Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          SEi1adJ5GU9g9xC9bT7EQqmxAQHQQZIbr9dX2nPI/Qg=
Subject key identifier:   86:2B:24:3F:37:8A:CE:4E:CD:61:DD:DD:8F:C4:FC:49:8E:4C:0E:3A
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       736F1DD06E8F34A0805F64E3DD20BD8876C3080E
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa
Signing time:             Thu 05 Feb 2026 06:46:14 +0000
ROA not before:           Thu 05 Feb 2026 06:41:14 +0000
ROA not after:            Thu 04 Feb 2027 06:46:14 +0000
asID:                     264392
IP address blocks:        131.161.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6f:1d:d0:6e:8f:34:a0:80:5f:64:e3:dd:20:bd:88:76:c3:08:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Feb  5 06:41:14 2026 GMT
            Not After : Feb  4 06:46:14 2027 GMT
        Subject: CN=862B243F378ACE4ECD61DDDD8FC4FC498E4C0E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:05:09:68:de:5b:6b:f2:4f:4d:e6:03:1f:
                    5f:07:81:9f:4a:dd:c5:a5:51:f1:5c:4d:76:77:0b:
                    6c:5a:e7:9c:88:f5:fc:a6:57:b3:b6:0f:93:ee:2e:
                    a2:e1:34:38:5e:d1:b4:eb:bf:33:14:82:fd:ac:fd:
                    14:06:32:80:fe:8e:49:10:ed:a1:17:87:f7:0e:c9:
                    f1:84:63:08:5d:91:8b:7b:9a:2a:dc:21:20:5b:49:
                    7c:ce:2a:64:ba:00:f3:48:99:ae:06:c5:b9:f9:c5:
                    d5:8e:ae:40:8d:4e:60:23:53:b8:30:68:54:a6:b5:
                    49:b2:8d:ed:90:8c:c9:d1:3b:e0:7b:9e:4f:6d:1d:
                    f4:1b:71:9f:35:ab:59:93:d8:1e:ba:72:80:05:7c:
                    80:73:82:a0:ed:f9:b6:17:fa:e7:fe:dc:59:88:d0:
                    9e:e3:e6:97:86:b2:40:6e:60:73:6a:56:9e:a0:19:
                    dc:fd:e1:f6:8a:d6:f7:ce:36:89:82:c6:aa:5b:f8:
                    81:22:73:37:f5:23:60:79:39:10:12:38:5b:4b:f8:
                    46:cc:a3:ae:1d:42:44:87:8c:e8:de:35:5c:db:ba:
                    98:bc:31:39:c5:c1:58:49:1b:48:38:ba:12:a1:dd:
                    22:2f:65:08:e1:3f:3b:33:7d:14:25:dc:0f:ff:2e:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:24:3F:37:8A:CE:4E:CD:61:DD:DD:8F:C4:FC:49:8E:4C:0E:3A
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:17:dd:03:a3:54:87:d2:33:10:72:46:f3:44:d8:4e:bf:
         71:c0:d7:43:55:8c:ff:f9:94:28:98:74:1f:5e:a6:3c:6a:84:
         f4:73:05:f3:d1:1c:f2:fd:25:19:b1:b9:5d:74:77:69:8e:12:
         63:b9:18:0a:ab:2d:b1:08:e9:e3:a7:d1:6a:84:e3:8c:30:c2:
         74:e7:17:5b:76:ad:b7:cd:29:3e:64:be:cd:c5:cf:eb:96:14:
         09:15:9a:6e:12:93:52:61:a2:9a:75:13:eb:af:2f:d8:8e:f1:
         4e:43:8e:61:92:c5:4c:5b:b9:dc:d6:8f:42:e3:27:4b:02:e4:
         57:13:63:5e:0e:17:4e:cc:41:cb:39:24:3a:82:68:05:e6:be:
         df:c0:23:8a:05:0f:9e:c6:f8:03:50:9b:32:05:5e:49:df:f8:
         3c:05:64:41:c8:f8:56:0f:e0:e1:dd:ca:c5:82:bf:b4:13:8a:
         20:d8:c4:b6:5f:52:ef:ca:46:ef:5a:5f:d6:2a:b9:b6:f6:12:
         d4:91:11:86:b0:a9:28:8b:df:e7:e3:ad:10:ae:8f:51:69:74:
         0b:62:c5:e0:ca:be:3b:5e:9f:47:ba:f8:3d:2b:86:69:74:f5:
         d5:cc:71:0d:16:73:d6:2e:40:77:75:38:55:3a:6b:fa:02:04:
         bc:0b:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:53 2026 by rpki-client