Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa
File:                     3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa (raw, json)
Hash identifier:          FWw1QCSDkRcfzaX38sAYnk77POWjg3xd99evKD0E1/8=
Subject key identifier:   09:3A:6E:CF:00:46:6D:65:DD:83:18:C6:DE:26:BA:42:FA:E7:F1:BB
Certificate issuer:       /CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
Certificate serial:       440916739B42DB62E0E24DBBD2778583291DC1CD
Authority key identifier: D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa
Signing time:             Wed 04 Feb 2026 21:43:00 +0000
ROA not before:           Wed 04 Feb 2026 21:38:00 +0000
ROA not after:            Wed 03 Feb 2027 21:43:00 +0000
asID:                     271450
IP address blocks:        181.233.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl
                          rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:09:16:73:9b:42:db:62:e0:e2:4d:bb:d2:77:85:83:29:1d:c1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8683D560654AD562BAFEB400C4C97282B65EB8D
        Validity
            Not Before: Feb  4 21:38:00 2026 GMT
            Not After : Feb  3 21:43:00 2027 GMT
        Subject: CN=093A6ECF00466D65DD8318C6DE26BA42FAE7F1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:ef:eb:6c:41:ef:a3:9d:67:21:53:2c:f2:
                    a3:6d:05:ea:a8:c0:e8:b1:22:06:a7:f2:00:81:09:
                    8b:c5:12:e8:75:b1:26:86:c5:44:04:90:c9:f0:c1:
                    9f:9a:27:08:21:f5:b4:48:78:ae:df:35:5e:0d:b7:
                    39:f0:a2:68:f5:12:ba:01:84:98:cb:d7:55:3d:4e:
                    21:47:fe:ed:74:4b:8d:be:84:c6:83:8f:9a:34:71:
                    c8:bd:b0:b3:90:7c:be:0e:9f:77:02:02:ea:8d:79:
                    09:bf:40:fe:21:7e:24:a3:9f:19:9c:95:db:3f:2a:
                    45:5a:85:5f:87:34:fb:5d:24:a5:f7:72:23:39:eb:
                    5b:1a:f3:f3:09:5a:e3:30:41:1d:10:61:02:8c:62:
                    3e:6c:a2:dd:ea:2b:6b:e3:4e:8c:a5:e2:19:cd:ff:
                    1b:88:de:8a:e5:8d:82:d7:91:39:c2:f7:01:ca:43:
                    44:c8:2e:9d:73:68:7e:f7:7b:1d:fb:93:7d:0a:03:
                    28:45:0c:20:8c:db:11:df:fa:5b:db:7d:ef:2f:8d:
                    f1:a9:63:c0:bd:4b:2d:47:1e:0f:25:0e:6a:7a:15:
                    94:2b:f4:84:6a:2a:aa:65:90:20:5b:45:03:44:b2:
                    2d:aa:72:20:1a:17:20:08:20:8a:90:c9:f3:f4:e4:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3A:6E:CF:00:46:6D:65:DD:83:18:C6:DE:26:BA:42:FA:E7:F1:BB
            X509v3 Authority Key Identifier:
                keyid:D8:68:3D:56:06:54:AD:56:2B:AF:EB:40:0C:4C:97:28:2B:65:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8683D560654AD562BAFEB400C4C97282B65EB8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xQERvWAJTABAMv4KjgfZ9FURxyo3GwpJBFzfVPTQ9TA/1/3138312e3233332e36382e302f32322d3234203d3e20323731343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:84:a4:08:30:e1:32:bd:1d:a6:5f:a8:45:8e:21:86:9d:
         93:54:e3:0b:08:40:ca:30:fd:46:fb:fa:53:7d:e1:d5:14:4e:
         ed:24:54:2e:09:f7:c7:5b:08:c4:34:bc:d1:79:84:87:b6:5c:
         17:40:98:1c:47:46:a9:a2:a0:f2:91:98:c8:f9:62:3e:5e:99:
         1a:14:20:1d:83:33:3b:84:25:fd:0b:58:37:75:4b:53:3b:84:
         8e:ae:09:45:66:b3:a4:a0:e3:95:3a:0c:52:71:9b:bc:be:23:
         1e:b2:93:6e:f1:9c:76:a8:f1:32:18:c5:8e:12:b6:b9:e6:22:
         98:93:bd:43:8d:46:77:24:18:d2:10:62:24:29:88:6b:15:61:
         a3:02:b4:d4:11:1d:ae:14:ee:ab:5b:e9:ff:76:96:90:54:de:
         95:59:60:8e:59:c7:51:f3:0b:74:63:d8:c3:9b:f5:9d:17:b8:
         07:df:27:e5:70:55:26:aa:8c:9c:c3:28:18:55:54:ad:97:39:
         d6:21:41:cd:4d:c0:13:aa:01:ee:e0:d8:ad:b6:f9:6a:e9:b7:
         f8:1e:78:d9:8c:1f:84:8c:a2:95:b1:ba:03:cd:e0:22:54:66:
         87:a4:c6:24:ef:cc:87:1a:45:d8:db:94:00:7b:73:75:a3:c7:
         f0:8d:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:23 2026 by rpki-client