Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa
File:                     3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          /uvxAneLHP1pf3BLJ3r7PBZ/ioNa/Y4yTnGT9KD5OfI=
Subject key identifier:   AD:AD:24:56:92:B9:D1:F5:1C:7C:EC:3D:3E:00:EC:52:A5:DF:A6:35
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       03BED447A8F96A7704267D4917D743F275CE8C9E
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 18 Feb 2026 15:17:27 +0000
ROA not before:           Wed 18 Feb 2026 15:12:27 +0000
ROA not after:            Wed 17 Feb 2027 15:17:27 +0000
asID:                     262611
IP address blocks:        168.228.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:d4:47:a8:f9:6a:77:04:26:7d:49:17:d7:43:f2:75:ce:8c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Feb 18 15:12:27 2026 GMT
            Not After : Feb 17 15:17:27 2027 GMT
        Subject: CN=ADAD245692B9D1F51C7CEC3D3E00EC52A5DFA635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:de:2e:2e:7b:6f:df:bd:5e:f6:0c:c1:9f:
                    59:4a:69:9a:0f:32:93:92:d2:8f:b8:55:82:93:d6:
                    12:4f:51:69:e8:30:01:c1:2c:63:d7:1a:db:0b:a7:
                    80:39:4f:e5:ca:32:32:80:be:74:52:7b:79:6a:3f:
                    32:0d:8f:15:43:a5:f8:d1:33:b5:0c:74:7f:40:c6:
                    25:96:30:27:5d:87:95:6b:62:ac:47:5c:3f:f0:ec:
                    13:e0:50:33:66:68:74:de:de:9f:29:2c:f7:75:fa:
                    80:87:f5:04:0c:22:1a:94:ea:f5:8e:6c:b8:6f:da:
                    67:b8:e0:9c:44:1e:00:54:df:43:e7:f4:52:07:7c:
                    af:c1:b6:5e:2e:a2:0b:49:cd:86:14:dd:4c:0b:a4:
                    09:7c:f1:d6:ad:8c:02:64:9a:64:a1:12:56:7f:a2:
                    43:21:3b:6d:25:d1:89:94:e4:a4:8f:cb:f7:c6:59:
                    f4:b4:1e:a0:56:fe:8d:32:58:2c:40:0a:f8:1b:fb:
                    fd:16:77:6b:00:04:e1:6a:46:2e:cd:c1:12:71:6d:
                    7e:d1:cd:62:b4:ce:13:fa:74:37:ed:73:ff:c0:c2:
                    ee:d1:24:38:02:64:2d:ef:08:8c:d2:7d:83:74:b7:
                    e6:99:8c:8c:8c:1b:04:14:73:cd:cf:36:07:ad:21:
                    17:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:24:56:92:B9:D1:F5:1C:7C:EC:3D:3E:00:EC:52:A5:DF:A6:35
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3136382e3232382e3137312e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:f3:08:5f:b1:37:77:b0:38:fe:e7:48:69:a4:9f:f8:a7:
         a0:fc:a4:be:ef:26:fc:2b:e2:a6:be:b6:4f:81:b6:47:93:9a:
         a5:d0:c8:c1:0c:03:f2:67:6a:27:e8:c6:d7:b6:d6:17:f7:e7:
         99:71:e7:9b:5e:3e:d9:71:00:8f:19:e4:55:0f:d1:b9:07:b3:
         4b:de:42:2f:c8:0b:88:44:55:a4:be:94:12:f5:72:d8:ca:23:
         57:6c:13:b0:b3:98:ca:c5:c8:4d:db:45:ab:60:b0:89:71:41:
         09:f9:d8:0d:bd:3b:19:21:01:4d:29:f2:c2:6d:bd:72:36:23:
         2d:29:84:37:13:04:74:48:ed:43:2f:bf:dc:c7:88:b3:02:f3:
         b2:f8:05:a6:ed:09:d5:c3:6a:18:3a:a7:ab:93:68:f9:f1:28:
         de:0e:21:e7:11:91:28:4a:df:12:f0:20:77:08:a0:73:af:59:
         1e:68:d9:27:79:10:42:9a:db:7d:25:8c:75:bc:eb:73:ae:4c:
         22:80:81:b8:18:e3:d9:3d:57:f9:aa:2c:5f:ce:89:e6:6a:e3:
         99:d4:4d:72:f3:34:e6:56:05:22:7b:40:10:f1:12:17:a6:45:
         71:ad:45:d4:c4:3e:fc:e3:f0:fe:52:21:1a:49:a9:0d:85:b5:
         c7:53:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:20:47 2026 by rpki-client