Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa
File:                     3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          GYa2K4a1JRD1U/YPdevjIM3iS0rctpw2DBGWw7f/2UU=
Subject key identifier:   D6:98:CC:D0:E9:75:A3:93:F3:A2:32:5B:E2:D3:FC:AB:D7:DB:4E:E6
Certificate issuer:       /CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
Certificate serial:       01C090B0B37B13D13069B8801D2D444757B38AF3
Authority key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa
Signing time:             Thu 05 Feb 2026 00:46:11 +0000
ROA not before:           Thu 05 Feb 2026 00:41:11 +0000
ROA not after:            Thu 04 Feb 2027 00:46:11 +0000
asID:                     264025
IP address blocks:        168.197.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c0:90:b0:b3:7b:13:d1:30:69:b8:80:1d:2d:44:47:57:b3:8a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
        Validity
            Not Before: Feb  5 00:41:11 2026 GMT
            Not After : Feb  4 00:46:11 2027 GMT
        Subject: CN=D698CCD0E975A393F3A2325BE2D3FCABD7DB4EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:af:49:ec:d2:e0:29:d5:e2:8e:88:13:7f:
                    de:86:11:b2:09:08:0a:70:16:28:64:01:a5:33:ed:
                    cd:6b:af:ac:12:fd:4a:31:7d:90:bf:05:a9:1e:d0:
                    dc:9b:8d:1f:f3:2c:e4:50:a4:88:e0:63:19:53:2b:
                    2f:bf:13:d0:81:d4:cb:1b:29:52:77:e3:49:a0:0b:
                    9e:31:f1:6f:0c:ef:2c:3e:ed:4e:3b:98:d7:31:14:
                    3e:68:40:5d:6a:37:4a:ab:fa:28:3c:4d:a7:62:f3:
                    de:21:4f:ab:10:f2:2e:81:1f:69:c3:6a:34:d6:b0:
                    ef:c5:0e:d8:bb:ab:b7:9f:54:1f:b3:75:b2:1d:c3:
                    c5:e6:ca:cc:c1:ad:76:06:db:60:5f:1a:5b:05:78:
                    0c:40:84:30:b9:9a:40:e9:1f:67:c4:69:47:ac:b8:
                    50:ae:ec:2e:f6:aa:a0:cf:fa:74:2f:8d:0c:1a:90:
                    96:4d:a4:28:2e:d2:89:15:94:4b:9f:e8:38:20:0c:
                    ed:c6:95:b6:fb:6e:25:46:e7:5d:c2:09:07:02:ca:
                    99:53:a5:fe:36:ee:89:25:f4:b3:bd:17:bf:69:34:
                    74:8a:67:8c:6f:b9:3c:00:fa:ef:1e:40:d4:84:03:
                    08:fd:49:93:00:8a:91:cd:74:e7:0a:01:8e:8b:b7:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:CC:D0:E9:75:A3:93:F3:A2:32:5B:E2:D3:FC:AB:D7:DB:4E:E6
            X509v3 Authority Key Identifier:
                keyid:E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3136382e3139372e35362e302f32322d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:d2:1d:6f:78:d6:96:aa:44:4f:5c:d3:dd:5d:74:e0:b7:39:
         17:0f:1f:f9:21:b7:da:f3:97:80:a2:f2:43:3d:67:e2:65:ed:
         8e:92:1e:e8:e4:7f:85:9d:d6:c9:bb:3f:f7:cf:c2:f0:91:f5:
         a8:bd:9c:46:07:7e:bd:c1:9c:57:73:8a:b5:9c:6d:15:f2:8d:
         a0:23:01:1a:13:59:6c:67:c6:f8:55:bb:3d:0a:82:85:32:d2:
         5c:ef:a7:31:94:24:d8:b3:c5:73:bc:a9:df:a9:2d:21:fc:95:
         26:36:90:85:ba:a4:51:b3:d8:9d:6b:34:c1:59:38:af:6a:ea:
         b2:8d:c4:96:e8:d0:bf:b8:7e:51:0b:a8:4a:82:2f:17:8f:48:
         89:6c:cb:9e:dc:99:20:b8:75:fa:f4:98:e8:79:a2:90:9f:94:
         de:d0:b3:6f:12:0b:d8:46:35:06:73:51:79:67:43:04:25:4b:
         6e:c1:ef:e5:33:37:57:9d:a5:04:e4:47:68:f7:5c:c8:cb:40:
         6f:c0:54:26:da:67:8b:bf:fe:0d:db:a5:b1:aa:60:64:f4:1e:
         28:54:45:b4:61:ca:ed:b5:c4:53:85:02:4b:35:92:8d:34:cf:
         7b:c0:01:ce:57:5d:12:7b:b6:bc:ba:68:1e:34:9c:02:77:46:
         c9:3e:26:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:45 2026 by rpki-client