Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa
File:                     3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa (raw, json)
Hash identifier:          4XbiNmV9LkkMJqzgx41c9S5tsg8vcldR22koSXs/YNA=
Subject key identifier:   2B:00:44:91:E7:56:43:07:B6:7F:25:1B:5B:47:EB:62:27:FD:F2:5F
Certificate issuer:       /CN=B6CC812D59F4308FCB1D2239555678B476218767
Certificate serial:       51A8236B4B15D5384D5FA21950A1BCF148B88E1F
Authority key identifier: B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa
Signing time:             Wed 04 Feb 2026 21:16:16 +0000
ROA not before:           Wed 04 Feb 2026 21:11:16 +0000
ROA not after:            Wed 03 Feb 2027 21:16:16 +0000
asID:                     271311
IP address blocks:        181.232.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl
                          rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a8:23:6b:4b:15:d5:38:4d:5f:a2:19:50:a1:bc:f1:48:b8:8e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6CC812D59F4308FCB1D2239555678B476218767
        Validity
            Not Before: Feb  4 21:11:16 2026 GMT
            Not After : Feb  3 21:16:16 2027 GMT
        Subject: CN=2B004491E7564307B67F251B5B47EB6227FDF25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:c6:43:38:7d:45:5f:80:e6:80:3a:61:64:
                    84:38:1c:a9:62:f8:60:00:22:ab:15:0e:67:f0:5d:
                    79:a1:bf:50:ac:1c:ee:51:63:38:ed:27:f9:5d:35:
                    98:e5:e8:18:76:3a:d4:a8:4c:ed:07:0a:7d:71:e3:
                    32:d3:c4:65:87:0d:6b:ac:23:21:9a:57:9d:68:9f:
                    a8:ec:3a:b5:f8:b9:bf:b5:7e:9f:87:92:5a:b4:26:
                    ab:2a:ea:80:f8:e5:2b:6c:9f:ba:ac:db:04:e0:bd:
                    8f:68:69:4a:b6:7e:dd:8f:23:d7:0c:fa:80:16:80:
                    0e:41:97:7c:18:f8:83:50:3a:21:00:9b:6b:cd:b0:
                    71:63:5e:a3:5d:6b:c2:fb:fd:73:cc:23:9f:aa:4b:
                    be:15:56:98:c4:68:37:59:86:df:a5:d1:6c:34:c3:
                    7a:21:c4:c3:bb:c9:4e:5a:db:4e:67:68:6d:80:0c:
                    99:29:3a:7c:17:54:f8:d5:30:bc:8a:6e:e7:32:ab:
                    da:f2:2c:48:7f:0f:28:88:86:19:b9:34:c1:1c:c0:
                    59:36:50:33:7f:60:4d:ca:46:da:10:02:61:65:21:
                    65:25:3b:3f:c1:0d:58:26:85:be:23:6d:8d:72:7a:
                    2a:29:2d:a9:06:bb:90:a0:31:be:49:8d:35:65:78:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:00:44:91:E7:56:43:07:B6:7F:25:1B:5B:47:EB:62:27:FD:F2:5F
            X509v3 Authority Key Identifier:
                keyid:B6:CC:81:2D:59:F4:30:8F:CB:1D:22:39:55:56:78:B4:76:21:87:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/B6CC812D59F4308FCB1D2239555678B476218767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6CC812D59F4308FCB1D2239555678B476218767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ggSXXn7WDpq1qq6hzbw9Y8szbmX7DWEqT35bth7CWVE/1/3138312e3233322e3136362e302f32332d3233203d3e20323731333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e1:b1:9d:ef:14:27:0b:38:c0:74:9d:22:28:f6:22:fb:06:09:
         ae:45:59:14:a9:f5:8b:ce:a7:80:2c:f2:fd:f8:f9:06:7e:ee:
         d6:d2:a5:78:77:70:9f:b5:7d:80:34:02:53:42:4e:aa:c1:d7:
         50:e9:3e:94:f1:11:75:73:dd:c4:db:d2:49:a0:bc:39:6d:9d:
         37:1f:94:0f:0b:cd:ff:e3:6d:37:ea:09:bd:c3:33:a7:7f:51:
         dd:18:f6:43:d2:62:83:81:73:57:0c:1d:d5:72:95:10:c8:dd:
         35:e3:14:e0:dd:7e:fb:ec:ff:82:77:96:ae:6a:5a:09:53:55:
         78:1e:16:d5:cb:1f:0d:44:ed:f8:c7:a4:4d:ca:2e:f1:d1:c4:
         d9:0c:2d:36:a4:7b:59:f1:a5:2e:b0:d2:31:2d:f5:e3:34:e1:
         08:fa:e9:27:aa:38:4a:7b:3d:4b:ad:d8:9c:a9:79:56:45:d2:
         e5:bc:5b:31:77:9d:47:4d:e5:98:1a:0a:50:7d:c9:b8:7b:e4:
         d9:7e:cb:38:7d:62:a0:3b:f5:07:6e:cf:eb:f4:80:c3:c0:c0:
         ad:82:cd:4c:f0:4d:c5:9c:1f:c6:3c:22:7f:f2:b4:d0:7f:50:
         b7:a9:96:db:09:30:9d:88:57:d4:95:e5:d0:40:c5:42:d2:36:
         21:57:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:38 2026 by rpki-client