Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa (raw, json)
Hash identifier:          VoEt3OJBqfmSshavjwDCtAgQJRKCyBN3ZqveJlMDJ+0=
Subject key identifier:   1A:73:32:46:BD:AF:6C:0B:3A:6B:07:90:A6:59:E2:A5:E4:9B:FD:C3
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       1EBC3BF77B549CCBE7E392AF2FBA934F307F24DA
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
Signing time:             Thu 05 Feb 2026 03:00:09 +0000
ROA not before:           Thu 05 Feb 2026 02:55:09 +0000
ROA not after:            Thu 04 Feb 2027 03:00:09 +0000
asID:                     266635
IP address blocks:        128.201.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bc:3b:f7:7b:54:9c:cb:e7:e3:92:af:2f:ba:93:4f:30:7f:24:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Feb  5 02:55:09 2026 GMT
            Not After : Feb  4 03:00:09 2027 GMT
        Subject: CN=1A733246BDAF6C0B3A6B0790A659E2A5E49BFDC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:22:78:10:26:b6:77:10:63:f0:45:49:81:
                    69:b3:4e:c7:b6:19:46:08:8b:cc:13:3f:4b:e0:f8:
                    d3:4b:89:71:25:26:6b:fe:c4:8b:63:14:86:28:89:
                    a8:76:99:3f:b3:71:36:58:b8:57:e1:4a:c9:c4:cb:
                    4f:24:d0:b5:7c:a4:91:a4:1a:ce:92:8e:42:13:69:
                    a7:c7:35:ec:d9:97:6e:9c:f6:50:3d:07:fe:07:16:
                    ad:99:19:e8:fd:55:c9:5f:4a:66:86:27:86:23:85:
                    f4:6f:9e:17:d9:ee:9d:ee:1e:2d:a6:9e:ca:c6:2f:
                    0a:cc:d2:b2:5f:20:79:b3:c7:3c:02:bf:dd:a0:82:
                    b9:58:8b:43:7b:62:b8:37:a2:7f:3b:64:46:d0:a0:
                    ba:31:92:5b:06:54:20:8b:27:f6:30:42:c6:0e:cb:
                    70:e5:9a:b6:c1:84:53:a2:33:b9:c1:79:d2:72:d8:
                    14:73:8a:c4:19:a2:9f:e6:52:ea:f2:c6:b9:d5:02:
                    a1:bb:b7:ac:6f:ab:26:7a:a1:f5:ae:f3:b2:92:fd:
                    94:67:4e:63:54:99:e7:ab:69:c3:e3:84:4d:46:ff:
                    26:0f:e1:6c:16:5f:4d:25:4d:5c:4a:03:fb:da:83:
                    37:1b:75:04:4e:23:45:4c:69:4e:05:59:6e:c6:3a:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:73:32:46:BD:AF:6C:0B:3A:6B:07:90:A6:59:E2:A5:E4:9B:FD:C3
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:36:47:a8:36:91:0a:89:1b:fc:30:f7:db:3f:56:8d:b0:8c:
         8e:ce:26:8a:71:8e:87:82:2d:c6:7a:3e:fb:16:de:cd:cd:5a:
         44:6b:66:d0:0c:20:ba:3f:fb:df:f7:4b:a8:9c:e2:e7:94:bf:
         01:f3:a5:97:38:56:f0:dc:90:bc:29:5c:1c:e1:ee:1d:f8:0b:
         b3:de:96:35:80:9b:4e:a2:38:22:2a:f3:c2:21:a8:b9:25:cb:
         eb:e3:e8:eb:02:e9:91:81:a0:61:12:fd:68:ee:c0:ac:e4:fe:
         76:e0:a5:c8:e3:76:67:98:13:29:1d:22:11:85:2d:7a:89:45:
         45:ff:0a:b1:39:ca:0b:e6:ee:0c:52:40:7e:6b:f5:22:8b:a9:
         9d:88:49:70:24:aa:05:8d:3e:88:e4:5b:82:a4:4a:fc:af:08:
         02:ca:95:09:11:40:8a:27:8a:60:6b:35:3b:7c:7f:1d:10:bb:
         ca:4a:71:87:2a:42:51:1d:0e:a1:4b:bb:57:4c:ff:af:91:64:
         3a:08:91:bc:26:81:32:70:11:14:9f:8b:ee:bc:2c:e6:b4:b4:
         b3:03:95:bb:0b:b9:f0:62:7a:4f:36:be:da:77:5d:5e:ff:c0:
         5c:9e:25:70:43:11:6c:08:bd:7a:07:c1:c3:a4:53:ae:5c:c9:
         dc:64:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:49 2026 by rpki-client