Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa
File:                     3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa (raw, json)
Hash identifier:          nurs5DLuxK0Xh+Ap9+ohZHjwnfkeI+nYvp/oNBqMi3U=
Subject key identifier:   B8:2E:16:C1:01:9A:EB:B8:38:88:DD:06:91:9B:E9:30:2B:9E:41:C8
Certificate issuer:       /CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
Certificate serial:       661E5615C5F46CD78C87DB4C216BFC9F415DC4EF
Authority key identifier: FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa
Signing time:             Wed 04 Feb 2026 23:25:56 +0000
ROA not before:           Wed 04 Feb 2026 23:20:56 +0000
ROA not after:            Wed 03 Feb 2027 23:25:56 +0000
asID:                     28215
IP address blocks:        189.113.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl
                          rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1e:56:15:c5:f4:6c:d7:8c:87:db:4c:21:6b:fc:9f:41:5d:c4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E
        Validity
            Not Before: Feb  4 23:20:56 2026 GMT
            Not After : Feb  3 23:25:56 2027 GMT
        Subject: CN=B82E16C1019AEBB83888DD06919BE9302B9E41C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:2f:06:e8:78:25:e4:60:20:87:f4:b3:b4:
                    a9:17:10:f9:a7:50:7f:da:64:50:89:16:8d:a8:36:
                    4a:ca:91:7b:a0:2e:c7:0e:7b:38:9f:8b:8f:0c:c4:
                    0b:f3:ef:7d:ad:5f:cd:5f:86:31:a4:f9:ba:b7:40:
                    f4:40:ef:69:62:4d:6d:37:59:52:aa:e2:48:06:2e:
                    0c:6a:e3:67:ab:02:08:81:86:11:3c:99:6c:e3:36:
                    54:4f:a5:c9:b6:33:83:4a:60:77:b8:84:08:43:29:
                    f2:1b:fa:31:5a:00:9f:45:45:5f:ed:12:35:e5:c5:
                    59:1f:62:c2:41:4f:b4:4d:28:44:7f:42:5f:b3:57:
                    28:31:28:63:07:df:e4:e9:2c:1a:50:59:50:5d:7b:
                    d8:4a:82:33:02:37:65:69:f0:04:44:b4:d6:80:1a:
                    58:e2:e2:9b:0b:44:81:3e:3b:28:26:5c:ab:fe:1d:
                    98:2f:94:8b:9d:b4:39:d9:12:e7:89:87:d8:1e:ca:
                    39:57:da:82:19:32:a5:4d:51:46:5c:99:d3:d3:31:
                    40:a3:75:36:57:51:6f:d2:73:6c:e3:2b:d8:55:37:
                    91:0b:50:f2:29:58:b8:6e:2e:67:92:95:4f:18:51:
                    8c:b7:99:15:de:74:79:c7:bf:59:2a:a8:a7:f9:07:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2E:16:C1:01:9A:EB:B8:38:88:DD:06:91:9B:E9:30:2B:9E:41:C8
            X509v3 Authority Key Identifier:
                keyid:FB:BE:40:BD:3F:7A:6B:58:9C:65:2E:CA:E9:F7:DC:C1:C0:64:E1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBBE40BD3F7A6B589C652ECAE9F7DCC1C064E18E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwU4DDHLNcqper4v9yxamLtnw2Tq9NXCaNitJXCA42Y9/1/3138392e3131332e3134342e302f32302d3234203d3e203238323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:97:07:17:0d:d3:19:e1:49:78:61:0d:7a:74:12:ad:25:bc:
         6c:10:26:c7:11:c5:b6:f8:d0:81:16:dd:40:b1:15:f0:71:79:
         93:c5:af:60:2f:8b:14:d7:cf:a0:56:fa:7d:e5:a0:6c:11:65:
         6d:3f:3c:b3:e0:92:56:01:10:7d:48:00:b1:d3:78:d2:13:95:
         b7:5c:47:2a:63:51:ad:33:98:97:66:d0:7e:18:8e:33:a5:a9:
         fc:2e:82:64:2d:a9:a7:bf:b2:04:85:05:a3:44:0b:30:2f:61:
         65:59:22:d9:55:8e:d7:84:36:bc:32:02:7b:44:12:6e:2c:b3:
         3b:20:06:1f:12:72:fa:8d:cd:46:91:8e:a8:31:8c:d2:f0:15:
         f0:f5:03:28:63:b5:17:95:26:e6:4f:f1:7d:37:4e:28:ca:c9:
         45:75:88:58:e8:1b:94:da:0b:c8:fd:dc:03:87:28:a9:8f:e3:
         79:39:6f:7a:ce:59:3e:79:52:37:14:b8:fb:ee:16:ad:a5:dc:
         3e:ef:7e:9d:33:5e:67:d9:20:d4:69:02:7c:0c:c8:4c:5b:69:
         b6:cb:53:1c:95:6a:a4:6c:a0:a5:bc:04:9b:02:e6:c1:21:5f:
         bf:47:19:f8:91:bd:6c:6f:d2:5a:62:fa:7d:dd:77:fa:1c:af:
         2d:0c:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:52 2026 by rpki-client