BF5C65396AA21C10E3AA5698364E005354CF1B4
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa
Signing time:             Thu 05 Feb 2026 02:43:31 +0000
ROA not before:           Thu 05 Feb 2026 02:38:31 +0000
ROA not after:            Thu 04 Feb 2027 02:43:31 +0000
asID:                     265462
IP address blocks:        168.196.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f5:c6:53:96:aa:21:c1:0e:3a:a5:69:83:64:e0:05:35:4c:f1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Feb  5 02:38:31 2026 GMT
            Not After : Feb  4 02:43:31 2027 GMT
        Subject: CN=42C2BEE2E1BBC7E7326915A5B9D4EDDA41D714D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:43:49:11:fa:17:83:d5:ad:4b:8e:f6:5c:
                    9d:ec:8d:f9:0c:c9:0d:f8:5e:00:f5:67:76:78:1d:
                    d0:ac:67:06:e0:d4:d2:7f:bd:ad:2a:e9:8a:80:83:
                    f5:78:b8:43:d0:28:ed:d4:1b:af:42:69:91:2d:da:
                    58:45:a3:ac:3b:35:5f:92:d0:b6:e2:2f:5e:e7:7c:
                    8d:21:a0:e2:58:1a:d1:56:72:64:c0:24:b0:24:60:
                    1f:7e:b3:ad:4f:d1:02:fc:c4:90:75:3b:88:23:50:
                    95:01:a5:22:e4:e0:eb:3a:59:c4:85:ce:91:0c:c9:
                    9b:43:47:37:2b:1e:d0:e0:50:56:92:63:63:6e:38:
                    fa:37:a5:ba:ea:09:9b:2f:eb:82:b1:63:e6:3b:bb:
                    44:cc:f8:ff:5d:07:04:6b:81:29:9f:c7:b2:fc:c4:
                    c6:60:55:40:84:09:a3:56:eb:80:b1:5d:00:d2:a8:
                    46:cf:29:01:07:f5:19:aa:25:99:63:0c:76:e6:44:
                    54:8e:1c:64:d2:40:aa:73:5d:82:42:67:66:95:72:
                    ef:6e:0c:8a:b3:4f:a4:32:f3:04:7e:0a:c3:1f:de:
                    67:0b:e1:45:f2:e3:9f:30:1a:5b:89:30:bf:f0:12:
                    83:8b:b3:9e:f8:03:26:80:94:72:1b:02:a4:11:fd:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:BE:E2:E1:BB:C7:E7:32:69:15:A5:B9:D4:ED:DA:41:D7:14:D8
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/3136382e3139362e3232302e302f32342d3234203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:c7:9b:cc:5f:c5:2a:da:48:f9:40:d7:7a:7b:ec:70:bd:f8:
         86:04:69:bb:17:d7:e2:0c:6c:df:04:41:33:92:23:63:10:f8:
         e7:8c:73:02:31:40:27:33:59:1b:71:3e:14:e5:25:97:a0:a1:
         3c:3d:44:27:99:e2:71:36:f6:40:d3:66:ae:c0:9b:73:95:c5:
         b4:2e:f3:60:cf:23:27:50:46:82:6e:65:5a:64:40:b7:0d:1d:
         1b:4b:fa:02:ae:b8:43:06:62:6f:a3:e2:e8:69:31:60:8f:10:
         ac:e8:ee:23:1d:6c:8a:4b:83:9f:a7:84:13:a0:7b:15:de:34:
         78:4c:21:42:a2:86:f9:05:a2:3b:dc:43:29:72:bf:d0:b7:60:
         a2:ab:cf:96:21:99:05:17:56:0d:79:57:e3:c2:cc:81:98:6f:
         ca:d8:b0:fa:0d:2f:36:5c:a0:51:32:47:5d:68:05:89:91:2e:
         47:81:a2:0f:80:66:ae:8e:e7:05:c6:de:12:45:53:00:5f:eb:
         ca:bf:34:1a:a2:c5:fd:03:8a:83:e0:90:b5:2f:b0:41:89:37:
         0b:ed:b2:36:2f:ee:e2:65:d7:7e:87:75:f2:ef:c0:7b:73:28:
         fd:70:85:bf:d1:48:1f:8b:73:69:8a:43:f0:da:3d:fa:4a:9c:
         c6:c4:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:50 2026 by rpki-client