Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa
File:                     3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (raw, json)
Hash identifier:          lXRbX62fDUjeZrpp5PLUvrkTmmh3VegbvSlDaqpnno4=
Subject key identifier:   AD:70:DF:73:82:26:85:6E:ED:A6:F7:EA:19:53:58:90:FD:DD:36:35
Certificate issuer:       /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial:       39CD3218C1B9C709309A47458E8D1E304D205FBB
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa
Signing time:             Thu 05 Feb 2026 20:04:55 +0000
ROA not before:           Thu 05 Feb 2026 19:59:55 +0000
ROA not after:            Thu 04 Feb 2027 20:04:55 +0000
asID:                     263004
IP address blocks:        186.237.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
                          rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:32:18:c1:b9:c7:09:30:9a:47:45:8e:8d:1e:30:4d:20:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Validity
            Not Before: Feb  5 19:59:55 2026 GMT
            Not After : Feb  4 20:04:55 2027 GMT
        Subject: CN=AD70DF738226856EEDA6F7EA19535890FDDD3635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:60:16:c2:8f:a0:32:b9:74:dd:e3:8e:3a:
                    25:07:0a:b8:3c:1c:7d:11:9b:73:81:d7:b1:5b:25:
                    e1:88:1c:93:b8:1a:d0:15:04:7d:f9:1e:53:64:a4:
                    6b:17:74:ad:3e:78:ae:e4:ca:18:d2:a2:62:63:cb:
                    5a:92:dc:1b:a9:e4:db:d3:a2:aa:d8:7d:f6:81:87:
                    da:3f:2a:51:3c:57:b4:27:54:ff:c8:2e:2f:32:75:
                    af:4e:70:94:5e:fa:7f:1c:8c:7b:b4:24:ec:b1:5f:
                    c4:f6:c3:66:07:39:24:1c:72:42:bd:b2:91:d5:02:
                    52:9f:44:5d:cf:9f:2f:fa:1e:e3:50:4e:3f:67:02:
                    df:12:47:e8:a9:39:12:77:62:82:95:87:2d:51:f6:
                    78:eb:38:0d:01:de:92:a2:b0:3e:c1:1d:8a:60:63:
                    b3:7a:3e:7a:a9:a4:9a:3d:84:30:82:80:58:c9:2f:
                    de:a4:8a:b9:97:0a:e8:d2:44:9b:86:d4:ff:4d:7c:
                    12:f1:67:01:dd:d2:0e:48:c8:6e:b1:99:34:85:cc:
                    24:78:60:e7:e1:6d:bb:cf:86:c2:44:b0:31:69:36:
                    78:1f:ab:c5:6b:06:e6:a4:cb:ce:e5:30:50:8c:28:
                    6b:13:98:a9:19:1c:9c:a2:78:c0:8d:b7:df:fa:d5:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:DF:73:82:26:85:6E:ED:A6:F7:EA:19:53:58:90:FD:DD:36:35
            X509v3 Authority Key Identifier:
                keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:92:28:19:a8:b1:20:f8:da:76:aa:8a:d5:3d:b5:cd:4b:60:
         a0:d5:3f:f8:bb:03:c0:34:18:17:22:d7:c5:ba:c8:b5:01:22:
         f5:91:80:2a:11:7d:03:75:d8:0e:b6:6c:2e:1b:42:2f:08:e1:
         1f:a3:1c:83:62:6b:54:2d:c9:e6:fa:21:38:0a:ba:86:80:a8:
         09:85:70:fe:06:25:a2:46:5f:fa:e6:83:bd:c9:b6:05:ce:e3:
         e1:7a:c5:b2:87:eb:f2:1b:4c:b9:a1:4e:76:7f:a0:f2:16:2a:
         cf:f2:09:42:79:b3:1d:8f:e9:dd:d5:e7:77:7b:26:b5:04:c2:
         5a:cb:c3:17:2e:de:3c:da:7b:70:2d:05:a6:02:3b:fd:3d:54:
         85:d2:53:c5:32:75:b7:a3:34:91:ca:77:82:e2:ea:68:ac:01:
         3c:43:48:31:cc:c6:76:30:b8:a1:5e:7d:3b:99:24:d9:c0:13:
         3c:c2:cf:a5:f5:b6:ec:f4:b1:c6:57:00:4e:a3:4c:dd:25:b8:
         8f:da:c9:a6:45:79:43:45:37:e5:d7:a4:e9:93:94:05:59:70:
         4f:ea:16:13:b9:9e:56:f8:c8:77:ec:e6:7d:08:22:d1:99:57:
         33:b3:88:5a:20:81:33:22:6e:72:72:2c:0a:68:f5:72:35:7a:
         8c:8c:c2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:44:47 2026 by rpki-client