Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          TUm7gjfCy8H0+plE7aYRrY9zT/DWNveWiF8gDJMnNT0=
Subject key identifier:   20:FF:9A:94:76:05:50:9D:0A:3F:ED:34:5F:F2:B0:AA:F1:42:61:3E
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       4129782C68260B4D97D81A8BBD75D1138316E9E6
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 05 Feb 2026 02:29:11 +0000
ROA not before:           Thu 05 Feb 2026 02:24:11 +0000
ROA not after:            Thu 04 Feb 2027 02:29:11 +0000
asID:                     263101
IP address blocks:        186.225.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:78:2c:68:26:0b:4d:97:d8:1a:8b:bd:75:d1:13:83:16:e9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Feb  5 02:24:11 2026 GMT
            Not After : Feb  4 02:29:11 2027 GMT
        Subject: CN=20FF9A947605509D0A3FED345FF2B0AAF142613E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:0c:bb:2f:92:82:31:ef:ac:0d:2b:db:4f:
                    1d:33:93:2a:71:7d:ed:6b:19:22:eb:6f:a6:c7:5e:
                    25:cf:70:b2:86:ba:a6:bd:a7:78:c5:bc:4a:0d:a3:
                    8f:dc:e3:86:69:2d:c6:a9:cd:ba:fa:0d:06:83:a3:
                    29:e6:28:a2:b5:a4:29:0a:9c:dd:50:5c:9f:f7:4c:
                    fa:c8:df:6a:e4:d6:e0:df:f6:2d:e7:1f:d4:22:04:
                    a3:56:db:10:0a:cc:23:2d:f1:e7:6d:c6:a0:88:5f:
                    46:ee:c7:cc:20:81:ac:30:08:9e:fb:79:79:7d:13:
                    1e:30:59:48:77:d2:96:dd:96:ef:95:82:62:69:fc:
                    a4:ac:85:c7:41:ca:54:7c:7f:94:db:88:62:24:dc:
                    bb:8b:18:73:20:2f:f5:d3:94:ce:a6:65:6f:4f:8a:
                    71:ae:5e:77:7c:25:bf:bd:b1:56:96:d1:ba:64:e1:
                    09:c0:a0:6f:55:bf:d8:dd:a0:2e:c5:fc:4c:fe:b4:
                    ae:ef:29:34:79:26:a2:2f:2d:29:d0:7a:41:59:af:
                    11:3a:f9:bf:69:b0:b7:41:26:b3:aa:61:76:33:31:
                    30:c0:de:9d:1b:ab:ba:80:97:30:89:0c:2a:9f:4a:
                    9b:8d:15:16:ed:14:53:e1:b7:d6:37:6a:35:b6:bb:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:9A:94:76:05:50:9D:0A:3F:ED:34:5F:F2:B0:AA:F1:42:61:3E
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3231342e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ae:7c:33:d7:74:59:49:d5:4a:eb:93:79:ba:38:cc:7b:f0:
         06:f8:e7:96:9c:2a:4b:f6:76:c7:48:6f:89:f6:91:ff:38:94:
         1d:cb:96:ff:c3:0f:1b:35:2a:36:e7:f6:ac:be:56:12:d1:74:
         db:2e:db:11:c1:68:e6:7a:c6:b8:b8:f3:cb:04:a9:a8:58:a0:
         01:a0:2d:48:e8:33:45:ee:60:41:cc:8d:20:27:0c:ba:02:d1:
         e0:5b:cf:16:f7:b9:80:0f:15:b4:d9:7a:97:20:1d:bf:6c:66:
         94:1c:02:58:ce:28:24:57:e6:b1:4d:68:22:f6:a2:80:a6:39:
         8e:f1:85:e2:45:3f:08:22:dd:98:60:42:2a:d4:36:08:92:cc:
         d7:d6:e1:c1:80:fb:f9:bf:ed:f5:8c:3d:0f:cf:ef:f8:fd:d4:
         79:ba:5f:91:8d:79:dd:09:37:68:65:b8:8c:5e:33:7c:df:f3:
         08:50:de:64:2f:d4:e5:f0:f5:71:ef:53:ab:64:f4:2d:08:dc:
         a9:14:05:29:02:08:db:36:73:25:76:2b:95:2b:ea:ba:d0:39:
         84:e1:52:11:10:7b:8f:b1:0a:dd:a9:d2:87:ce:da:bf:22:b8:
         ff:23:5e:7c:ef:a0:02:e9:cb:51:47:70:8d:5d:3c:9a:f9:6d:
         27:a5:e8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:23 2026 by rpki-client