Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa
File:                     3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa (raw, json)
Hash identifier:          hb81MIXbwgFvawY0DP6WEdQDtyIOISujuoJ8nAm3xDY=
Subject key identifier:   3C:F3:40:33:D0:58:7A:9D:24:48:82:5D:E5:F7:F0:C5:8C:33:10:78
Certificate issuer:       /CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11
Certificate serial:       4D74A4BBF1E9A9992A1CE59FF277BA0B389C807D
Authority key identifier: 83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa
Signing time:             Thu 05 Feb 2026 02:15:24 +0000
ROA not before:           Thu 05 Feb 2026 02:10:24 +0000
ROA not after:            Thu 04 Feb 2027 02:15:24 +0000
asID:                     262880
IP address blocks:        168.227.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl
                          rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:74:a4:bb:f1:e9:a9:99:2a:1c:e5:9f:f2:77:ba:0b:38:9c:80:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11
        Validity
            Not Before: Feb  5 02:10:24 2026 GMT
            Not After : Feb  4 02:15:24 2027 GMT
        Subject: CN=3CF34033D0587A9D2448825DE5F7F0C58C331078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:92:6b:e3:37:56:1b:f1:98:86:cb:b5:02:
                    1a:cd:2b:42:8a:63:40:41:18:4a:e2:29:ed:1f:70:
                    ab:61:02:79:db:2e:de:f4:c5:af:9f:4e:eb:a9:de:
                    5a:54:50:ae:29:d4:1c:d0:b8:f4:6e:46:80:c7:34:
                    f8:4e:04:72:8e:cd:8e:59:53:39:c0:45:c8:92:d7:
                    99:d0:8c:18:c8:47:4e:94:0f:0a:00:f8:a8:d6:bb:
                    ee:86:a9:7e:a9:8f:82:1e:49:e5:d7:4d:2f:8a:01:
                    55:27:41:a2:3c:2c:72:a1:50:2b:76:8d:e1:b0:7d:
                    0d:f4:67:ea:e9:53:34:17:f0:7d:bc:0c:8e:bf:17:
                    12:43:bb:bc:1f:7d:59:e9:f4:40:78:3f:00:68:2d:
                    10:00:dd:22:1f:26:cd:fd:d7:18:61:68:d1:61:1c:
                    06:60:d3:b0:e7:16:80:b6:d9:bb:f2:75:c0:c8:22:
                    df:84:e0:af:da:cd:5a:1d:27:73:5a:46:a4:12:9d:
                    86:b1:b4:bd:0f:b3:c1:43:06:ba:86:68:21:30:6c:
                    cc:8e:08:c7:de:80:be:fc:55:7c:73:e6:14:00:09:
                    ba:cc:40:07:4b:c0:54:40:f4:b2:0d:c9:50:e2:83:
                    94:a5:64:7f:da:09:be:e6:4e:b7:27:73:f2:a7:d7:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F3:40:33:D0:58:7A:9D:24:48:82:5D:E5:F7:F0:C5:8C:33:10:78
            X509v3 Authority Key Identifier:
                keyid:83:5A:1A:E5:1B:60:3D:CE:B3:FC:A9:8E:B2:FF:3C:C9:4B:79:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/835A1AE51B603DCEB3FCA98EB2FF3CC94B798C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkUSLhUCND4Ywc6K8mX1LcSUnmJpVcXRM169Nih6iDw/1/3136382e3232372e32382e302f32322d3332203d3e20323632383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:80:8e:35:94:22:86:1b:d0:36:1c:11:fe:a8:d7:fe:79:
         52:6b:ec:9e:b2:3e:bb:06:74:c5:0e:61:9a:a6:aa:c7:9d:32:
         d8:0e:e4:43:53:22:d9:10:b9:31:f4:3a:25:fc:34:68:da:46:
         6b:36:b9:24:61:77:8b:79:6a:6a:b3:8d:ee:3b:3e:c2:3e:a7:
         dc:10:30:23:62:cb:74:70:57:3c:6e:3a:25:99:22:86:bf:f4:
         98:00:30:05:9e:d3:ba:3d:7f:87:c1:0f:bf:62:04:d6:74:37:
         eb:85:90:75:6b:b8:61:bc:2b:ed:57:57:f3:fb:48:82:3c:9f:
         be:c7:19:7d:2b:ad:8c:60:47:78:ea:e1:0d:30:92:20:f6:07:
         55:b6:37:ee:8d:51:30:e7:c2:82:b9:72:1e:4d:43:35:57:13:
         ae:36:cc:b7:57:17:19:ba:75:2a:ee:04:9a:0f:4f:f9:8d:a6:
         f9:4b:84:63:35:10:6d:e4:22:8f:b5:35:5b:54:0a:db:7c:fb:
         e7:21:83:64:51:67:6a:65:c0:00:24:9b:08:c8:95:48:60:29:
         6e:10:78:39:8b:53:d4:66:f7:ce:8f:1b:08:ab:f0:df:2c:4b:
         d0:73:df:e7:29:f3:0b:62:92:f6:74:69:7f:ed:2f:65:fb:52:
         91:89:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:22:13 2026 by rpki-client