Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230362e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230362e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          PKig4aqOKOfdx4w6ndXUvzDqGWJIPb35O4uypF4Ye6c=
Subject key identifier:   F4:16:92:3A:0E:2F:E2:72:4D:06:C5:B8:DD:AF:8D:3D:19:27:AC:8F
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       3818D04543572B18B406F60404379099D0144DFF
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230362e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     263512
IP address blocks:        191.243.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:18:d0:45:43:57:2b:18:b4:06:f6:04:04:37:90:99:d0:14:4d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=F416923A0E2FE2724D06C5B8DDAF8D3D1927AC8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:cd:f1:ab:10:20:45:bd:c5:d7:93:96:05:
                    b7:c3:40:f6:b4:3e:8e:f4:11:c9:e2:41:12:bf:0b:
                    67:63:b0:bb:bc:81:ac:2f:30:14:f7:30:9e:a0:32:
                    f7:b4:ae:f3:c3:c4:ec:05:e3:61:6f:03:e5:fb:07:
                    60:03:6e:bb:b1:5c:69:e4:62:40:1a:68:b2:36:38:
                    f3:f8:2f:0a:3b:c6:7b:83:ec:10:2e:a6:ce:ee:78:
                    14:28:22:99:dd:61:e7:69:76:8a:1e:42:48:ee:c3:
                    99:fe:fd:e1:1e:b9:48:99:b9:d7:42:c4:b4:92:d1:
                    f8:a9:4f:fe:28:d8:f2:17:66:1f:41:a5:72:68:ec:
                    34:4e:ff:4f:73:27:1f:f5:cf:2b:94:e1:5f:6a:82:
                    e3:db:73:29:dc:c6:92:c1:86:03:56:14:72:eb:b0:
                    ea:1e:49:a6:bc:4b:50:33:df:1d:65:d6:68:2e:0d:
                    02:1d:40:05:9f:f2:4c:cb:79:3d:47:0d:61:73:de:
                    fa:9b:7b:62:07:35:8e:3b:c7:a6:c6:e4:c8:64:66:
                    2f:b3:b9:bc:af:b4:06:4b:87:52:17:c1:34:ee:95:
                    e3:2e:dd:12:cb:e3:10:3e:ff:7d:47:e7:4b:28:c0:
                    5b:05:64:3b:5c:f6:8c:d8:ae:c5:9b:ea:ee:95:af:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:16:92:3A:0E:2F:E2:72:4D:06:C5:B8:DD:AF:8D:3D:19:27:AC:8F
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230362e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:1a:f4:40:46:0d:cb:4a:a1:c3:49:23:51:cd:36:8c:9f:
         5c:e8:04:6d:84:f9:4b:9a:e1:62:5d:68:30:b9:d9:e0:20:ca:
         30:2a:83:f4:97:04:3b:c0:e5:5e:46:e9:62:48:44:45:09:85:
         9f:1a:de:9c:eb:30:6b:c4:78:5d:a6:5b:a0:ac:67:55:fc:0d:
         a0:72:d3:54:d9:42:2c:17:6c:d5:cc:7b:b5:cf:eb:d1:9d:89:
         c8:38:05:d8:86:b7:d7:3d:3d:50:a0:6d:1f:f9:c9:a5:29:6e:
         de:75:89:6e:c2:60:ae:6d:eb:a0:33:53:92:2f:8d:ab:40:12:
         fa:cb:a4:66:c6:24:8b:87:ca:56:1c:86:10:4f:fa:d6:5e:f7:
         96:a7:2a:3a:bc:f1:e9:3f:bb:89:41:6b:48:d1:21:ee:ae:b1:
         34:47:c2:2b:48:eb:a1:f3:92:3d:8b:a4:57:82:a1:59:01:d8:
         5c:7a:90:59:98:6e:30:6e:a4:4e:21:72:aa:c0:30:0b:e2:ac:
         ea:d0:8f:60:ee:be:6a:68:b5:c7:e4:5c:2a:6d:07:9a:4c:3f:
         82:92:54:4e:36:41:77:20:59:30:f6:56:f8:23:ad:03:5b:c8:
         cf:9f:78:84:f6:cf:66:a7:fb:09:21:c2:d2:68:86:73:2e:dd:
         a1:53:9e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:11 2026 by rpki-client