Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa
File:                     3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa (raw, json)
Hash identifier:          8JE7iMMwXgW+wwd5FAGklu0aNUSoonZFZQThhk1QU/M=
Subject key identifier:   85:F0:16:F3:28:07:90:15:CE:E6:68:8C:B8:E1:3D:E8:5A:57:B2:F8
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       613EA024B9B0DC09034A9B6FAE161EC51698065A
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa
Signing time:             Thu 05 Feb 2026 02:29:10 +0000
ROA not before:           Thu 05 Feb 2026 02:24:10 +0000
ROA not after:            Thu 04 Feb 2027 02:29:10 +0000
asID:                     263101
IP address blocks:        186.225.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3e:a0:24:b9:b0:dc:09:03:4a:9b:6f:ae:16:1e:c5:16:98:06:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Feb  5 02:24:10 2026 GMT
            Not After : Feb  4 02:29:10 2027 GMT
        Subject: CN=85F016F328079015CEE6688CB8E13DE85A57B2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:23:ec:48:d7:5c:0a:60:05:92:40:72:c5:
                    62:11:92:cf:da:d2:41:d0:4e:22:03:d2:6a:10:57:
                    07:48:ba:61:9a:9b:94:d5:f9:6d:ff:82:1e:3f:92:
                    d6:f2:47:bd:14:4f:35:20:0c:89:2f:00:c8:ab:63:
                    86:14:90:4e:f7:7b:5b:ac:19:f4:a7:1e:18:56:69:
                    ce:c4:b5:36:d1:8d:ce:a7:ed:fe:a4:db:c2:e1:4c:
                    38:15:3b:af:56:db:67:b8:31:bd:a3:69:a6:f6:b1:
                    a0:69:f1:2d:8a:f0:f6:8d:0f:99:c8:db:ae:0b:db:
                    f6:13:f0:1a:7a:6e:28:60:f2:44:29:85:40:8c:7f:
                    0a:0a:7f:0f:8e:cf:03:ff:ae:6e:ea:9b:f4:09:ef:
                    fa:96:1b:2b:f8:15:bc:36:46:bb:97:a4:49:7b:37:
                    0f:1f:13:20:36:db:ec:43:45:fa:49:d1:de:31:58:
                    32:46:1a:e9:a6:72:06:b6:08:01:2f:34:c0:ce:81:
                    30:ee:d7:b3:03:83:3d:4c:f8:b2:66:72:e5:2b:7a:
                    aa:ed:b7:1e:84:58:e4:d7:ca:3a:38:a0:f1:7f:22:
                    3b:9a:b1:6e:bf:07:cf:9c:a2:e2:cc:d1:11:b8:f0:
                    04:80:1f:5c:c5:ed:08:0c:c1:ac:11:32:0b:cb:2a:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F0:16:F3:28:07:90:15:CE:E6:68:8C:B8:E1:3D:E8:5A:57:B2:F8
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230382e302f32312d3231203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:ae:70:ec:58:49:6b:c6:78:8d:f6:04:82:a6:c7:54:74:81:
         80:40:92:b5:22:44:d9:39:7b:2f:8d:ea:ce:a1:a3:7f:2c:85:
         01:c4:c8:38:7d:e2:0c:f2:a1:03:76:09:9c:ec:42:eb:e9:bf:
         ba:b1:9e:29:e9:66:a1:47:4c:f3:ab:ab:89:4f:20:44:b5:27:
         49:5c:77:e7:5b:4f:a9:b8:99:18:6e:63:b8:b8:e7:bc:4a:e9:
         4a:76:cb:da:cf:1f:5d:16:6d:fc:6b:e0:93:e4:3d:de:54:81:
         85:00:1c:5d:85:53:28:ac:31:0f:c3:5b:28:f6:8e:6d:69:da:
         06:8a:db:fa:da:e0:65:cf:a3:58:5b:99:22:f4:d1:c7:da:b9:
         38:97:97:08:a6:21:a4:d6:97:41:ba:c1:7a:39:a8:5f:2d:c8:
         b9:33:b0:00:8c:f9:ea:53:76:f9:b3:22:3f:74:2d:6d:50:b2:
         cb:09:0e:07:02:d1:8e:b3:3b:43:e0:61:bf:ab:09:cb:dd:76:
         08:ef:c2:69:87:1f:1f:6a:3a:58:a6:37:66:7a:ea:3c:70:ca:
         00:7c:ce:11:6d:f5:83:96:d8:63:6f:d1:ba:4f:0c:a6:e1:5c:
         8b:6c:4d:7f:4a:68:4e:3a:b7:cc:d6:3c:c4:76:ca:47:13:0e:
         8d:90:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:53:46 2026 by rpki-client