Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135362e302f32322d3234203d3e20323730393138.roa
File:                     3138372e3132312e3135362e302f32322d3234203d3e20323730393138.roa (raw, json)
Hash identifier:          fltFkyVM6EXuK0XVQGlRH7oIuoyXpuCQdlFZuaXSqTo=
Subject key identifier:   B8:7B:C2:CB:7C:CC:F6:63:5F:04:AC:47:1E:FC:FA:9C:FE:C2:94:4B
Certificate issuer:       /CN=F0763719F1BBB1F0459ED808E241AAFA7F43A27C
Certificate serial:       68B32748E9496393F8F20651A075508CB7EF8E5B
Authority key identifier: F0:76:37:19:F1:BB:B1:F0:45:9E:D8:08:E2:41:AA:FA:7F:43:A2:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0763719F1BBB1F0459ED808E241AAFA7F43A27C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135362e302f32322d3234203d3e20323730393138.roa
Signing time:             Mon 09 Feb 2026 21:26:40 +0000
ROA not before:           Mon 09 Feb 2026 21:21:40 +0000
ROA not after:            Mon 08 Feb 2027 21:26:40 +0000
asID:                     270918
IP address blocks:        187.121.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/F0763719F1BBB1F0459ED808E241AAFA7F43A27C.crl
                          rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/F0763719F1BBB1F0459ED808E241AAFA7F43A27C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0763719F1BBB1F0459ED808E241AAFA7F43A27C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:27:48:e9:49:63:93:f8:f2:06:51:a0:75:50:8c:b7:ef:8e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0763719F1BBB1F0459ED808E241AAFA7F43A27C
        Validity
            Not Before: Feb  9 21:21:40 2026 GMT
            Not After : Feb  8 21:26:40 2027 GMT
        Subject: CN=B87BC2CB7CCCF6635F04AC471EFCFA9CFEC2944B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:61:86:3b:49:1f:df:9f:35:c1:41:cd:fb:
                    de:cf:5b:01:5d:ad:36:47:54:bc:1d:b5:ea:8e:e6:
                    36:ae:4c:1c:c3:2b:ff:91:39:e3:85:2d:b5:63:6f:
                    1c:38:d3:62:c4:b9:70:fb:74:a5:33:80:49:f7:8e:
                    0f:ee:15:b8:ef:be:3b:23:08:5f:33:19:65:7e:b6:
                    dd:df:83:23:9f:10:97:48:68:ce:d7:a8:30:b0:d0:
                    97:88:69:88:03:d8:68:48:67:50:1e:63:52:ae:f2:
                    92:7c:a4:c5:72:91:23:ca:c3:f6:25:9b:a9:e4:b2:
                    31:21:72:96:d7:7e:6b:bd:51:8a:50:a3:9e:ec:e5:
                    9e:09:3a:91:ab:d5:9b:40:61:8b:a0:dd:5b:9d:09:
                    a8:24:77:f2:75:31:a9:f7:7d:37:eb:7f:bc:38:0a:
                    f2:3c:6e:cb:90:db:56:39:25:a9:73:c6:d8:e6:82:
                    8d:90:92:18:a5:6c:d5:8f:2f:45:5f:c2:15:4d:27:
                    34:1e:99:74:ab:35:07:40:ce:4b:4e:54:2c:3b:02:
                    4d:1f:79:c3:42:c4:3f:f2:27:24:91:75:75:8f:55:
                    95:31:21:26:97:27:85:40:cc:30:92:79:6c:c1:07:
                    16:51:cd:1f:8b:ca:a9:5b:63:af:a3:8d:6a:17:f5:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7B:C2:CB:7C:CC:F6:63:5F:04:AC:47:1E:FC:FA:9C:FE:C2:94:4B
            X509v3 Authority Key Identifier:
                keyid:F0:76:37:19:F1:BB:B1:F0:45:9E:D8:08:E2:41:AA:FA:7F:43:A2:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/F0763719F1BBB1F0459ED808E241AAFA7F43A27C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0763719F1BBB1F0459ED808E241AAFA7F43A27C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135362e302f32322d3234203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:52:dc:7a:4c:d9:f6:a8:ee:2d:f3:5d:cc:e2:a5:f8:06:
         1b:bf:28:dc:86:ad:10:a4:e1:2f:df:f4:c7:a2:09:36:a5:c1:
         f0:22:12:e7:33:88:91:c0:2b:65:5f:ce:d9:94:08:79:9f:99:
         61:57:ab:3c:79:8b:92:8a:13:46:e6:e9:9f:c9:5d:05:e3:68:
         a0:3f:08:15:cc:3c:8f:98:36:89:f9:d1:c4:52:61:51:92:32:
         16:4c:47:7a:2f:8c:81:94:25:c9:49:91:7e:fb:84:39:10:a2:
         d0:d4:e6:81:83:43:e1:60:83:94:c1:08:14:9a:38:df:5d:8d:
         86:92:35:9e:4b:5d:d6:b2:fd:42:d3:7f:19:ed:44:db:ee:fb:
         54:ff:84:cf:13:f2:d9:84:a3:65:b0:ca:2d:e0:c4:ef:8d:2d:
         31:06:ad:e4:6b:be:65:20:5d:58:37:f8:b0:5e:62:47:dc:b9:
         34:f0:16:1f:1c:b9:87:e5:0a:f3:a9:c2:84:a2:e3:26:26:14:
         f6:2d:03:e0:8d:94:ca:b4:9e:c2:42:20:ad:3b:f2:f0:17:6d:
         8e:70:61:35:8c:8c:eb:29:50:7c:c0:fd:68:27:7a:e3:1e:a8:
         e5:7b:d5:cb:59:d6:cf:e8:6d:d2:d5:a9:6c:96:2c:a0:be:a6:
         3a:cc:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:39:10 2026 by rpki-client