Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3235302e302f32342d3234203d3e20323633363239.roa
File:                     3133382e302e3235302e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          jBn0xrQnZnd7+pfxUSToSIJhfPhTI0FRRPZY06msNTA=
Subject key identifier:   D0:D6:8C:83:62:61:64:4E:1E:E6:B9:BB:B8:96:D6:8E:F0:F4:5B:E8
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       0FEB689B0EF4DD5A7B1B7E5CA3A9A27E33553814
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3235302e302f32342d3234203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:52:04 +0000
ROA not before:           Mon 16 Feb 2026 18:47:04 +0000
ROA not after:            Mon 15 Feb 2027 18:52:04 +0000
asID:                     263629
IP address blocks:        138.0.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:eb:68:9b:0e:f4:dd:5a:7b:1b:7e:5c:a3:a9:a2:7e:33:55:38:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:47:04 2026 GMT
            Not After : Feb 15 18:52:04 2027 GMT
        Subject: CN=D0D68C836261644E1EE6B9BBB896D68EF0F45BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:14:e3:d5:13:7b:52:bf:ba:26:42:af:4c:
                    10:1b:91:db:74:04:66:84:7f:62:f0:91:82:58:8b:
                    dc:5e:23:14:27:bf:19:e0:47:4c:84:6d:ad:7a:44:
                    78:6e:37:03:76:3d:4d:7e:0e:f9:ba:71:06:a6:52:
                    e9:ca:dd:4f:27:38:e4:96:57:25:dd:5b:22:5e:08:
                    ce:3e:ae:10:c8:f7:60:a4:13:14:28:15:eb:62:23:
                    6d:22:2f:a9:86:af:89:7a:6b:fd:c6:d3:67:fe:03:
                    60:5d:a7:73:66:a4:04:5b:df:fc:5b:d4:3d:dc:6e:
                    84:f7:f8:3b:b9:6b:3f:e7:2e:5a:ad:70:2f:71:0b:
                    9c:c4:35:5d:ec:c9:7b:52:b8:02:c5:11:f8:58:82:
                    d4:7a:df:c8:12:b1:d1:1c:71:92:5a:30:6e:cd:d9:
                    eb:17:cb:6c:c2:12:ce:04:68:dc:86:ee:21:65:22:
                    82:e6:91:ad:2c:ff:53:02:fe:20:7d:b2:e2:d7:db:
                    91:20:1a:4e:07:32:b0:87:c2:28:de:8e:d0:fa:66:
                    0b:b3:1c:96:78:55:ca:f5:3a:86:7a:b3:3e:1a:c4:
                    87:ec:15:07:ac:92:24:75:c8:35:7d:bc:77:5e:d7:
                    7a:2d:e3:14:fc:c8:b5:13:d6:53:52:1d:af:3d:72:
                    8f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D6:8C:83:62:61:64:4E:1E:E6:B9:BB:B8:96:D6:8E:F0:F4:5B:E8
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3133382e302e3235302e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:3a:9c:04:d9:33:a2:9a:bb:57:30:5e:9b:8a:c9:55:d5:
         0e:d4:b1:fd:16:22:90:75:46:91:b7:bc:48:c0:c4:38:a6:75:
         e8:d9:f7:83:dc:47:82:90:7c:3c:3d:19:bb:10:77:f5:f9:14:
         1b:81:a7:6f:b7:21:fd:80:1d:90:7f:32:c8:87:85:15:16:25:
         e5:19:12:8b:51:a4:c6:42:d6:98:4c:31:78:59:79:72:5a:00:
         03:d1:fd:71:62:d5:1e:bd:72:dc:7e:a3:2c:51:25:80:57:17:
         2b:c9:2b:47:1c:db:81:4c:7a:6e:0d:dc:e8:f8:85:9f:73:db:
         da:9a:dd:a4:ac:f1:f7:53:2c:bb:02:4f:fe:6d:ff:47:c6:5b:
         1c:44:26:4d:e8:a0:f8:0e:2d:e0:be:31:26:11:ec:ce:7c:bb:
         d7:ad:55:b2:97:bb:8c:df:60:37:84:8c:38:67:94:cd:a8:3b:
         8f:49:14:3e:80:0f:fc:de:9a:e6:d8:c3:46:b7:a9:22:c5:80:
         b2:fc:f4:b3:da:4a:b1:bb:5a:02:da:60:9f:3d:44:f0:07:70:
         a9:43:c9:09:d4:33:a2:5a:12:a3:b0:ea:c6:46:10:a6:68:14:
         61:d4:17:91:50:32:03:0f:ff:16:36:f1:24:86:96:7d:ef:77:
         b6:35:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:44 2026 by rpki-client