Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/3139312e352e3136302e302f32322d3234203d3e20323633353338.roa
File:                     3139312e352e3136302e302f32322d3234203d3e20323633353338.roa (raw, json)
Hash identifier:          9sfqahRf32d4tqITra5XtXy8DrHNKkUFyCVazU/vd4o=
Subject key identifier:   41:5C:F9:85:A9:BA:41:B9:EC:4B:0C:0F:81:72:2B:69:DD:53:8C:AF
Certificate issuer:       /CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
Certificate serial:       2E338AE67A46C3D35D0820A34E1DA5B3BF2F3E76
Authority key identifier: CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/3139312e352e3136302e302f32322d3234203d3e20323633353338.roa
Signing time:             Thu 05 Feb 2026 03:26:01 +0000
ROA not before:           Thu 05 Feb 2026 03:21:01 +0000
ROA not after:            Thu 04 Feb 2027 03:26:01 +0000
asID:                     263538
IP address blocks:        191.5.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl
                          rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:33:8a:e6:7a:46:c3:d3:5d:08:20:a3:4e:1d:a5:b3:bf:2f:3e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
        Validity
            Not Before: Feb  5 03:21:01 2026 GMT
            Not After : Feb  4 03:26:01 2027 GMT
        Subject: CN=415CF985A9BA41B9EC4B0C0F81722B69DD538CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:de:d5:a0:cb:a1:f2:03:c3:01:7d:5d:f5:
                    0f:a7:cb:d2:55:08:f6:a8:87:52:c2:88:b6:1d:6a:
                    50:02:26:3c:c5:5c:e2:72:b3:fe:70:54:14:c8:f4:
                    3c:b2:fb:d7:d0:2b:ed:b2:d6:4d:f5:5e:a8:df:9c:
                    11:dc:9e:27:6f:86:5e:7d:4a:b4:54:8e:11:cf:b0:
                    8f:52:70:5d:e7:ce:8e:62:ae:a2:15:d1:fb:b5:02:
                    43:22:78:f4:31:0b:47:44:3e:e0:3b:34:9b:61:8b:
                    d2:38:84:67:d6:2a:c1:cf:11:31:a3:33:e5:fc:2b:
                    1b:1c:62:4a:65:6a:38:61:68:36:a3:80:45:d4:58:
                    d7:21:f8:8a:af:54:bc:5f:86:f6:30:e7:fb:c8:53:
                    5f:75:3f:da:32:88:dd:05:1f:e3:a3:8a:1f:03:c7:
                    a5:a4:50:02:83:89:73:6a:92:22:e7:ef:95:bf:85:
                    98:62:5c:6f:9c:82:31:80:48:5b:86:d7:02:52:ef:
                    2a:de:21:95:c1:1b:6e:ae:8e:95:fa:fb:d5:b9:7a:
                    bc:0c:43:0b:b2:16:59:03:76:c5:54:1e:fa:23:10:
                    07:d6:c4:dc:d8:2d:75:b4:1d:7e:0b:39:58:d6:e3:
                    c3:a1:84:ab:fc:4a:9a:ed:2f:7a:76:4b:94:2f:79:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:F9:85:A9:BA:41:B9:EC:4B:0C:0F:81:72:2B:69:DD:53:8C:AF
            X509v3 Authority Key Identifier:
                keyid:CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/3139312e352e3136302e302f32322d3234203d3e20323633353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:0a:27:3a:e3:21:09:3f:ed:39:04:0e:00:59:09:81:3c:
         8b:ee:63:8f:ad:d1:bf:cb:c3:20:62:27:1a:49:8b:e3:0e:94:
         32:e2:00:62:9c:62:69:09:2c:e5:10:9c:ee:0b:3c:35:43:84:
         38:13:de:35:2a:9a:b7:dc:a3:36:6b:b5:15:25:70:c4:ca:78:
         2f:02:c1:1a:3b:46:c7:34:c8:7e:39:23:02:a5:c4:52:fb:1d:
         1d:73:9a:95:dc:fb:51:d9:de:85:9e:d1:4d:f3:7e:96:a1:f8:
         83:75:98:e8:fd:1b:74:d7:ad:3b:76:d2:fb:5e:a1:00:d3:8b:
         b5:33:88:ec:0a:df:a7:2a:da:46:62:ea:44:da:f3:5e:82:4f:
         52:ab:70:88:d0:d4:c1:9a:d3:d9:a3:30:02:a4:2d:37:fc:d5:
         70:f8:dd:d2:17:92:09:91:63:db:e8:82:f7:3b:19:3f:85:07:
         24:22:9f:be:c5:dd:62:6b:12:a4:7a:68:35:04:54:b0:7e:dd:
         6a:8d:8d:50:8e:62:de:62:be:18:3b:dc:81:67:39:d7:95:aa:
         a5:b4:40:58:8c:6d:fb:2d:cf:1f:17:11:f9:39:54:40:83:c6:
         46:a1:32:c9:10:fb:a9:3f:70:40:b0:70:db:69:47:95:41:47:
         70:58:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:47 2026 by rpki-client