Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa
File:                     3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier:          eRzPhWKk++ItcTpD/lvHCU08nNtqAleiBW6uPe6pkwE=
Subject key identifier:   04:9D:E9:CF:B8:A4:FD:58:4F:39:32:CD:70:0F:72:44:CD:36:70:83
Certificate issuer:       /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial:       551836C7C638D2C6631AAB423FD25C4AF978C887
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa
Signing time:             Wed 21 Jan 2026 11:21:23 +0000
ROA not before:           Wed 21 Jan 2026 11:16:23 +0000
ROA not after:            Wed 20 Jan 2027 11:21:23 +0000
asID:                     271468
IP address blocks:        181.224.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl
                          rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:18:36:c7:c6:38:d2:c6:63:1a:ab:42:3f:d2:5c:4a:f9:78:c8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
        Validity
            Not Before: Jan 21 11:16:23 2026 GMT
            Not After : Jan 20 11:21:23 2027 GMT
        Subject: CN=049DE9CFB8A4FD584F3932CD700F7244CD367083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:7e:8f:59:22:ea:d0:1f:97:31:88:2e:eb:
                    86:37:66:7d:1a:cc:96:49:b0:1e:83:cc:ca:00:16:
                    8e:f4:1e:9d:2c:86:94:2b:04:43:c1:5e:c5:b2:67:
                    b8:65:8f:fe:f3:e2:71:a3:61:99:f6:a3:e3:92:7c:
                    10:cf:72:f4:b3:b9:1d:5b:ed:47:59:c4:41:ae:e1:
                    f2:7f:8f:4c:da:37:e8:ea:33:f7:e4:88:c7:3d:4f:
                    57:84:78:9e:22:ee:99:4b:23:84:81:43:21:a9:06:
                    84:b4:12:ec:a8:e1:76:05:53:cc:9b:51:a0:1e:6e:
                    01:46:28:f0:49:07:6a:a5:61:e3:07:aa:f2:dc:19:
                    95:c8:bc:e6:5d:f8:94:e6:e1:e8:c4:b0:f7:bb:7b:
                    d3:29:83:39:e3:d0:38:be:d8:04:1b:7e:0f:13:61:
                    e5:be:ff:ad:ca:c2:01:dc:33:64:2e:ed:f2:0a:aa:
                    e2:cc:fa:53:c8:ac:40:28:fd:c3:a8:7f:54:30:28:
                    c7:cd:c5:73:a9:c6:02:8c:db:83:e0:c9:fb:be:f9:
                    ec:45:d2:1b:0b:88:b8:f7:53:a4:d0:55:c3:73:d0:
                    c3:5f:d1:7c:0d:f0:4f:ae:9c:f8:77:2d:db:24:9d:
                    11:61:ff:71:e8:fa:a2:3b:0f:9d:37:fe:a5:5b:18:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9D:E9:CF:B8:A4:FD:58:4F:39:32:CD:70:0F:72:44:CD:36:70:83
            X509v3 Authority Key Identifier:
                keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31322e302f32342d3234203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a3:9d:94:8f:58:56:e7:99:3a:9d:ab:76:ff:da:22:07:4b:
         78:06:a3:2a:55:8e:72:0e:6f:f2:2d:e0:09:58:9a:7b:59:25:
         42:42:99:71:1c:3f:b7:90:55:cc:9e:19:23:31:f8:33:ef:c0:
         d1:eb:b8:83:b9:8b:ca:37:16:7b:ed:83:e2:6c:c5:18:81:d9:
         ce:aa:01:19:9f:b7:74:89:bc:23:55:3a:0c:19:56:41:f6:24:
         10:38:2e:ff:46:d2:54:fc:ba:8f:d0:ad:7a:f5:fa:31:0b:ee:
         82:d3:e4:d8:eb:bb:42:c7:5f:95:05:b0:85:f2:97:41:ee:f7:
         8f:f4:4b:55:a8:ea:d0:18:31:5b:06:b3:14:55:12:58:52:62:
         5e:39:ce:58:d4:dc:f1:19:f7:d6:82:b5:02:7f:fc:48:5e:68:
         2f:5a:db:a0:28:d8:8c:67:0f:f6:3d:19:96:08:96:36:09:3e:
         97:e5:15:c5:57:9b:04:e1:1b:ac:db:27:94:69:f8:61:2d:f6:
         e1:e7:3a:e1:85:cb:ca:87:c7:1e:99:30:3f:28:17:16:37:7c:
         40:3b:96:9b:c5:a6:f9:14:bb:17:90:e8:d1:34:8f:c0:4c:92:
         b9:1f:72:f3:fe:d9:4d:c6:17:43:ab:1f:a5:1e:16:c9:ca:04:
         7d:91:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:08:21 2026 by rpki-client