Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          1e0luk8JykOBo6ru/pdblUYHMSskFmiljEmbLXqqimw=
Subject key identifier:   A2:C9:14:1D:81:70:9B:D4:64:B6:23:13:45:8B:8B:A6:15:69:20:C6
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       2179EBDB1B7B074E94079A69AF02F5D3C3FEA42F
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:29:00 +0000
ROA not before:           Thu 05 Feb 2026 00:24:00 +0000
ROA not after:            Thu 04 Feb 2027 00:29:00 +0000
asID:                     262798
IP address blocks:        186.236.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:79:eb:db:1b:7b:07:4e:94:07:9a:69:af:02:f5:d3:c3:fe:a4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:24:00 2026 GMT
            Not After : Feb  4 00:29:00 2027 GMT
        Subject: CN=A2C9141D81709BD464B62313458B8BA6156920C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:39:50:36:d7:ae:f5:a3:37:c0:0a:69:ee:
                    fd:83:94:e7:51:34:05:56:9f:37:97:9a:0c:e0:b7:
                    23:48:d6:c5:47:e4:06:8d:92:fb:62:70:09:5e:94:
                    2e:8e:40:c6:49:d4:7d:97:a0:f5:2a:48:ad:a4:21:
                    57:a6:50:d1:a6:e3:33:91:62:87:fe:8b:9d:b5:26:
                    f8:05:f5:30:8c:9d:e0:0a:05:cf:96:c8:2c:15:99:
                    b2:f7:47:08:bd:e5:07:17:ad:96:8d:02:b3:d6:50:
                    53:b5:2d:ae:f3:99:bc:5e:0f:5e:5c:69:79:ca:78:
                    25:a3:bc:0c:72:b8:1b:0b:09:93:9c:b6:a4:66:af:
                    15:33:fb:b4:e1:90:48:0d:b9:16:3f:b0:32:d3:0b:
                    fe:f6:d7:0b:e2:83:16:85:fa:c7:0a:59:da:af:9b:
                    63:5a:18:80:31:e2:48:1f:86:d2:0a:d5:38:5c:e0:
                    ed:2e:f7:ed:5a:b6:b8:49:a5:43:05:93:96:64:1a:
                    4b:02:e9:a4:b8:78:4e:8c:8d:e4:c7:af:07:cb:0c:
                    49:70:78:0a:aa:18:7a:84:c7:e5:2d:dd:f8:8b:93:
                    d0:3d:a6:46:48:0a:c4:25:a3:10:84:3e:04:5b:13:
                    8c:a8:00:37:d7:43:54:a4:c6:2d:f5:c8:35:53:df:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C9:14:1D:81:70:9B:D4:64:B6:23:13:45:8B:8B:A6:15:69:20:C6
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:9b:f0:19:47:3d:b8:00:a0:74:f6:5a:8a:35:0c:0f:4d:
         c7:0e:31:ef:e3:2a:e1:10:da:01:c9:96:d8:29:f9:cb:19:4f:
         47:44:d3:0d:d8:9e:46:a6:15:88:1c:78:3d:b7:c1:dd:b0:ad:
         cc:98:6e:1c:b9:0b:ab:7f:69:a6:d4:c3:e7:84:f6:29:db:45:
         22:77:8e:40:59:86:68:ed:74:8b:e2:c7:e7:7d:f7:d7:ec:b8:
         69:7e:a8:15:1f:8c:11:f9:ac:d0:07:18:65:d2:94:94:f9:8e:
         7a:3c:7f:99:7f:39:82:88:09:9f:fe:51:78:13:f4:c7:b8:1a:
         8b:3e:63:c5:37:fa:b6:ea:7d:b7:0b:75:f1:12:6b:0c:9f:3d:
         de:ff:bd:d1:58:a3:7d:68:e4:cf:19:ce:37:c4:76:b8:20:0d:
         3d:fe:77:9b:77:1a:43:a7:94:a0:cc:15:76:8f:c1:6f:8d:fa:
         a9:b7:33:9d:00:44:12:a5:40:4a:3f:00:fc:07:2b:42:29:10:
         10:9f:7b:f3:c8:de:4b:a1:58:48:d8:46:00:59:10:d1:7d:d8:
         05:7e:80:0d:ac:39:66:0a:3a:7c:11:d4:f1:0a:28:f2:04:9d:
         2d:8c:be:f9:1f:b2:4b:04:a0:de:24:b8:a0:32:85:53:ec:ea:
         7c:b7:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:07 2026 by rpki-client