Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa
File:                     3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa (raw, json)
Hash identifier:          aLrEbu0lf4uIyw8LTq5ku4pmYTF5o7zJ9cSrbcflO5w=
Subject key identifier:   23:04:C4:AB:A5:64:89:6C:FE:ED:FD:E3:86:C1:B2:57:08:3C:7C:52
Certificate issuer:       /CN=9D24A534785E862FF2DAC70BF06847337A2816FB
Certificate serial:       4D92EECA5CA11EA91DBA63B8D6AF04A894332ABB
Authority key identifier: 9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa
Signing time:             Thu 05 Feb 2026 16:56:38 +0000
ROA not before:           Thu 05 Feb 2026 16:51:38 +0000
ROA not after:            Thu 04 Feb 2027 16:56:38 +0000
asID:                     270376
IP address blocks:        190.89.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl
                          rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:92:ee:ca:5c:a1:1e:a9:1d:ba:63:b8:d6:af:04:a8:94:33:2a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D24A534785E862FF2DAC70BF06847337A2816FB
        Validity
            Not Before: Feb  5 16:51:38 2026 GMT
            Not After : Feb  4 16:56:38 2027 GMT
        Subject: CN=2304C4ABA564896CFEEDFDE386C1B257083C7C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:ce:ea:ed:52:45:d3:50:c8:b2:1a:ab:f0:
                    42:9c:69:d0:52:02:be:70:6d:03:5c:b5:84:51:9f:
                    8d:c8:30:b4:65:b6:ca:2a:11:24:56:f4:f5:4d:fd:
                    43:04:f5:56:9f:f2:a5:51:b8:00:44:15:da:24:38:
                    30:a7:25:61:ef:63:50:de:ab:99:d1:2a:2a:c3:27:
                    c1:3f:f0:af:0a:dc:3c:8c:19:55:cc:01:0a:3c:eb:
                    bd:00:3b:42:c6:20:69:c2:f0:65:52:db:9f:d4:ab:
                    70:f9:09:a5:75:d2:32:80:ce:f1:be:96:76:00:4f:
                    9b:d3:6a:e0:95:8b:f0:f2:68:c8:e8:93:b0:74:2c:
                    c3:e6:d0:50:38:ce:fd:15:46:18:67:13:4a:e0:8f:
                    42:ad:c4:74:8e:78:38:a5:ef:43:dd:ce:08:a5:37:
                    22:5f:0b:81:7e:13:9d:13:f2:f6:d6:14:90:d1:ec:
                    0f:eb:ad:fc:c0:b1:59:92:12:09:1d:2c:c7:48:6f:
                    cd:8f:d6:64:32:01:eb:58:84:aa:2f:e2:0e:15:e5:
                    dc:ee:67:d8:22:d3:fa:39:43:7e:bc:27:93:d2:cb:
                    b2:33:57:05:a9:33:eb:84:65:1c:08:76:83:d1:c0:
                    52:ee:48:c3:8b:0c:1f:04:6f:35:71:71:91:88:7a:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:04:C4:AB:A5:64:89:6C:FE:ED:FD:E3:86:C1:B2:57:08:3C:7C:52
            X509v3 Authority Key Identifier:
                keyid:9D:24:A5:34:78:5E:86:2F:F2:DA:C7:0B:F0:68:47:33:7A:28:16:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/9D24A534785E862FF2DAC70BF06847337A2816FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D24A534785E862FF2DAC70BF06847337A2816FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBXmgpnd6exyZ8Gj39kTda4gbwbJgJHzYuUz5u8V6Dbw/1/3139302e38392e3136302e302f32322d3234203d3e20323730333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:1f:84:c6:ee:c6:cd:19:3b:42:5e:8c:5c:0e:e0:29:60:
         a6:1b:a6:e8:b5:0e:b7:cf:c5:23:69:b6:5e:c6:00:cb:1e:3d:
         53:06:7c:67:1b:1a:b4:af:d4:41:c3:31:d7:d9:68:6d:41:c7:
         ff:06:91:27:f4:e9:3b:56:20:c5:43:7b:a8:4a:c8:16:4e:1e:
         27:0e:00:1c:a9:a8:4e:cd:cd:3d:28:9c:d3:4d:53:1b:d6:be:
         49:6c:f8:ce:b1:d0:9f:76:1f:70:78:fd:9d:3b:00:bc:ea:77:
         9c:34:30:95:bc:a5:fd:b9:d3:38:16:91:bb:ee:0c:9e:b8:37:
         16:de:b8:35:3c:9f:52:3c:b4:0d:42:74:9a:f2:12:06:56:45:
         a2:19:bd:0e:71:a7:33:74:e1:f8:42:6f:37:07:73:c4:20:e8:
         bb:c3:cd:f9:f2:59:f2:9b:05:d7:02:ea:2c:23:4f:e1:f8:cb:
         37:35:88:af:02:72:5f:8b:7c:10:27:24:26:c6:6a:05:ec:f6:
         26:7c:ee:be:bf:36:ee:3b:84:05:a8:c8:39:06:d5:d4:4f:5e:
         69:41:57:c8:91:30:3e:9a:af:3f:42:54:a4:5f:2f:53:82:31:
         41:2f:ad:d6:dc:25:88:4b:aa:66:00:89:97:46:ca:36:ae:72:
         35:07:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:47 2026 by rpki-client