Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa
File:                     3136382e302e3134342e302f32322d3234203d3e203532353630.roa (raw, json)
Hash identifier:          EXfg1zyAS5QS4k1a3VQNgUMFlositdELkBoUTBi0Sdc=
Subject key identifier:   6D:CA:0B:1D:03:63:06:33:5D:C8:FD:B0:D2:DC:B0:83:27:59:8A:5E
Certificate issuer:       /CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
Certificate serial:       19D59D2F199D472733A337CF3F6280FD6A40F7A5
Authority key identifier: 12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa
Signing time:             Thu 05 Feb 2026 05:26:04 +0000
ROA not before:           Thu 05 Feb 2026 05:21:04 +0000
ROA not after:            Thu 04 Feb 2027 05:26:04 +0000
asID:                     52560
IP address blocks:        168.0.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl
                          rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d5:9d:2f:19:9d:47:27:33:a3:37:cf:3f:62:80:fd:6a:40:f7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122355C7CE6C4B651C393D8619E964AD6CFEB76A
        Validity
            Not Before: Feb  5 05:21:04 2026 GMT
            Not After : Feb  4 05:26:04 2027 GMT
        Subject: CN=6DCA0B1D036306335DC8FDB0D2DCB08327598A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:41:f2:14:bd:14:9e:7c:c6:fa:41:71:60:
                    43:c5:78:86:38:a5:64:f2:00:d8:15:12:df:f9:57:
                    cb:81:e7:27:77:99:52:64:2c:ea:0a:6e:c6:84:fc:
                    c6:7f:49:92:80:ff:1e:28:7e:77:87:ec:54:ff:cc:
                    9d:49:e6:0d:be:99:7c:e9:df:82:8c:ea:1e:4f:8b:
                    6b:9f:12:53:7f:ae:91:b8:03:1f:94:47:9e:f2:95:
                    11:8e:16:89:c7:d9:34:aa:d3:ce:6c:5f:31:95:ee:
                    7e:3e:cb:df:c3:c1:71:96:8d:d5:c8:a0:91:82:a4:
                    fd:00:95:c5:cf:d4:ba:91:98:28:4a:86:e4:06:db:
                    9c:52:02:94:14:02:d2:73:d6:9b:86:ce:7c:ff:b3:
                    7e:a6:4d:6a:f2:17:02:7f:b7:49:f8:bc:6a:25:b7:
                    63:69:08:0b:cd:c8:78:e9:8b:b7:b3:5c:f0:a7:2c:
                    3f:74:71:c9:4d:9b:a3:a3:88:ca:da:ce:1c:24:f9:
                    65:85:f0:a9:a8:65:a7:06:e0:15:a9:39:7c:8a:0a:
                    f1:eb:85:3f:6e:06:fc:93:d7:82:8e:d7:2b:ab:ad:
                    67:83:78:c2:3a:1d:5b:f9:fa:f0:b2:39:21:f1:95:
                    55:3b:62:e8:9e:df:3a:13:a6:c0:f0:87:f7:57:1e:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:0B:1D:03:63:06:33:5D:C8:FD:B0:D2:DC:B0:83:27:59:8A:5E
            X509v3 Authority Key Identifier:
                keyid:12:23:55:C7:CE:6C:4B:65:1C:39:3D:86:19:E9:64:AD:6C:FE:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122355C7CE6C4B651C393D8619E964AD6CFEB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvnizDybwSScQTGAZYo5gKukuEvZKZtP36XPDDMpmqJ9/1/3136382e302e3134342e302f32322d3234203d3e203532353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:de:08:4e:e4:be:4b:3f:a6:cb:dd:c5:d6:50:ad:31:94:2b:
         e6:18:86:21:15:e6:e8:a1:af:e5:4e:48:e5:2b:25:98:16:a6:
         c7:2e:ae:5e:7b:99:74:e4:e8:d9:dd:62:6e:2e:32:43:19:e8:
         2c:84:fa:e4:78:14:ed:3f:f9:95:ee:4a:ab:b7:5c:66:c9:9d:
         b7:e4:d6:80:c0:8a:fc:c2:ce:ad:1a:85:f6:3d:c4:c2:19:ae:
         43:c7:32:a6:b8:c3:5d:b0:b0:66:ad:21:25:d3:d2:81:cd:81:
         81:d9:4a:21:c1:45:2e:6c:fc:82:c2:78:d0:e6:07:c8:1c:80:
         5c:7a:9e:b1:07:b3:2c:6c:30:93:09:96:c9:24:69:c7:96:fe:
         bb:f3:65:43:8d:77:61:00:3a:af:43:26:b4:86:3c:6a:cf:ba:
         72:4b:d5:bf:84:ec:86:df:64:c1:fe:e8:cf:fd:df:d8:38:ad:
         3c:da:04:85:5c:e0:a5:85:34:22:a3:de:46:51:2d:06:3d:4c:
         06:28:30:19:38:c0:69:4d:19:17:db:0c:23:eb:d9:34:6f:0a:
         8e:73:f9:2a:25:42:f0:0a:c8:f0:a0:62:97:bd:91:c6:01:b5:
         10:83:8d:5e:75:43:59:c4:d3:bf:36:b8:27:6a:f9:8f:3d:1b:
         d0:62:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:57:17 2026 by rpki-client