Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          vlufuQhTxDn4aHNlsS8TW8yBb2JOB9k31i6TieuyRjA=
Subject key identifier:   16:09:B2:D6:17:D6:2D:DF:53:32:82:D5:B7:21:63:14:56:94:3C:57
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       087EDE7B730E3E3A3232B1CF31D0E8C3B193C679
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa
Signing time:             Thu 05 Feb 2026 16:32:30 +0000
ROA not before:           Thu 05 Feb 2026 16:27:30 +0000
ROA not after:            Thu 04 Feb 2027 16:32:30 +0000
asID:                     266226
IP address blocks:        216.98.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7e:de:7b:73:0e:3e:3a:32:32:b1:cf:31:d0:e8:c3:b1:93:c6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Feb  5 16:27:30 2026 GMT
            Not After : Feb  4 16:32:30 2027 GMT
        Subject: CN=1609B2D617D62DDF533282D5B721631456943C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:67:06:58:69:08:23:52:5b:cb:7a:88:81:
                    5b:d0:74:6f:d5:f7:3d:d5:b8:9b:43:cb:15:87:bf:
                    60:dc:ed:a4:af:e3:ce:a8:82:6a:0d:55:fe:6a:b9:
                    a9:35:ac:70:60:22:c2:91:9e:80:ce:b0:15:22:4b:
                    1a:65:05:e6:08:ed:b0:5d:69:a6:02:0f:b8:5f:d3:
                    7b:78:cd:2d:72:c3:f2:63:06:1c:10:7f:a1:ea:b7:
                    a9:06:e8:2b:cd:80:58:32:aa:fc:0d:77:b9:ae:9b:
                    33:9c:b4:4b:8b:f9:89:e2:69:df:3d:93:26:be:b8:
                    ae:e5:79:ec:f2:19:f4:21:e0:28:c7:1e:43:26:e1:
                    ca:d0:99:53:7a:df:a2:c9:b5:7e:2a:66:f7:db:34:
                    da:3b:4e:b3:e2:d1:28:87:64:38:24:08:ff:4c:de:
                    bf:02:c4:fd:4b:55:5f:41:ea:a9:c5:b6:91:8c:f5:
                    69:10:d2:fb:65:72:c9:19:d4:07:5c:09:50:36:2e:
                    b5:00:43:a0:53:f9:1c:1f:d3:f3:f3:98:66:54:ce:
                    fd:f9:1b:90:41:bb:2c:37:dc:43:53:e2:cc:85:7f:
                    c2:ed:e6:c4:e9:db:c6:13:74:0e:72:f1:c9:6c:66:
                    02:7c:08:9c:10:7f:51:11:19:8e:91:1a:0d:bf:f4:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:B2:D6:17:D6:2D:DF:53:32:82:D5:B7:21:63:14:56:94:3C:57
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231372e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:94:28:12:32:65:e8:2b:a8:d9:34:c4:55:ca:f1:5b:9f:
         95:3d:86:e0:a7:fb:3f:88:fb:8f:9f:13:71:c1:05:e6:a1:62:
         ad:b6:7c:1e:2c:ba:d2:a1:35:cc:1b:6c:b4:1c:9e:e9:42:fa:
         64:80:ff:d5:89:3b:90:53:fa:0d:89:62:05:8d:46:ee:93:7f:
         b2:c7:7e:21:ec:04:20:ce:9b:df:97:f4:cc:ce:26:8f:4b:e8:
         ba:b9:5f:30:dd:96:3d:73:9c:93:35:2b:49:0d:0c:5e:b7:2b:
         f4:28:eb:ee:d8:f0:ff:94:b8:ad:c2:57:3c:25:93:15:e5:87:
         12:34:cf:72:32:ab:5b:f9:6d:98:fd:2d:f9:3d:1f:bd:14:cd:
         c6:3d:2a:f4:33:fb:15:04:c4:9c:41:f8:88:14:92:83:fc:ac:
         34:bd:ad:2e:c4:47:30:fe:63:f6:33:26:01:cc:ed:6b:a8:85:
         f7:1f:94:ec:93:c2:dc:05:8f:b1:95:40:c2:9f:df:55:a2:41:
         8f:13:c8:8d:59:5c:3b:c5:45:c4:8e:47:83:6e:9b:1e:54:9e:
         3a:a9:3c:aa:75:15:bb:db:84:70:1c:a1:6e:0c:60:03:47:74:
         e1:40:65:c3:82:4c:3c:67:85:c0:3f:54:7e:35:5c:99:7d:a9:
         95:c5:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:01:38 2026 by rpki-client