Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa
File:                     3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa (raw, json)
Hash identifier:          KY3AM1X9Hwm85qC+2O3l93gIq68i1b92YpnAJCNiZ/o=
Subject key identifier:   21:E9:5A:6B:EB:9B:FF:B8:CF:60:3B:F1:64:66:DA:89:B9:5F:78:AA
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       1324F10D9FC96092AB82966053651C6CE13B6B37
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     265379
IP address blocks:        168.194.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:24:f1:0d:9f:c9:60:92:ab:82:96:60:53:65:1c:6c:e1:3b:6b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject: CN=21E95A6BEB9BFFB8CF603BF16466DA89B95F78AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:f4:69:d8:d9:81:c8:a9:1d:87:9e:6a:ab:
                    22:f0:cc:72:b9:56:55:4d:ec:95:dd:57:e4:f1:f4:
                    f2:9f:34:ac:67:da:7b:43:4d:e0:14:a1:2a:47:0d:
                    ec:2c:5a:3b:bb:9b:30:8e:1d:3f:e1:cd:48:6a:cc:
                    1b:e7:20:37:6b:27:40:22:2d:25:c5:3b:11:b2:1f:
                    79:92:62:b1:f6:35:42:a6:ee:c8:60:8c:00:53:0c:
                    a4:27:f7:fd:38:65:7d:23:99:96:d8:34:8c:1b:c1:
                    d2:4c:68:3d:23:20:ba:03:58:0a:19:5d:7c:80:97:
                    67:10:3c:7d:3a:fc:87:f1:fd:bf:b3:df:c8:dc:49:
                    e0:db:2d:24:b5:ef:b7:2e:e7:91:ff:11:18:f0:df:
                    97:1b:6f:d9:5b:a5:2f:38:0e:ca:ac:55:54:7f:6a:
                    e6:50:cc:4f:40:4e:47:20:f1:4b:60:3a:ef:0f:9e:
                    a4:93:25:a9:9b:64:b1:fe:f7:e3:51:3e:ac:f0:20:
                    95:9c:00:48:0f:28:ce:a3:9e:26:13:86:19:03:5e:
                    60:94:46:f8:28:8e:6d:ee:52:5b:4b:29:29:12:32:
                    4d:0c:33:69:02:6f:16:cc:e9:a4:1d:f4:a4:86:b0:
                    3d:64:e4:66:45:ce:27:be:fd:55:94:26:e8:57:28:
                    70:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:5A:6B:EB:9B:FF:B8:CF:60:3B:F1:64:66:DA:89:B9:5F:78:AA
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36342e302f32322d3232203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:0a:f9:86:a4:c4:63:a4:8e:eb:57:06:50:40:65:94:ba:
         da:00:4d:2b:45:a5:e5:72:c3:2a:f9:dd:b1:0e:d6:96:25:e4:
         ca:3d:67:9f:29:84:0e:97:54:9c:da:29:21:7f:78:5c:c3:17:
         a1:db:96:c5:dd:2f:d1:73:fb:15:16:50:4e:cc:4e:61:6b:1b:
         9e:35:94:79:8e:c2:12:31:00:21:3c:35:76:7e:91:4e:17:eb:
         51:d4:8d:6e:44:b8:81:1b:8b:cc:16:2b:97:2a:d4:1d:78:3c:
         eb:85:0d:37:27:c9:d9:f5:39:32:c4:70:46:14:44:ca:38:7b:
         57:77:be:71:63:08:e1:d4:b7:08:09:53:3b:4e:ab:7d:10:32:
         00:cb:a9:26:32:3d:96:50:d6:86:49:4a:3c:51:0c:d8:d9:d3:
         b8:d4:9a:66:06:6b:e0:8f:a9:9f:e1:a0:3b:f9:6f:29:dd:e4:
         08:38:10:77:c8:30:67:cd:66:51:22:02:42:88:8c:1b:0c:17:
         c4:73:e6:d3:84:d8:d1:a4:92:a3:16:8f:31:97:4b:e6:a3:89:
         67:11:47:6a:47:57:b5:df:38:b4:79:35:44:8e:21:69:e3:3d:
         c5:08:d2:5b:33:ab:ca:4d:a6:44:77:82:28:1d:14:74:40:67:
         dd:a3:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:46:29 2026 by rpki-client