Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
File:                     3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa (raw, json)
Hash identifier:          ZMul40Y8Q217O+KpThcLL0+pQ0dCRjFOumwKZCfyhRo=
Subject key identifier:   FD:D6:79:E0:AB:3F:5E:02:A8:51:30:6C:D1:2F:5D:F2:66:4C:C3:61
Certificate issuer:       /CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
Certificate serial:       69F0CF9CE5FC0A7326D7CCFC668D283DB7184AF8
Authority key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa
Signing time:             Thu 05 Feb 2026 10:13:32 +0000
ROA not before:           Thu 05 Feb 2026 10:08:32 +0000
ROA not after:            Thu 04 Feb 2027 10:13:32 +0000
asID:                     264528
IP address blocks:        168.194.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl
                          rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f0:cf:9c:e5:fc:0a:73:26:d7:cc:fc:66:8d:28:3d:b7:18:4a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661
        Validity
            Not Before: Feb  5 10:08:32 2026 GMT
            Not After : Feb  4 10:13:32 2027 GMT
        Subject: CN=FDD679E0AB3F5E02A851306CD12F5DF2664CC361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:f3:a2:35:74:ca:ee:7e:79:19:a2:83:a7:
                    eb:62:01:74:89:ea:15:3c:fe:5c:ac:12:9a:c2:b3:
                    46:af:11:e6:37:cd:b8:47:f0:79:de:fd:44:95:89:
                    b8:bf:bf:96:7c:a7:51:92:67:ac:93:f9:0a:19:9e:
                    94:81:d6:09:77:ac:6d:39:ff:da:76:08:b0:b8:d1:
                    bc:93:d1:b4:96:9e:54:39:02:8e:69:7f:e8:02:9c:
                    46:cf:36:2e:c3:8a:4f:db:a9:1d:73:1f:15:b2:c3:
                    de:2e:46:31:42:8c:a7:90:25:5f:2d:0c:32:27:f5:
                    8e:c4:67:b7:56:5c:33:1b:41:6f:fd:3b:e3:96:72:
                    b7:f6:aa:1a:88:a0:71:0f:7e:a6:af:ba:aa:b7:24:
                    36:41:43:06:b8:35:83:9c:1f:53:b7:e9:02:a3:a6:
                    2d:da:b0:0a:8a:4a:93:48:d2:51:5a:13:fd:84:f7:
                    65:a2:0a:59:06:b8:bf:f7:53:ba:1b:7c:e6:c1:5b:
                    4a:94:44:0a:da:26:55:63:1e:93:3f:2a:03:0d:70:
                    61:90:61:44:f9:fa:e3:ff:ee:8f:c7:92:b1:15:34:
                    94:3f:ad:ba:a6:c7:cb:d9:94:77:76:c2:37:93:59:
                    c3:69:66:d2:29:91:72:7b:4a:09:32:f8:bd:82:b8:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D6:79:E0:AB:3F:5E:02:A8:51:30:6C:D1:2F:5D:F2:66:4C:C3:61
            X509v3 Authority Key Identifier:
                keyid:2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:a2:6a:63:e8:05:34:a7:bf:01:f7:6c:30:0a:a5:21:c8:
         a9:92:38:75:ec:84:e7:93:22:96:29:da:a0:c4:f3:e8:d3:76:
         0b:f8:17:f9:1c:d4:c0:36:ea:27:b8:e1:a0:42:8d:95:02:34:
         de:87:c4:3f:e3:82:a7:69:2c:c7:01:a7:e2:f6:24:06:7f:43:
         f9:2d:d2:08:c0:58:7b:2d:94:7b:94:57:a5:14:3a:63:0e:2b:
         b5:ba:f3:20:68:84:28:f1:d2:a4:de:89:72:39:a5:92:f2:3b:
         18:7c:88:46:13:9c:7b:00:51:de:1c:dd:9b:43:32:1e:62:db:
         7a:42:d9:94:07:ac:74:5f:c1:5d:8b:f6:80:1c:4f:cd:07:01:
         62:ae:a1:3a:05:4f:20:1f:a9:86:b6:83:5e:27:ea:49:26:61:
         a9:48:54:08:04:cc:3a:a1:0b:62:39:54:5b:dc:1c:ae:a7:ee:
         86:66:24:68:40:ff:be:1b:9b:12:49:2a:4f:be:67:21:8a:c0:
         4e:bb:0e:0b:e2:a0:49:cf:f9:c2:1d:5e:b0:30:5c:5f:a7:02:
         89:47:ee:0f:84:bc:30:6b:ca:ff:15:51:d3:ab:47:bb:e7:34:
         ce:22:1d:b3:2e:ae:16:c6:4b:bc:6d:e1:59:04:c0:8b:de:42:
         fd:e6:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:23 2026 by rpki-client