Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          FAsxDmW+/Bs/s5xTcEEWymaKin/Qfd95iystyT4UJR0=
Subject key identifier:   84:A3:CC:9B:6C:DF:41:D6:7A:42:15:12:4D:AD:BF:87:0E:69:85:65
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       4B59B9D01E53640A391E405A5BCBB8E061922CED
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa
Signing time:             Thu 05 Feb 2026 06:46:15 +0000
ROA not before:           Thu 05 Feb 2026 06:41:15 +0000
ROA not after:            Thu 04 Feb 2027 06:46:15 +0000
asID:                     264392
IP address blocks:        131.161.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:b9:d0:1e:53:64:0a:39:1e:40:5a:5b:cb:b8:e0:61:92:2c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Feb  5 06:41:15 2026 GMT
            Not After : Feb  4 06:46:15 2027 GMT
        Subject: CN=84A3CC9B6CDF41D67A4215124DADBF870E698565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:f7:1b:ca:1e:1d:f0:94:48:58:de:b0:f2:
                    81:14:cc:4e:8b:53:15:e2:74:50:d2:ec:2a:9e:58:
                    d7:57:31:18:e7:da:01:71:6d:53:54:b7:3f:4b:a6:
                    6a:3e:ea:30:1e:f1:8a:6e:f2:a6:da:47:5a:bf:08:
                    a6:a3:10:c8:91:c2:f7:f8:23:19:03:e9:9f:d6:6a:
                    48:9d:7d:18:91:fc:b4:9a:99:0a:16:d8:a3:50:eb:
                    42:13:ba:53:a8:35:2a:81:44:a3:5d:e0:35:76:d4:
                    30:2e:ca:04:79:98:39:41:98:9b:60:44:bc:83:df:
                    a6:82:21:16:3b:56:0c:fa:34:e5:85:82:6f:d6:8c:
                    c5:06:df:9b:d8:f6:39:f2:2e:4d:c4:e7:c9:b0:b4:
                    6c:88:31:e1:4f:62:25:eb:26:34:c8:db:18:66:f3:
                    df:e3:8c:66:74:05:bc:32:07:c9:dd:65:64:33:91:
                    59:a0:ab:be:d6:dd:7f:46:06:b8:7a:84:79:7d:c9:
                    47:a9:ca:8d:81:ac:c8:f6:aa:78:4d:78:df:fd:72:
                    99:b2:e5:17:5d:ff:de:a0:5a:18:42:11:bc:c8:78:
                    72:e1:9d:5a:18:a2:f1:8c:ac:5a:e5:53:b7:0c:0f:
                    f9:a1:95:75:ec:80:ae:86:e9:c9:95:f1:5b:29:68:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:CC:9B:6C:DF:41:D6:7A:42:15:12:4D:AD:BF:87:0E:69:85:65
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:87:e5:6c:ac:1c:a0:d5:bf:14:4b:e5:1e:2a:b4:92:88:
         27:e7:94:2f:7e:9b:a9:77:0c:1d:f3:15:eb:03:e2:d9:5b:e7:
         b0:c4:77:41:c3:16:71:d1:ae:31:08:83:d8:f5:a4:c3:c9:c6:
         42:92:ba:29:d3:d3:1b:c9:ee:45:7b:e7:03:34:5b:4d:13:7b:
         ad:05:ad:ab:68:06:32:ae:a1:e0:10:5a:38:6c:5b:c4:fd:b6:
         a8:42:5d:04:c3:b7:37:86:c0:ae:e3:1c:eb:2f:8a:61:e4:d9:
         6f:31:ff:0f:3e:4a:f7:6d:7e:4c:6c:da:23:19:28:c9:a0:71:
         27:c5:4b:7d:90:5e:30:8d:54:24:93:12:48:aa:67:66:e1:0f:
         c7:a3:69:32:48:ec:ad:53:9f:46:e6:33:a6:8f:0c:d5:04:f6:
         9f:ef:d9:c3:c0:69:21:90:7c:3d:53:13:98:65:31:8f:7e:a7:
         73:7d:dd:9f:d2:41:2e:07:70:48:7e:3e:fc:e5:64:84:9f:c6:
         03:92:cc:b1:7b:1f:e1:80:f0:c8:6c:da:d4:77:44:21:42:37:
         f0:e7:ca:77:af:29:7c:2b:bb:4f:77:df:13:f0:1d:aa:7a:ec:
         31:cc:74:6b:b7:a1:97:bd:18:eb:5d:d0:ab:c1:8c:71:f6:b4:
         61:f5:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:49 2026 by rpki-client