Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
File:                     3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa (raw, json)
Hash identifier:          S/sgvUl2xFvt52MJPUZCM7qWhvaQ4IMQxb1FiuLG1WU=
Subject key identifier:   25:1E:F8:F9:C7:84:B1:19:6E:AC:96:C9:B4:29:8E:3D:1B:60:5E:32
Certificate issuer:       /CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
Certificate serial:       3F84FE16DD88AF87136460661D0B6E571EB4623E
Authority key identifier: 43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa
Signing time:             Thu 05 Feb 2026 12:12:48 +0000
ROA not before:           Thu 05 Feb 2026 12:07:48 +0000
ROA not after:            Thu 04 Feb 2027 12:12:48 +0000
asID:                     263582
IP address blocks:        168.196.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl
                          rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:84:fe:16:dd:88:af:87:13:64:60:66:1d:0b:6e:57:1e:b4:62:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4373021A1019537C2A9D84FF03720B0ECF4EBB52
        Validity
            Not Before: Feb  5 12:07:48 2026 GMT
            Not After : Feb  4 12:12:48 2027 GMT
        Subject: CN=251EF8F9C784B1196EAC96C9B4298E3D1B605E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:02:94:84:71:52:7f:c5:c9:bc:6a:34:40:e4:
                    ee:3f:8e:0a:40:c2:19:1f:ce:0d:5c:86:a9:0b:de:
                    e2:9f:9e:5f:a5:b2:2b:26:88:61:c3:97:67:1f:e8:
                    4b:03:80:17:23:93:4d:90:6c:4a:67:e3:1a:e7:89:
                    66:a2:67:5b:93:08:e0:4e:17:2f:0f:1e:8a:02:ea:
                    bc:26:78:52:e8:8d:32:e1:58:92:1e:cc:fb:24:ef:
                    65:f9:cc:e0:78:65:3e:08:86:30:64:bd:56:25:92:
                    31:ef:ac:85:29:a5:73:f3:63:73:b9:cf:44:a2:0f:
                    af:4f:05:1d:de:5e:0c:fb:a1:1e:3a:ab:eb:5d:2a:
                    2e:04:61:39:f1:98:aa:c0:b9:34:7a:c8:43:70:da:
                    4c:7e:3c:9e:24:c8:77:17:8e:e9:aa:5d:af:31:e9:
                    a7:2f:b1:07:e8:53:9d:85:5b:42:06:23:a3:38:38:
                    73:3f:aa:e2:36:9f:6c:b8:25:fb:a2:2c:88:dd:c0:
                    17:e7:22:0d:f8:ef:e3:4e:4a:86:0d:f8:e5:88:42:
                    2e:84:72:20:0e:c1:a5:80:9a:da:24:55:fe:c3:23:
                    18:63:2a:aa:7b:13:91:df:ac:e9:a2:82:f0:e6:aa:
                    8a:56:1c:bb:06:1b:91:1c:f8:59:f1:13:3d:bd:a8:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1E:F8:F9:C7:84:B1:19:6E:AC:96:C9:B4:29:8E:3D:1B:60:5E:32
            X509v3 Authority Key Identifier:
                keyid:43:73:02:1A:10:19:53:7C:2A:9D:84:FF:03:72:0B:0E:CF:4E:BB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4373021A1019537C2A9D84FF03720B0ECF4EBB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SGb9oSxuzEc4ccPuDzUts37AUMombhtX51Pe25s98Fh/1/3136382e3139362e38302e302f32322d3234203d3e20323633353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:69:1a:62:2e:a3:24:eb:80:1c:3f:c7:a8:ba:58:6a:ee:a1:
         50:c2:43:c9:65:da:8a:55:77:ca:be:b5:07:5c:b5:b1:d9:d2:
         8d:ad:62:d7:cc:81:81:1b:94:49:a2:4b:de:32:59:f8:51:b4:
         d1:f0:f1:5f:d6:c3:89:8b:5a:69:25:27:a4:42:1e:af:db:2d:
         8a:f9:af:c7:38:a2:72:2b:71:8a:09:bc:ab:ca:31:0f:04:a8:
         67:86:18:e3:11:35:15:79:27:03:b3:6e:d8:64:71:e8:53:25:
         d7:62:6c:d0:c0:d0:7e:f3:77:3c:ed:8c:10:61:70:a1:19:0c:
         0a:4e:de:a0:8a:ce:9a:83:8c:7f:f8:6d:b9:ac:5b:18:c8:1b:
         5b:f9:97:2f:f0:6b:5f:29:68:f6:5f:45:2b:70:2a:5b:65:7b:
         8e:17:5a:a2:3e:02:d0:17:44:3e:63:2a:79:f2:8d:42:55:0f:
         24:7b:b8:6c:eb:fd:33:b0:ea:e9:de:a3:78:83:da:54:07:a7:
         9e:e7:70:8b:b2:f1:a5:a6:20:c4:0d:d9:12:7e:9a:1a:95:de:
         03:41:ce:cf:b4:4a:46:30:dd:e7:d2:52:08:13:ce:9f:db:71:
         77:82:5b:b1:56:76:db:2c:02:92:fa:61:80:6b:d8:50:c7:14:
         30:90:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:42 2026 by rpki-client