Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          4sKNRCayl4/BsscFyt7DBXB/W9Kmv/q+a50VoBmWIG0=
Subject key identifier:   D5:31:EE:31:EF:7B:BB:D4:3F:EE:59:B6:C2:C4:65:86:27:31:51:C3
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       22132330F0BFD5DC69CCEC263517C27A9E5A30C8
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:28:57 +0000
ROA not before:           Thu 05 Feb 2026 00:23:57 +0000
ROA not after:            Thu 04 Feb 2027 00:28:57 +0000
asID:                     262798
IP address blocks:        186.236.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:13:23:30:f0:bf:d5:dc:69:cc:ec:26:35:17:c2:7a:9e:5a:30:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:23:57 2026 GMT
            Not After : Feb  4 00:28:57 2027 GMT
        Subject: CN=D531EE31EF7BBBD43FEE59B6C2C46586273151C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:5f:7f:48:0e:af:a9:ad:09:93:eb:3a:8b:
                    24:8a:26:07:dc:fe:80:9b:14:d6:c2:5e:4c:77:af:
                    a3:0b:8d:76:f7:6e:fe:e4:c6:8d:5d:98:b2:cf:15:
                    00:b2:dd:06:78:1c:de:29:88:ff:f6:d0:86:2b:b5:
                    f5:0a:5d:28:51:31:9c:35:94:8b:62:cc:f5:29:59:
                    3a:0a:db:43:a8:c4:28:4e:6b:4c:b8:60:7d:a4:42:
                    84:9b:75:ee:ca:e9:f7:91:5d:97:a1:f5:2f:4d:e4:
                    0c:73:ed:e3:2a:fd:6c:d0:07:2f:fb:fb:6f:ac:7b:
                    dd:d1:ab:53:a8:b7:9f:fa:9d:fc:9b:1e:7f:65:db:
                    92:1b:59:09:30:e1:2f:ee:ef:21:dc:c1:4a:fc:16:
                    c9:96:e9:4a:bd:39:94:42:50:db:c9:96:90:e8:d6:
                    7f:2b:47:ee:5c:ef:81:2c:7a:27:57:5c:cf:cc:a3:
                    3a:d1:dd:c3:91:a8:1f:44:e0:6d:ef:b9:8c:d3:cc:
                    3e:0a:85:6b:fc:3b:c7:21:5a:c8:61:47:b0:6d:c6:
                    1d:4b:ac:0e:4f:96:a9:24:d3:aa:0f:32:0f:bb:79:
                    a6:de:0c:41:f5:05:9a:38:0e:9b:2f:ec:48:d6:d1:
                    b2:27:41:3b:ca:51:e0:38:9f:a3:50:54:c9:24:2d:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:31:EE:31:EF:7B:BB:D4:3F:EE:59:B6:C2:C4:65:86:27:31:51:C3
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ac:44:f2:c4:91:6b:d0:d9:a6:fc:e3:6f:dd:69:44:ca:8a:
         b3:0b:fc:98:85:46:e3:ae:29:81:82:f8:46:8c:4c:e7:4f:95:
         a8:a1:32:ad:c5:96:57:eb:79:e8:4f:e1:72:2d:09:d1:5a:4f:
         4e:0c:97:7d:ff:4d:f2:72:5c:30:b9:86:10:9b:43:0a:f6:e5:
         8b:18:51:b2:2f:20:29:6d:48:42:b3:34:aa:d2:44:21:94:e7:
         8b:f1:86:ee:c0:8b:b2:ac:d2:72:29:b2:8b:e6:37:62:b0:85:
         65:e1:ae:1d:b6:96:ec:e6:ec:c0:c7:45:4d:a9:3d:e5:e1:2e:
         4f:97:2c:92:37:e4:fc:9e:86:04:7b:de:47:b6:d9:9b:ab:45:
         3a:63:c8:cc:bc:83:7a:2c:f8:fd:20:32:5b:e4:48:5e:17:cb:
         5a:03:c3:79:f1:02:2e:1c:2a:95:29:8c:8d:24:7e:89:21:11:
         c8:1e:69:03:c9:8e:0d:3e:b5:ff:17:49:0a:2a:0e:16:cd:78:
         78:2c:3f:69:17:e4:a1:ed:fb:71:42:c6:f5:c1:c2:39:59:3a:
         11:ef:7a:f4:9b:14:ae:c6:3a:9a:0a:6f:f3:9b:b9:d4:12:d5:
         f9:83:d0:09:dc:ff:e7:c6:86:59:51:ca:89:de:cc:a5:fd:48:
         9f:4d:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:54 2026 by rpki-client