Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
File:                     3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa (raw, json)
Hash identifier:          +EzznQxnyhDO/IEnAF7S6JqmOB0qExVp1TNw0b9W0uE=
Subject key identifier:   A0:48:99:E6:25:3F:CE:DA:D4:1F:46:EC:B2:72:ED:51:BC:32:DA:DE
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       28C43F89E1FCB6FF895F5AFD4E32B211F4795BAE
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa
Signing time:             Thu 05 Feb 2026 01:09:38 +0000
ROA not before:           Thu 05 Feb 2026 01:04:38 +0000
ROA not after:            Thu 04 Feb 2027 01:09:38 +0000
asID:                     52639
IP address blocks:        168.195.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c4:3f:89:e1:fc:b6:ff:89:5f:5a:fd:4e:32:b2:11:f4:79:5b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Feb  5 01:04:38 2026 GMT
            Not After : Feb  4 01:09:38 2027 GMT
        Subject: CN=A04899E6253FCEDAD41F46ECB272ED51BC32DADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:12:1b:4a:fc:86:d7:e2:e6:5c:91:8c:95:
                    77:f6:dc:6b:ec:97:5d:78:b0:7b:b9:b7:a4:6e:c4:
                    57:be:05:9e:62:cf:46:fd:28:af:cb:f2:c8:5e:3f:
                    f2:dd:6b:5c:d0:d9:b5:03:41:29:bd:73:e4:14:02:
                    43:49:f8:67:96:26:e1:1f:66:93:50:7f:a6:6e:95:
                    63:45:de:8c:d7:1a:f4:89:d4:01:0e:39:1e:e1:66:
                    ad:ff:97:67:5d:38:bd:5b:f7:8c:24:e2:29:f6:1a:
                    54:3d:8e:3f:67:2b:ae:f2:49:4e:61:41:3b:ac:6d:
                    68:be:79:ca:8c:ac:76:a9:8b:4b:e1:e0:08:4b:ff:
                    24:3b:b4:90:65:77:3d:c0:4d:c4:54:4b:c8:80:f0:
                    f2:59:09:3d:ca:7a:84:27:dc:7c:50:10:93:c1:ad:
                    6c:3c:66:8b:43:64:93:2f:e3:69:73:df:e8:23:4a:
                    1f:46:6c:ef:82:4e:4d:41:e7:8c:10:ad:45:7e:75:
                    0c:87:31:3c:08:cb:c3:cb:66:27:a2:2a:cb:5c:de:
                    87:40:e1:db:03:d9:a3:b0:c5:b3:13:76:e5:57:9d:
                    35:57:6d:99:9d:15:9d:d2:75:05:c7:87:95:97:45:
                    81:40:55:d7:32:76:80:64:9c:ef:83:c8:30:2b:5b:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:48:99:E6:25:3F:CE:DA:D4:1F:46:EC:B2:72:ED:51:BC:32:DA:DE
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/3136382e3139352e3131322e302f32322d3234203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:44:03:23:40:20:51:9d:8b:9e:e6:0e:30:44:38:96:6d:
         2b:10:c0:29:ae:c3:f0:32:fc:20:2c:e2:e5:3e:3c:78:32:b7:
         4a:ac:63:bb:1c:ee:7f:11:a0:34:9a:8c:21:0c:40:1d:f1:96:
         7b:4b:a1:70:5b:ae:1e:06:14:5e:c9:07:28:cc:15:2f:df:ad:
         1b:2d:aa:3c:98:8c:2f:f4:93:06:f5:a9:77:70:94:db:eb:6c:
         58:de:a5:82:0d:ef:55:da:20:ab:14:69:58:fd:42:33:8d:1d:
         ac:f5:11:e0:5b:4c:2b:b5:d1:4a:ee:fe:d7:bb:02:9a:9d:48:
         03:74:28:08:a6:4d:2a:ea:81:e1:e9:67:c6:2e:38:68:31:1e:
         f9:50:60:9b:51:f4:ef:4f:b4:84:c3:fa:c7:d1:c5:d9:e1:a2:
         b3:b3:45:01:9e:88:d7:2f:94:40:56:ac:2e:33:7c:b8:20:02:
         98:1a:37:f5:5f:c6:06:c2:8e:77:1b:f9:3a:2e:b1:52:38:2f:
         7f:03:24:83:8d:4c:35:27:93:79:c2:a3:70:80:13:30:16:c9:
         44:7f:c4:31:cc:00:d7:62:a1:2c:e4:8a:89:f4:57:b5:2c:06:
         28:0c:62:48:d8:49:e2:bb:bc:aa:ae:d6:9c:2c:9f:3b:6a:94:
         ee:41:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:07 2026 by rpki-client