Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa
File:                     3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          1Z4GgDP0MCVzcPLNIfwVTA3+dMA6idKTOthHvHis3VY=
Subject key identifier:   65:6E:52:8A:98:B7:D7:8A:86:46:A3:81:18:4F:81:85:85:1B:7D:82
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       3ECC55CA2401D8664BAABCAFB8C94DB345618C67
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 05 Feb 2026 14:26:17 +0000
ROA not before:           Thu 05 Feb 2026 14:21:17 +0000
ROA not after:            Thu 04 Feb 2027 14:26:17 +0000
asID:                     264381
IP address blocks:        168.205.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cc:55:ca:24:01:d8:66:4b:aa:bc:af:b8:c9:4d:b3:45:61:8c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Feb  5 14:21:17 2026 GMT
            Not After : Feb  4 14:26:17 2027 GMT
        Subject: CN=656E528A98B7D78A8646A381184F8185851B7D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:74:f9:db:8d:d7:3f:a9:37:b6:b6:48:03:
                    fe:77:87:7f:64:b9:7b:b5:1b:8d:ad:02:d7:36:c1:
                    64:04:55:e1:47:09:f7:d7:f7:64:60:bf:51:ee:a8:
                    53:94:85:1f:50:b3:bb:bc:dd:2a:60:d3:44:4e:dd:
                    9c:93:f0:ec:0e:74:e9:c1:a0:91:28:2a:5d:f0:fa:
                    b0:9a:44:f5:af:45:25:f5:39:e2:cb:e2:de:bb:fe:
                    ce:57:13:be:61:d8:92:f3:a5:87:ff:70:07:1a:40:
                    10:3e:48:5a:b5:3e:af:da:3c:4d:4d:db:ea:ec:22:
                    88:ac:76:65:df:7e:a0:69:10:cb:f0:56:7b:97:94:
                    87:c6:f2:c5:cc:bd:f3:0a:14:ee:2b:ca:bd:a6:12:
                    fb:34:fc:10:b3:4e:ee:75:b5:ec:42:be:36:fe:e7:
                    4c:7d:fa:d0:3a:eb:9d:c5:9d:e9:c0:71:3a:f7:49:
                    e0:c1:7d:6b:4f:fe:ce:24:08:e8:77:04:bc:2e:04:
                    84:1f:cc:07:0c:01:b9:91:08:7e:5d:9c:a2:79:c9:
                    6c:26:be:dc:f2:2e:3c:43:78:52:5b:49:3f:9b:15:
                    3d:26:56:cd:4c:ae:7d:4a:6b:e8:b5:20:f5:76:3a:
                    7c:cb:c8:2f:78:49:75:f8:40:ba:ca:17:64:cc:ae:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:52:8A:98:B7:D7:8A:86:46:A3:81:18:4F:81:85:85:1B:7D:82
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3136382e3230352e3134382e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:99:47:ee:f8:6d:8c:1f:fb:63:d0:09:0a:fb:8f:80:32:
         3b:78:22:50:a6:c2:92:4f:55:85:b1:79:9b:f4:96:07:2e:15:
         38:63:ee:63:54:d3:4b:d5:f5:de:cf:fa:81:5c:81:3c:92:1f:
         d5:54:ef:8b:52:73:0d:30:54:e8:dd:06:47:64:d4:33:48:08:
         5b:e9:40:75:dc:36:90:61:d4:78:5c:a6:41:5d:38:7d:71:d9:
         ac:8e:45:38:51:7d:ed:1f:f3:4b:f9:70:d3:7c:39:61:11:5a:
         9e:f5:03:f8:e5:39:2b:cf:c8:0b:20:9f:8c:11:19:94:25:94:
         b5:c5:8a:6e:af:15:a4:36:db:38:96:be:66:18:04:df:18:0f:
         3e:93:d9:82:91:6a:e7:75:39:61:98:9a:e2:27:5e:87:0c:54:
         91:06:c8:7e:aa:49:72:a6:42:87:8b:c2:50:ae:cb:6f:81:30:
         4d:2c:34:b9:d7:c9:5c:9b:70:cf:40:8b:a4:c9:97:f6:19:1b:
         09:c8:88:cc:19:b3:20:66:ce:b0:5b:47:7e:ac:7c:b4:b2:a6:
         e4:8a:8f:e4:ff:ea:10:12:55:54:67:46:54:8c:a0:49:ac:8c:
         ac:61:64:fa:de:43:22:c5:36:3e:27:95:15:18:b9:6e:46:6c:
         db:c7:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:43:19 2026 by rpki-client