Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          3KWLSkyoo+ZiqEc2kJDrkWQPJ5V4F04vkhJBv/B9yrM=
Subject key identifier:   0A:57:AB:76:04:14:48:DD:9E:E9:AC:96:BA:7A:06:9A:86:92:08:CB
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       4BD4F5E7B8168E2642FB3E2D416D64101A14548F
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:28:59 +0000
ROA not before:           Thu 05 Feb 2026 00:23:59 +0000
ROA not after:            Thu 04 Feb 2027 00:28:59 +0000
asID:                     262798
IP address blocks:        186.236.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d4:f5:e7:b8:16:8e:26:42:fb:3e:2d:41:6d:64:10:1a:14:54:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:23:59 2026 GMT
            Not After : Feb  4 00:28:59 2027 GMT
        Subject: CN=0A57AB76041448DD9EE9AC96BA7A069A869208CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:f6:d9:b0:52:ad:34:13:e7:e5:21:4b:13:
                    3a:c8:71:98:de:06:52:2a:e7:b7:0a:b7:79:21:47:
                    35:b4:01:28:69:e1:31:3f:db:ae:93:41:8a:14:f3:
                    71:2c:98:5e:12:3d:39:e6:07:a0:f0:fc:80:74:9e:
                    74:52:17:42:fc:aa:12:c1:8e:64:59:9b:19:a7:1e:
                    0a:36:23:40:9d:4a:07:72:c6:02:27:3d:22:dc:d5:
                    99:bb:cb:9e:10:7f:e1:db:08:cc:d3:70:a5:af:81:
                    93:5e:c0:c7:b2:4b:76:9c:92:42:5c:22:39:dd:8b:
                    68:60:00:7b:e1:d8:f8:0f:23:3f:73:17:f5:5f:ad:
                    d3:06:5e:b2:fd:b0:b8:2a:ab:15:c0:65:d6:0d:10:
                    48:68:3e:d0:ae:9e:7b:1f:b7:ff:1f:be:79:13:6c:
                    00:34:a7:72:50:5a:97:44:27:af:9a:8a:80:28:8e:
                    d7:fb:30:e3:e4:bf:e5:00:2d:56:b5:fb:32:a9:a7:
                    18:74:26:99:ce:bf:b0:44:a1:c6:67:89:b0:4c:f9:
                    ce:6e:47:66:29:e0:fc:bd:ff:f2:77:35:4c:ce:c4:
                    0a:18:87:11:a7:a7:de:e1:8d:8f:14:41:02:ec:04:
                    eb:67:29:52:02:a2:98:1e:96:66:8a:85:bf:9e:96:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:57:AB:76:04:14:48:DD:9E:E9:AC:96:BA:7A:06:9A:86:92:08:CB
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:76:03:08:35:b5:bc:0e:74:40:86:70:aa:18:ff:db:3f:7b:
         5b:44:94:ce:8c:65:cc:48:e1:fb:d1:ad:99:51:63:74:17:b2:
         58:2f:d0:48:fd:94:92:5f:ab:91:7a:92:67:fb:e8:e4:fb:cd:
         18:8d:ed:1f:5e:31:c9:2e:84:8d:8b:46:bb:4f:a2:41:2c:b2:
         97:97:d3:40:e7:e9:19:ab:1f:08:f0:16:78:47:7f:92:e8:f0:
         e3:9c:98:6a:9c:5c:62:e9:44:8b:54:0c:ea:5f:fc:63:11:18:
         6b:3b:97:e5:bb:b1:63:36:3f:eb:4b:71:1e:28:1c:9c:5e:b5:
         14:14:6a:f4:5a:74:ac:ff:1a:d1:1e:a8:d1:87:04:fd:d9:59:
         fa:41:ba:50:21:5e:c7:75:8b:01:ba:e3:83:30:4f:8b:fe:cf:
         96:a5:e6:20:c6:61:e7:8d:64:09:a6:5b:a5:54:87:c2:af:2b:
         1a:a9:8c:c3:8b:60:bc:82:b9:c7:ee:be:a6:74:73:ce:28:62:
         a7:90:6b:34:55:0b:2e:45:28:cb:4c:8a:35:82:1c:c1:72:51:
         16:39:50:ab:68:f4:c2:32:30:c8:93:e5:df:33:63:c7:99:8c:
         b2:0a:03:8e:ab:66:1c:c6:21:2b:40:2a:af:0b:89:83:ad:76:
         4a:e9:4f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:00 2026 by rpki-client