Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa
File:                     3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa (raw, json)
Hash identifier:          S5Qk3UmH8CD1wHojOwhuPzerv5qN9tNIEyNepf/5D+4=
Subject key identifier:   A8:27:45:27:CD:E8:E6:6B:1D:13:07:92:4C:06:91:70:9B:4D:10:7D
Certificate issuer:       /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial:       0C712DDBF7CE4742C7CBAC69B55160D6E7CFAF68
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     263918
IP address blocks:        168.181.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
                          rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:71:2d:db:f7:ce:47:42:c7:cb:ac:69:b5:51:60:d6:e7:cf:af:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:8c:80:32:9a:5f:67:f3:b2:d9:a8:d2:03:
                    aa:21:90:6f:d2:ee:c1:34:4b:ee:ab:bc:e0:c5:cf:
                    25:0f:35:05:63:79:9c:46:44:42:a6:af:40:59:82:
                    f6:a8:68:73:65:bb:fe:84:f1:4e:90:e8:56:3b:6d:
                    85:38:ae:98:66:eb:85:ae:30:77:69:d1:61:5a:eb:
                    fd:ac:2b:dd:b6:c1:3a:f6:c5:61:ea:e0:8c:9b:7f:
                    66:bd:e4:d4:61:6c:3e:7e:44:7e:7d:33:9a:5a:4a:
                    9a:85:4a:c1:d5:d5:e9:95:55:81:b1:51:2c:a4:ef:
                    10:39:8c:9e:63:34:76:d3:54:c4:c2:6d:15:15:23:
                    7f:3a:d0:a6:3d:47:b4:25:15:e4:e5:4f:f0:42:63:
                    19:70:a0:fb:dd:88:df:f9:7b:c9:7e:cd:36:cf:30:
                    08:78:dd:c5:19:f4:f5:fe:25:bb:c1:78:82:61:74:
                    f7:33:70:02:e4:56:ad:27:d2:06:76:b7:d7:da:42:
                    27:a1:72:db:73:7a:f7:f0:2d:8e:94:7b:58:a7:e1:
                    da:8d:88:5f:1b:be:df:07:c3:57:5b:18:d7:f6:7b:
                    e9:a7:b8:a5:1d:48:7f:a4:f0:9f:d2:70:55:f0:5e:
                    3e:43:8f:22:35:e7:5f:b4:43:f9:5a:5b:6b:af:65:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:45:27:CD:E8:E6:6B:1D:13:07:92:4C:06:91:70:9B:4D:10:7D
            X509v3 Authority Key Identifier:
                keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3136382e3138312e3232302e302f32322d3234203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:f9:3b:95:e5:84:4a:52:4e:de:df:e8:f1:3b:17:2a:70:
         c8:ab:bb:c6:20:26:97:85:2b:82:fe:03:5f:ba:0d:40:7f:90:
         bf:51:81:00:6d:4c:9c:da:10:53:da:24:d6:24:f3:11:f7:51:
         f7:34:a9:41:4e:c1:c6:75:fd:05:1a:90:8d:7e:3c:55:35:36:
         d9:06:d3:d2:5b:d0:99:3f:54:a2:9d:11:56:92:8a:92:a5:ea:
         69:2b:48:83:9d:7a:01:da:f1:54:33:84:8b:5e:63:16:70:f3:
         2d:5d:8c:3a:77:af:2b:36:ed:12:bd:cf:14:6f:7b:42:c1:92:
         bf:e2:88:c0:04:80:d0:2e:35:49:f7:4d:d3:f9:d5:14:1b:81:
         3a:a4:f5:a7:8e:ff:92:81:30:31:04:c6:08:f5:f7:0a:c9:a2:
         9d:ce:94:93:2b:bf:cd:19:6d:cf:f4:d4:a0:9b:1f:76:fa:19:
         bc:f1:59:d3:23:93:c0:d8:37:35:37:d7:b4:47:e8:22:98:7a:
         d8:b3:d4:aa:e3:3e:98:23:0c:09:8f:54:dd:61:74:b0:62:3a:
         02:f5:3f:a5:90:3c:90:d1:86:01:e5:c6:5e:89:74:32:11:1a:
         19:77:46:79:6e:25:1f:c4:b4:4e:65:20:14:fa:0f:3f:fb:21:
         99:4e:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:58 2026 by rpki-client