Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa
File:                     3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa (raw, json)
Hash identifier:          k7M00RNjSTGLOn+GfXsi92WrFTAcoOUs0vze9bpNWIY=
Subject key identifier:   61:A2:BB:06:42:62:09:56:4E:17:1C:17:2B:38:08:39:A6:A7:85:81
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       4038B890D86060DC328FA71B4B18EC428418535E
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa
Signing time:             Fri 06 Feb 2026 00:54:23 +0000
ROA not before:           Fri 06 Feb 2026 00:49:23 +0000
ROA not after:            Fri 05 Feb 2027 00:54:23 +0000
asID:                     265364
IP address blocks:        168.205.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:b8:90:d8:60:60:dc:32:8f:a7:1b:4b:18:ec:42:84:18:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Feb  6 00:49:23 2026 GMT
            Not After : Feb  5 00:54:23 2027 GMT
        Subject: CN=61A2BB06426209564E171C172B380839A6A78581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:17:1b:bb:d2:fb:33:a1:50:9e:07:ae:a0:
                    31:8c:3a:49:b9:c9:d4:3d:66:36:53:aa:99:0e:22:
                    9f:b7:1c:55:da:60:24:9e:85:28:ab:b5:89:fa:c0:
                    b5:7f:99:b2:14:c0:7f:bb:d9:e1:6e:c1:0c:eb:d8:
                    ca:ff:7a:fd:d2:f1:8a:6d:83:55:c4:6c:cc:43:eb:
                    0b:9c:75:e8:99:44:40:f2:fb:47:2e:72:6e:b6:97:
                    a5:1c:7b:30:5f:1a:4a:3b:e3:fb:b7:c5:78:8b:a3:
                    98:5b:c7:1d:ef:c2:8c:0b:1d:a9:6c:c7:d2:e3:cb:
                    e0:04:be:ca:5b:dd:07:2e:6f:b0:d8:14:95:f1:6c:
                    ac:d1:0d:52:a4:cb:98:f1:1b:0a:8b:0c:96:0d:81:
                    f9:84:2c:b1:26:44:2e:13:2a:0f:bd:ff:6b:24:07:
                    33:b5:40:fb:18:91:1b:e4:56:7f:d8:f2:0a:96:fd:
                    69:7e:da:e7:5c:c2:09:c2:75:7d:3d:e2:3b:ca:6b:
                    47:2f:37:6a:10:07:2e:c6:4c:c6:ea:b5:21:f8:32:
                    da:48:48:49:06:b5:44:40:64:de:11:26:cf:af:c0:
                    21:14:ad:5c:58:6a:41:c9:cc:c3:e6:55:02:f6:d4:
                    4e:fe:13:90:b2:54:02:f5:1a:ab:bb:7d:63:1f:da:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:BB:06:42:62:09:56:4E:17:1C:17:2B:38:08:39:A6:A7:85:81
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38382e302f32322d3232203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:47:99:26:67:98:87:19:bd:13:5d:6c:b3:c9:74:c8:0d:d3:
         4b:09:19:34:98:48:ca:0a:47:07:64:3f:a5:d5:17:fe:73:b9:
         b9:d7:e6:dc:12:cb:91:7b:28:15:bb:eb:91:6d:0f:f9:c7:b1:
         77:5d:0b:5c:f2:df:c9:b8:68:7d:85:83:f6:50:0a:61:ec:8e:
         29:57:10:b0:6c:d7:a0:e4:20:a6:c5:56:ce:3b:af:b6:a9:42:
         17:55:8f:ea:ca:b1:16:ea:4b:05:38:cc:e4:9d:58:db:d9:37:
         a1:46:59:38:1e:a9:f1:bc:59:c0:e8:7f:c7:2a:7f:2e:d9:a3:
         8b:0d:90:3d:df:40:cd:c7:66:d1:62:64:c0:e7:68:46:05:70:
         5e:c7:a3:5f:0d:b7:d8:ea:f4:5e:51:d6:bc:57:2f:cc:92:17:
         fd:35:8e:07:ef:54:80:48:6f:9b:1b:c9:fb:3f:07:17:67:7c:
         4b:22:5d:a7:58:14:77:5f:8c:87:53:12:bc:28:5b:44:93:96:
         11:8c:cd:ac:4a:51:a7:39:ac:28:99:2f:fe:38:93:39:51:bd:
         2d:c6:fc:62:e7:34:10:0b:38:b2:a6:02:b1:63:6a:7d:74:d4:
         c8:14:a0:a8:a0:09:70:8a:87:83:08:6f:45:9e:23:31:be:80:
         6d:34:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:39 2026 by rpki-client