Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231332e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3231332e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          BJA0bwE0TW0wKf9SnMKzTIiI30+egZIuSzb8tkcbcwU=
Subject key identifier:   C7:B6:11:EA:0A:A2:46:B4:DB:38:C3:4E:26:56:BD:9C:99:E2:9B:C1
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       63E9C80FB8B3A5C8517B2BEE61324F098AD67D34
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231332e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 05 Feb 2026 02:29:11 +0000
ROA not before:           Thu 05 Feb 2026 02:24:11 +0000
ROA not after:            Thu 04 Feb 2027 02:29:11 +0000
asID:                     263101
IP address blocks:        186.225.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e9:c8:0f:b8:b3:a5:c8:51:7b:2b:ee:61:32:4f:09:8a:d6:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Feb  5 02:24:11 2026 GMT
            Not After : Feb  4 02:29:11 2027 GMT
        Subject: CN=C7B611EA0AA246B4DB38C34E2656BD9C99E29BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:75:61:5e:69:bc:9c:f7:31:97:92:2a:61:
                    32:a4:e7:db:ec:9d:9f:d3:e9:d6:69:d8:bf:8e:71:
                    6f:8e:f7:11:73:83:46:87:72:da:69:4c:02:61:56:
                    e2:13:9a:00:6d:69:fb:8a:57:65:94:f0:ad:90:33:
                    24:a3:bd:02:36:5a:e3:5b:24:34:96:d4:58:dc:a6:
                    bf:40:ac:b2:3b:03:02:23:06:3e:54:4b:48:cb:05:
                    02:d4:e9:bc:e0:f2:1f:43:86:ae:4d:fa:17:e3:37:
                    29:0b:43:21:bf:34:9e:45:d3:94:3b:f6:32:bf:73:
                    58:21:06:30:55:ea:b8:85:7c:0b:a7:a3:2f:d3:90:
                    7d:18:9f:be:7b:b8:38:37:dc:98:23:f9:5e:cd:a7:
                    74:50:5e:c8:9e:9a:65:94:17:af:57:71:73:67:13:
                    c2:82:01:9e:84:b3:2c:d7:fa:f8:25:c1:cb:37:48:
                    7c:1a:72:c4:df:24:a1:4f:af:a6:1b:d9:a8:88:24:
                    56:ed:56:09:20:5c:d2:47:7e:f9:d7:b8:71:f7:10:
                    10:54:83:cb:24:53:6b:ed:ad:12:7b:a4:bc:10:90:
                    2d:4f:af:01:d2:37:60:f5:6f:d7:66:d5:2b:d8:6b:
                    54:56:55:88:47:8b:eb:09:8f:09:c8:bf:0e:4a:18:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B6:11:EA:0A:A2:46:B4:DB:38:C3:4E:26:56:BD:9C:99:E2:9B:C1
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231332e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:28:af:8a:73:5d:c6:07:3a:e8:91:73:c8:b9:4d:63:3a:1e:
         ae:c5:4b:f2:0d:4e:3d:41:f3:bf:c1:a5:1f:7a:26:8f:86:79:
         ae:b9:eb:c1:e3:93:b6:39:b1:af:06:71:f3:37:9e:1a:5f:20:
         08:7a:91:b3:02:15:40:59:f0:80:ae:b3:fb:9d:77:f1:2e:c7:
         34:50:da:ca:88:a5:bd:e8:98:2c:cb:66:bd:98:83:ab:ac:ce:
         f8:63:dc:38:b4:b8:ac:7e:8c:bf:c8:a5:55:17:bb:47:fe:4b:
         18:f1:3f:d5:d7:a9:ed:57:67:ee:8f:07:43:d0:52:27:90:8b:
         96:19:12:ec:c9:bc:40:f3:fb:f1:b7:b8:f5:f8:96:5e:3d:e3:
         13:b5:e4:b9:06:a6:7c:6d:63:8b:5c:50:39:9e:83:54:40:f6:
         f7:7e:eb:e3:87:81:30:3f:f7:36:c4:d4:6f:2e:3b:c1:7a:e5:
         bf:03:6d:94:a5:3b:5c:80:72:58:d2:47:82:d5:f4:40:c8:44:
         0d:21:ef:5a:e7:f1:45:dc:71:8e:35:19:96:9e:31:96:19:de:
         d1:c8:22:8c:13:70:0b:e7:64:a8:c1:dc:9b:c8:9f:a3:4c:6b:
         ed:f8:71:18:83:6c:a0:83:bf:97:e2:f4:3c:42:05:6f:9d:d4:
         f6:98:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:22:25 2026 by rpki-client