Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/3133312e3232312e38342e302f32322d3234203d3e20323634343036.roa
File:                     3133312e3232312e38342e302f32322d3234203d3e20323634343036.roa (raw, json)
Hash identifier:          8N0WnqJDlmpPy4CM1eX4UkZ87ziNWdCjwMnOiyqraBg=
Subject key identifier:   48:AA:9A:41:66:F8:C3:21:3E:F5:9F:41:D4:19:5E:AB:3D:CD:60:46
Certificate issuer:       /CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D
Certificate serial:       7D362997FDEDF7E220684F9EFFA17E97AE7F7A53
Authority key identifier: D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/3133312e3232312e38342e302f32322d3234203d3e20323634343036.roa
Signing time:             Thu 05 Feb 2026 19:08:40 +0000
ROA not before:           Thu 05 Feb 2026 19:03:40 +0000
ROA not after:            Thu 04 Feb 2027 19:08:40 +0000
asID:                     264406
IP address blocks:        131.221.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl
                          rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:29:97:fd:ed:f7:e2:20:68:4f:9e:ff:a1:7e:97:ae:7f:7a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D
        Validity
            Not Before: Feb  5 19:03:40 2026 GMT
            Not After : Feb  4 19:08:40 2027 GMT
        Subject: CN=48AA9A4166F8C3213EF59F41D4195EAB3DCD6046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:bc:54:a2:84:1a:bc:31:88:83:18:92:ef:
                    db:1a:b6:ce:91:39:40:fa:4b:86:0d:71:57:41:d3:
                    a6:9c:ff:18:a1:d5:bc:a6:a9:81:e7:be:ac:f7:d3:
                    5a:59:ee:55:c8:6d:e6:78:5d:bf:2c:09:44:ce:55:
                    aa:c8:1e:05:25:c1:3a:67:f5:35:60:37:b2:25:7f:
                    7b:25:e2:cf:0a:cf:7a:b9:96:09:e1:2a:61:a6:41:
                    6c:3b:e3:32:a8:97:3c:7b:6f:78:c2:82:04:8b:2b:
                    5c:6e:65:63:0b:13:bc:88:d7:8d:e6:19:0d:42:0b:
                    ef:f5:f3:00:f4:7b:9d:0d:a9:6a:3b:8d:af:bb:ec:
                    03:89:2e:b9:87:65:be:69:c9:46:fb:4a:9a:a4:4c:
                    d6:0f:5a:1d:f9:64:0c:9b:3f:dd:b0:da:a9:63:9c:
                    dd:e1:33:60:c6:ff:e3:97:95:12:0b:07:a7:f0:e8:
                    db:ef:41:d6:6e:05:71:00:8c:ef:85:b2:58:1d:2c:
                    75:79:35:19:18:e0:6c:41:51:bd:71:d5:ef:e6:9c:
                    49:f9:a9:ae:e9:53:cc:b5:60:c5:e5:7d:4e:3f:fa:
                    b6:80:f0:36:37:8f:55:33:05:f4:40:f5:e3:eb:aa:
                    0e:0f:df:d5:6d:cc:c4:5c:85:4f:fc:d0:92:19:9f:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AA:9A:41:66:F8:C3:21:3E:F5:9F:41:D4:19:5E:AB:3D:CD:60:46
            X509v3 Authority Key Identifier:
                keyid:D4:03:E4:39:9F:D7:16:8A:8D:C0:FD:3F:3E:F6:D5:61:5F:6B:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D403E4399FD7168A8DC0FD3F3EF6D5615F6BFD4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6tSeXMHFwgbhNFiMbHGkCYbdqxMkRuW79AzgTiQQ52r/1/3133312e3232312e38342e302f32322d3234203d3e20323634343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:00:3c:92:3c:96:f2:24:2e:9e:00:d9:28:f9:8a:6e:09:12:
         c3:53:34:e7:fb:99:ec:69:55:a9:99:0b:db:b1:c5:b7:ae:67:
         32:b8:b2:7b:31:2d:2d:b6:16:86:48:43:e0:b8:1f:a8:55:86:
         64:61:1e:2b:cc:95:8c:90:fe:09:9d:42:46:cb:82:05:c3:a3:
         6c:09:cf:35:4d:13:95:9d:2e:15:d0:e2:28:b3:9f:07:58:f0:
         e6:de:2e:c7:c0:72:7e:3d:e5:c4:03:a9:ac:63:c0:3d:72:31:
         df:f2:ec:20:c4:7e:85:27:9b:41:87:73:3b:b0:95:a5:45:4f:
         b8:b0:bd:c8:01:c4:50:2a:8f:0a:ab:1c:0b:73:33:30:2a:17:
         d2:49:52:cf:78:56:2e:46:ad:9f:d0:57:e1:3c:3b:f5:46:40:
         e4:e3:4c:ce:eb:4d:62:ea:32:19:55:c0:d1:89:d6:d1:4e:09:
         45:7a:c1:1d:e5:76:d3:53:c8:7f:99:df:54:92:fe:5f:e2:6d:
         6d:77:5b:5f:18:ea:c5:c7:fa:a4:be:04:b6:7e:fe:ca:16:1e:
         4f:1d:4b:f0:46:31:f2:f4:84:e3:17:49:5f:1e:51:54:78:ab:
         56:ec:e8:30:1a:c1:fb:c0:78:d2:ee:7f:bb:2b:ea:64:1b:0a:
         18:fd:ee:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:23 2026 by rpki-client