Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa
File:                     3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa (raw, json)
Hash identifier:          mRVFwUnXKa2TuGgkUUbDE8CKUaBmTfpM3SIENJ9vfow=
Subject key identifier:   F7:0B:2A:F1:D9:CD:D6:02:C0:23:23:BD:55:B6:AC:E8:51:F6:AD:15
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       5FADF057DE5DB37ED172EEF24D1E498ED5567130
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa
Signing time:             Wed 04 Feb 2026 20:40:15 +0000
ROA not before:           Wed 04 Feb 2026 20:35:15 +0000
ROA not after:            Wed 03 Feb 2027 20:40:15 +0000
asID:                     271562
IP address blocks:        181.174.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ad:f0:57:de:5d:b3:7e:d1:72:ee:f2:4d:1e:49:8e:d5:56:71:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Feb  4 20:35:15 2026 GMT
            Not After : Feb  3 20:40:15 2027 GMT
        Subject: CN=F70B2AF1D9CDD602C02323BD55B6ACE851F6AD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:1b:9d:8b:2a:06:37:ac:c8:32:56:06:76:
                    61:eb:81:73:c1:36:04:00:6c:cd:c4:7d:c2:2f:5b:
                    ab:e2:89:3b:11:64:f9:a6:9a:87:fe:a1:de:cf:3b:
                    59:89:0b:34:64:d5:da:3b:61:f8:82:5d:29:94:55:
                    b5:fb:10:bb:65:4b:b6:ef:b0:26:75:61:e4:9a:b8:
                    9a:5f:27:1d:57:a9:4b:65:03:ce:34:1c:46:39:7f:
                    1c:bd:9d:06:3f:9e:ab:61:bb:28:dc:fe:b9:9f:15:
                    2e:27:fa:ae:c8:ed:44:e6:5f:8c:37:2a:52:cc:04:
                    dd:28:c3:2a:43:e1:dd:c8:ac:88:20:d9:f3:35:02:
                    ad:44:4f:6e:bf:64:34:38:93:16:4a:19:f2:43:09:
                    89:f4:97:92:bb:cc:a9:e9:c1:71:5b:fe:97:6d:95:
                    1d:1c:5d:9c:86:cc:b1:aa:09:29:b2:b5:05:42:5b:
                    6c:4a:4a:ad:ef:fa:d9:e6:ac:44:68:28:46:d2:ff:
                    14:3a:aa:2d:0a:1e:95:2c:0a:cb:2a:e3:3a:65:23:
                    98:d1:b3:ff:3d:a0:ef:9e:a0:ff:fd:fc:bf:aa:2e:
                    94:29:4c:af:6e:80:c0:e1:78:f7:b1:74:6f:13:b3:
                    b3:2f:9d:a8:69:fc:90:1d:db:72:38:21:58:cc:9a:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0B:2A:F1:D9:CD:D6:02:C0:23:23:BD:55:B6:AC:E8:51:F6:AD:15
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32322d3232203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:e4:f9:f4:b3:98:e9:77:ab:e3:88:1e:7b:d0:83:14:3b:77:
         f9:54:8f:2f:e8:12:b8:8e:b4:f1:da:d0:eb:6c:57:d7:6d:d4:
         df:de:51:91:7a:56:97:56:f0:78:05:2f:d4:53:14:14:92:cd:
         a8:f7:b4:1b:1e:fb:90:f7:3a:cb:20:1d:f2:d9:f2:a3:36:a2:
         2e:99:ef:4a:a0:23:a7:dd:7d:b9:ab:7d:a8:88:ff:2a:b4:cb:
         00:66:58:fd:14:16:d0:1c:21:bd:f3:ea:77:04:84:bd:da:42:
         8d:f9:b4:dc:42:56:e4:62:ef:b8:c4:54:f7:e1:f1:a1:f3:19:
         79:c2:9f:a2:3b:27:5c:5e:6d:1b:bc:d9:b9:b8:d5:fd:4a:f5:
         f0:7e:15:60:3b:96:44:4b:73:41:69:39:fc:8d:bc:0d:04:98:
         75:14:d1:c7:f8:e9:32:89:b8:43:cb:ca:8d:b5:e1:f2:3f:4e:
         0b:2a:ac:e1:36:e0:e2:d2:b7:21:a2:87:3a:5c:73:35:85:90:
         ad:41:6f:06:a2:5d:17:2a:55:37:50:90:30:b7:d8:40:b0:72:
         be:af:4e:9e:e3:90:fa:d9:27:a7:df:27:36:25:5e:83:20:9d:
         4e:a1:5a:bd:77:4e:aa:49:20:8e:ec:af:52:2f:c1:8c:a9:00:
         05:d8:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:29 2026 by rpki-client