Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa
File:                     3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (raw, json)
Hash identifier:          gDlmEG5uvHQvzkpRw7Gei2QmAxZADD1kltUOqMZeNdk=
Subject key identifier:   B8:04:5B:64:A0:61:A4:2F:46:40:85:E1:3E:84:6B:29:06:06:8A:B2
Certificate issuer:       /CN=9B0FDA073951168EEB28943672D529AFE023A2B0
Certificate serial:       6BBC7F0AD05CA69434255FC84F906C3A61381B20
Authority key identifier: 9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa
Signing time:             Thu 05 Feb 2026 17:46:28 +0000
ROA not before:           Thu 05 Feb 2026 17:41:28 +0000
ROA not after:            Thu 04 Feb 2027 17:46:28 +0000
asID:                     271694
IP address blocks:        187.111.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl
                          rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bc:7f:0a:d0:5c:a6:94:34:25:5f:c8:4f:90:6c:3a:61:38:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0FDA073951168EEB28943672D529AFE023A2B0
        Validity
            Not Before: Feb  5 17:41:28 2026 GMT
            Not After : Feb  4 17:46:28 2027 GMT
        Subject: CN=B8045B64A061A42F464085E13E846B2906068AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:7e:b4:bb:07:5a:f9:96:6b:87:36:50:72:
                    2d:f8:25:63:ad:cc:30:7e:97:24:fb:bf:22:a4:b7:
                    4e:f4:12:80:80:69:09:23:18:a7:80:96:71:38:c5:
                    be:c8:ab:f2:49:2a:e8:b6:f3:4c:9b:69:77:10:c2:
                    13:41:55:95:73:e5:d0:88:71:fd:66:27:0d:f3:1b:
                    f0:c4:08:fb:e7:7e:43:72:9b:15:18:e1:7c:78:6f:
                    4b:57:b0:2b:22:03:bd:e7:3e:2c:cd:44:9a:e3:d4:
                    5f:67:b2:b8:b7:77:b8:23:c2:94:f9:f3:f7:ea:84:
                    35:e4:f8:c5:b3:83:7d:25:e7:72:ac:90:cd:28:98:
                    b9:cc:2b:c0:59:72:1a:70:aa:2f:59:5a:3c:6f:6c:
                    43:cb:7e:63:37:e6:35:36:7d:e0:2c:41:f7:0f:41:
                    b2:6a:96:e6:3b:8c:aa:2a:7b:11:20:23:86:59:cc:
                    16:ee:69:91:b2:f8:a0:0e:6b:07:cf:55:ae:5f:b1:
                    0d:69:dc:4b:9f:82:59:84:b8:e5:ea:cc:cf:26:6c:
                    d1:3c:c5:2c:14:8b:6f:db:07:71:df:8e:38:18:70:
                    47:98:05:f5:e0:64:18:16:cb:ff:c8:e6:58:1c:25:
                    12:ea:8b:1c:9c:bd:99:c8:05:10:0e:af:f1:8f:de:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:04:5B:64:A0:61:A4:2F:46:40:85:E1:3E:84:6B:29:06:06:8A:B2
            X509v3 Authority Key Identifier:
                keyid:9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:5c:46:81:6e:e3:ba:fc:55:95:7c:d3:2d:f0:97:7b:57:
         07:d7:30:48:01:1e:b0:9b:03:64:fb:97:95:ca:c1:3c:ce:5d:
         09:57:b6:7d:f5:68:0d:1b:54:df:42:b0:e0:f6:8d:93:83:eb:
         30:d4:3f:36:d9:7d:8d:47:4e:20:73:07:8b:00:72:fe:ce:2e:
         cb:08:d8:88:8a:8f:5e:29:6c:10:41:c0:66:65:5e:b8:c2:02:
         4f:ac:cd:6d:ed:4c:01:b5:d9:60:b7:58:07:e6:df:d8:ec:bd:
         ea:0b:5a:b7:38:2b:c1:27:18:1d:98:ec:e0:d4:21:6a:aa:7b:
         ed:5a:59:4c:f5:9f:af:ab:d5:ac:af:cb:8c:6a:06:86:1c:cf:
         d4:a5:d5:e5:7c:45:85:c9:cf:e6:1e:6b:ed:43:09:63:aa:60:
         62:82:f2:d9:1d:fd:fd:b5:f0:d2:8c:9e:e6:ce:c2:62:3e:e9:
         ce:00:a9:e6:94:4c:6c:9d:05:b0:ab:61:3c:5b:77:bf:53:04:
         8e:e2:2e:be:05:d9:30:95:4a:bb:d2:3c:08:b2:48:3d:0a:bc:
         db:38:5e:c1:19:9d:05:a0:68:5f:3f:15:5a:fa:87:67:f7:04:
         9e:12:ff:76:8e:8f:3d:a7:ed:27:c1:81:26:0a:39:58:b4:34:
         f7:78:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:02 2026 by rpki-client