Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa
File:                     3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa (raw, json)
Hash identifier:          fBFNBKOkCEilsYI7v06ZSlqIwBgCNPGrcmL0E/6DBgQ=
Subject key identifier:   CD:09:B4:A8:F0:21:5A:D6:FE:99:8F:AB:D7:FE:0A:62:1C:25:4C:9A
Certificate issuer:       /CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF
Certificate serial:       5549711687D631D42DE2A41E811D756B7C3A99F2
Authority key identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa
Signing time:             Thu 05 Feb 2026 04:57:26 +0000
ROA not before:           Thu 05 Feb 2026 04:52:26 +0000
ROA not after:            Thu 04 Feb 2027 04:57:26 +0000
asID:                     270705
IP address blocks:        189.127.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl
                          rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:49:71:16:87:d6:31:d4:2d:e2:a4:1e:81:1d:75:6b:7c:3a:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF
        Validity
            Not Before: Feb  5 04:52:26 2026 GMT
            Not After : Feb  4 04:57:26 2027 GMT
        Subject: CN=CD09B4A8F0215AD6FE998FABD7FE0A621C254C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:01:2c:32:24:e5:7b:1c:2a:14:74:53:ea:
                    c4:9b:d2:71:42:a7:97:6b:dd:65:84:d6:b9:ce:9e:
                    38:66:cd:41:20:f4:54:a8:21:ab:22:0b:db:b8:8b:
                    89:fe:80:e8:30:c4:50:69:e8:a2:cf:d0:2e:19:43:
                    8c:1e:77:3c:36:a1:5f:b5:ad:7c:7e:97:39:10:36:
                    02:95:d7:ba:be:01:ae:9d:bf:9c:e4:1d:27:45:93:
                    d0:26:ab:9a:43:48:de:85:47:50:a9:29:be:14:80:
                    64:03:fc:bf:ee:06:3f:a5:e9:3e:11:46:ad:d7:20:
                    e3:bf:c7:35:bf:61:d8:23:cb:d7:51:71:4e:65:28:
                    e9:af:dd:06:b1:36:70:ab:c1:8d:0f:c9:a5:ae:2d:
                    30:84:7a:b5:a9:49:07:a0:1c:7b:52:13:d4:7c:79:
                    ef:79:93:96:70:2b:ea:18:fb:56:d6:cf:48:f5:23:
                    74:8d:36:33:92:dc:12:3b:0f:a2:4b:72:f9:dc:d7:
                    20:ff:21:6f:94:92:82:a9:93:87:9e:db:de:1a:1c:
                    87:09:76:a3:4e:8b:6e:f8:5c:85:48:19:2b:76:ee:
                    fd:13:18:bc:fd:b5:1e:b4:7c:ad:40:fc:0d:f7:50:
                    2f:c4:b0:ef:8e:05:a3:66:b3:75:fe:26:32:bb:ce:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:B4:A8:F0:21:5A:D6:FE:99:8F:AB:D7:FE:0A:62:1C:25:4C:9A
            X509v3 Authority Key Identifier:
                keyid:03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:87:4c:69:f4:cd:9b:ac:a6:d3:46:32:86:5a:d6:60:65:
         6d:18:f4:19:f9:54:5c:b7:43:34:ef:24:f7:71:26:2c:94:ba:
         81:6f:58:da:f9:a1:f7:e6:7b:cc:fb:ae:5a:60:49:45:f8:55:
         55:90:6b:8f:62:a1:4e:d9:dc:60:df:f0:4b:16:a3:5c:d2:a0:
         af:fd:b2:4f:cd:66:e4:a8:9f:b2:14:42:a6:27:27:fd:24:c8:
         d0:66:7d:02:bb:5a:34:0a:e5:ae:e1:c4:58:49:1b:e1:20:b2:
         f3:37:d9:29:6d:f7:8d:de:3e:45:20:2c:83:2c:7f:50:c4:32:
         94:04:5e:06:61:66:cf:90:ba:e7:0c:a0:e9:26:a7:d9:c3:81:
         9f:c9:9b:f7:10:a2:cc:3b:4b:55:58:40:69:7f:48:ee:88:04:
         88:5b:8c:85:ad:a2:ce:56:6c:4e:2b:69:f1:9a:27:9a:c1:6f:
         e8:5a:99:07:26:8a:a0:52:b2:64:24:ca:71:57:4e:8b:8d:a3:
         df:e7:11:13:e9:60:c1:1b:28:87:73:b3:37:8d:94:3d:6f:c9:
         27:ac:81:ac:2d:4b:79:75:6e:31:8a:dc:23:c1:61:69:7a:15:
         d7:8f:fe:1f:76:72:04:72:9e:a3:1b:82:53:72:01:ee:00:7b:
         0f:ba:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:58 2026 by rpki-client