Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa
File:                     3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier:          0u0ympimOuMaXyzqDRFQGa5BiM4j09qlX5cF0PTlnhI=
Subject key identifier:   F1:93:09:48:1A:E8:FE:E4:0D:C2:41:03:67:DB:1D:90:7D:C2:E3:52
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       9D5D3B724D5609F2F03F2A23634FADF77C613E
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa
Signing time:             Thu 05 Feb 2026 03:00:09 +0000
ROA not before:           Thu 05 Feb 2026 02:55:09 +0000
ROA not after:            Thu 04 Feb 2027 03:00:09 +0000
asID:                     266635
IP address blocks:        128.201.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9d:5d:3b:72:4d:56:09:f2:f0:3f:2a:23:63:4f:ad:f7:7c:61:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Feb  5 02:55:09 2026 GMT
            Not After : Feb  4 03:00:09 2027 GMT
        Subject: CN=F19309481AE8FEE40DC2410367DB1D907DC2E352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:7e:5c:7f:ff:c2:c2:ac:b3:a1:0b:5a:00:
                    15:d4:81:e8:69:c9:01:9a:44:f7:71:70:38:74:aa:
                    49:75:0b:6d:45:04:48:03:fe:d2:8e:7a:37:12:09:
                    2f:39:37:2f:09:7b:ce:51:e8:da:6c:a7:20:79:df:
                    d6:cc:58:26:00:56:5e:55:fd:d0:c6:df:30:8b:95:
                    d4:50:fc:1a:70:66:88:4a:78:c0:06:47:2b:ab:2d:
                    0f:f4:57:a2:ec:9d:79:4a:d0:db:48:a2:d0:b1:b3:
                    28:47:25:7c:e0:fe:fa:b9:25:34:a1:47:81:94:e4:
                    62:85:78:83:c9:c2:8b:bc:f5:bd:56:59:88:c7:ce:
                    3e:9b:2f:d6:d3:cd:0f:0f:4b:9b:6e:e3:9b:e8:9d:
                    a1:e8:c5:c0:a0:81:99:cd:96:74:18:d3:59:89:87:
                    3d:c8:93:d5:54:7c:fb:3d:48:0a:be:5d:1b:32:75:
                    f4:cd:93:40:a5:c6:0f:f3:2b:52:a6:6b:b5:50:8d:
                    28:26:47:b1:a1:43:0d:c8:bd:ff:ea:dc:9b:ff:44:
                    13:b5:f7:91:1c:3a:11:51:3d:36:f6:e5:41:45:6f:
                    f5:48:4a:0e:9e:ff:5f:c8:d8:70:09:23:6b:a2:22:
                    40:0e:7e:8a:f0:b4:fd:83:08:50:ae:b8:8c:a3:1a:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:93:09:48:1A:E8:FE:E4:0D:C2:41:03:67:DB:1D:90:7D:C2:E3:52
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f8:0e:41:27:36:a5:a0:10:db:f4:ec:e6:d7:9f:72:95:eb:
         d4:0e:8a:04:60:9f:d7:c7:b6:55:c2:f3:3f:36:8c:82:42:2e:
         39:53:9d:44:79:98:f9:2a:58:2b:7d:13:24:d9:4e:9b:b8:80:
         2e:7b:57:63:6e:f1:8a:26:f8:fd:b8:cc:13:d7:f4:ca:f7:e4:
         d7:58:8f:26:40:22:89:a4:1e:e7:1e:8a:2b:3c:d2:23:d0:7d:
         2c:d4:e1:c9:6b:82:c8:a7:ae:1e:1f:c7:bd:8e:f1:dc:74:c9:
         24:2c:1e:12:91:de:54:dc:d7:86:1e:94:4d:af:43:63:33:ba:
         e9:e4:60:1d:13:d3:a6:18:fa:d5:07:30:2e:b9:92:64:04:50:
         f7:38:eb:5c:ff:cb:01:74:25:3d:57:4b:21:fe:be:e0:62:af:
         00:83:d0:37:f8:5c:7b:8d:de:5b:5b:10:a7:de:36:07:f4:62:
         3e:f9:95:5e:02:e6:07:de:17:1b:57:1c:2e:62:ba:8b:38:90:
         cd:ed:c1:a9:91:3c:4d:11:f0:c7:b6:33:1c:c6:8f:0d:9f:03:
         c2:c5:82:8a:72:bf:7b:b0:33:fc:f6:fd:25:98:b7:ef:e2:1f:
         51:af:fd:f5:d1:3d:1a:89:ca:51:22:53:e2:00:f6:a1:96:fd:
         2a:b6:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:30:53 2026 by rpki-client