Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
File:                     3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa (raw, json)
Hash identifier:          0+9oxKEuTshcJmVSIO+ZxtYLCkSxyo5Jzb7rjLeJ31U=
Subject key identifier:   60:20:99:B6:F3:01:20:98:90:87:3F:EC:E7:E1:5E:A8:70:C2:DC:FC
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       2E588137DE38A818CCFBD6D19489FAE435DBF737
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa
Signing time:             Wed 04 Feb 2026 20:00:09 +0000
ROA not before:           Wed 04 Feb 2026 19:55:09 +0000
ROA not after:            Wed 03 Feb 2027 20:00:09 +0000
asID:                     265379
IP address blocks:        168.194.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:58:81:37:de:38:a8:18:cc:fb:d6:d1:94:89:fa:e4:35:db:f7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Feb  4 19:55:09 2026 GMT
            Not After : Feb  3 20:00:09 2027 GMT
        Subject: CN=602099B6F301209890873FECE7E15EA870C2DCFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:ac:ee:a6:97:13:e6:42:36:0e:66:fe:fe:
                    50:5d:cb:f2:0d:35:36:8e:51:50:0c:f3:6d:c6:3c:
                    a7:4c:bc:f8:02:e2:b3:fc:d6:9b:d4:77:1f:e8:4c:
                    0f:86:2a:b9:1d:34:16:c3:fe:af:34:94:e7:dd:29:
                    2d:a2:51:2e:75:3d:9b:07:67:77:4c:e7:0e:3b:75:
                    f8:09:6c:34:99:bd:6f:20:60:8b:c5:5d:54:2b:fa:
                    8f:14:f9:40:7a:ee:38:00:49:e2:9b:83:4f:02:26:
                    57:07:ee:c2:cb:77:59:96:c1:45:85:d3:54:43:8f:
                    cd:8a:fa:e5:5b:ee:de:af:78:f9:a9:7e:ac:b6:fe:
                    d5:9a:f7:62:30:0e:2a:2a:df:a8:6a:0c:67:d0:e4:
                    3b:7b:04:1c:fa:f6:a1:a8:af:88:18:03:67:3c:83:
                    26:88:fc:22:47:0f:ab:7e:02:e3:0c:eb:3d:76:76:
                    88:ba:d9:31:a1:42:39:14:0e:4a:99:25:76:b9:c2:
                    31:23:de:1c:c5:c3:a1:f5:bd:58:d4:f3:7e:db:df:
                    1b:34:c2:3d:05:89:55:14:da:82:86:a0:ed:09:ca:
                    9f:0b:99:86:a1:d0:25:ae:fa:c7:09:9a:db:25:2e:
                    ce:7f:f0:aa:e5:bb:38:7d:4f:89:f4:b9:f8:4d:97:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:99:B6:F3:01:20:98:90:87:3F:EC:E7:E1:5E:A8:70:C2:DC:FC
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/3136382e3139342e36372e302f32342d3234203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:aa:92:25:95:72:55:04:db:3c:99:ab:e1:dc:a5:03:ac:
         be:db:ac:8a:1d:05:24:12:cb:74:3e:cd:49:da:c7:78:28:93:
         b4:49:04:44:45:c9:a7:7a:1c:71:bb:90:a5:4b:5d:7b:13:65:
         f9:7a:1a:6c:b5:ad:2a:5e:9a:24:73:56:c9:2e:49:dd:42:25:
         3a:32:36:1f:3f:f8:1e:e0:eb:8b:31:19:84:d1:03:ff:f1:d8:
         67:a6:07:03:ec:61:aa:22:4f:79:05:f5:47:db:ce:93:2c:f2:
         31:93:6b:91:08:42:bc:92:e2:3f:77:d7:f5:3e:e7:62:fb:98:
         76:82:e4:ec:5f:74:85:52:a5:52:2d:be:a5:2c:3e:2f:1b:ff:
         9c:fa:ac:b1:2e:a5:d2:78:c0:2b:56:a0:45:7c:25:c8:de:c3:
         3f:ac:a5:38:7e:03:05:bc:d2:78:58:94:c8:fd:df:5f:ce:11:
         41:27:f3:32:70:53:7d:ad:c6:08:45:6c:4b:84:74:d8:fa:9e:
         45:2d:4c:09:4c:c2:9d:27:c9:5b:85:49:4a:57:f0:77:5f:06:
         c0:67:c3:bd:21:4c:e5:e3:6b:2f:1a:e4:8c:6b:dc:a1:b7:83:
         d7:81:38:99:f0:86:c4:53:6f:4f:92:d8:e5:16:66:ff:15:f1:
         1b:7f:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:46:29 2026 by rpki-client