Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          l6MvcVLG+54d037K9V4js5ZtzeNQaPI+0TeEr6XiHGw=
Subject key identifier:   4F:5E:4D:95:7E:67:E0:FF:5E:ED:D8:FE:35:6E:7D:B4:C7:FE:34:D1
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       61DEABF5F8CA843531DCD3E7F175014245F157FE
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:29:01 +0000
ROA not before:           Thu 05 Feb 2026 00:24:01 +0000
ROA not after:            Thu 04 Feb 2027 00:29:01 +0000
asID:                     262798
IP address blocks:        186.236.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:de:ab:f5:f8:ca:84:35:31:dc:d3:e7:f1:75:01:42:45:f1:57:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:24:01 2026 GMT
            Not After : Feb  4 00:29:01 2027 GMT
        Subject: CN=4F5E4D957E67E0FF5EEDD8FE356E7DB4C7FE34D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:05:c8:10:61:40:ec:39:cd:0c:6c:32:39:
                    a5:a5:a5:97:9c:98:13:a1:a7:2a:85:18:9f:56:a8:
                    bc:ea:7c:a7:bd:1e:3a:34:56:a8:c2:1f:f7:b0:c9:
                    6a:fd:d3:c3:74:5b:a7:e1:e8:4e:14:1a:32:fc:fe:
                    26:20:a5:ce:01:f9:81:29:f5:3f:2a:7f:6f:03:b8:
                    ec:a7:54:13:46:33:2b:c9:f2:52:79:0d:54:1b:85:
                    24:9f:56:f5:04:4c:ac:2a:0c:39:fb:50:fc:87:22:
                    c5:68:ba:c1:b0:0f:7d:be:75:33:bb:84:74:95:3e:
                    e6:f2:9d:39:58:97:de:d4:3a:b3:cc:c2:c9:d8:87:
                    98:13:2c:a0:82:da:72:f2:a8:84:64:ed:3c:1c:a6:
                    d8:cd:0a:9d:65:bd:7b:d2:40:57:9d:8b:26:b1:6c:
                    2f:df:61:db:7f:97:47:ed:9a:59:03:20:e6:ed:55:
                    f8:c3:60:97:a6:74:c3:ee:6d:37:9f:f9:80:3a:4c:
                    29:48:8a:3f:e2:a2:65:ba:a6:18:da:30:8f:80:8e:
                    05:87:73:26:0f:72:21:92:11:a2:05:56:ab:56:f4:
                    07:ce:8f:03:9a:83:f3:d5:a5:ab:37:09:b0:4b:e4:
                    b2:03:33:2c:ec:c0:5d:90:d1:63:62:9c:63:01:6b:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:4D:95:7E:67:E0:FF:5E:ED:D8:FE:35:6E:7D:B4:C7:FE:34:D1
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35392e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:c8:2e:06:ce:d8:c2:ad:bc:38:5e:c3:29:d8:77:4e:68:
         95:a9:bb:1d:8f:31:e6:08:b6:90:8b:45:f6:9b:74:74:bb:0d:
         b6:5c:14:a5:b5:19:27:25:03:f3:e1:25:31:56:04:33:ee:1b:
         81:56:c3:d3:48:43:c0:a0:45:b1:c7:17:28:a7:e6:55:f8:fa:
         44:f1:7e:1a:c4:20:07:24:a4:7c:c6:0b:1f:2d:b4:0b:68:f0:
         09:c6:a1:00:d8:b8:ad:21:77:4a:da:93:ad:91:ad:52:87:65:
         5a:6c:4c:95:a8:47:56:69:ec:fb:22:da:80:43:6b:66:77:c7:
         dc:dc:af:6b:e6:2f:4f:67:44:05:53:24:a8:16:21:2d:c4:02:
         90:f5:aa:07:85:4b:a7:f4:e6:ab:04:b1:8c:e1:78:6a:03:5c:
         59:20:ad:30:81:a1:7a:59:2f:53:20:b3:e0:a3:54:ec:2d:26:
         bf:01:dd:14:c5:e6:62:30:bd:b3:71:bf:18:a1:27:3b:bc:04:
         ca:95:95:cc:39:fb:df:2d:94:34:ba:e5:22:13:c1:9b:bb:17:
         61:15:df:e3:45:4a:6b:9b:a4:71:29:1e:0d:d7:fd:5b:6c:91:
         2d:58:b9:53:ab:fb:48:ff:a6:9a:3e:b3:dd:d6:c3:2b:53:55:
         4b:f7:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:22:43 2026 by rpki-client