Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa
File:                     3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier:          Lbr9V50OJ9UG1IpEB2byuPZvZU7drYidJqfPvycCtYw=
Subject key identifier:   E8:09:2A:A1:1A:A6:D9:F2:FE:89:7E:C9:D1:47:68:00:97:33:BE:21
Certificate issuer:       /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial:       0533C2B93A7BF86EF15F9D39A3573DE9B5D3F729
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa
Signing time:             Wed 21 Jan 2026 11:21:23 +0000
ROA not before:           Wed 21 Jan 2026 11:16:23 +0000
ROA not after:            Wed 20 Jan 2027 11:21:23 +0000
asID:                     271468
IP address blocks:        181.224.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl
                          rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:33:c2:b9:3a:7b:f8:6e:f1:5f:9d:39:a3:57:3d:e9:b5:d3:f7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
        Validity
            Not Before: Jan 21 11:16:23 2026 GMT
            Not After : Jan 20 11:21:23 2027 GMT
        Subject: CN=E8092AA11AA6D9F2FE897EC9D14768009733BE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:e4:2f:ef:81:af:0e:fc:de:b9:70:98:0a:
                    cd:c9:62:6e:77:c0:db:af:29:63:fe:de:40:ad:c0:
                    18:00:e4:9f:2a:67:16:43:16:09:05:6b:18:73:0a:
                    39:45:47:81:bd:cd:cc:ea:b5:a2:a6:19:40:b5:5a:
                    9f:8b:c0:e9:e7:e1:3b:d6:d9:ea:53:34:e5:43:80:
                    bc:0d:e2:09:e5:e1:f3:00:8b:55:78:da:c8:94:6a:
                    25:49:c7:68:40:b2:0e:e1:36:ab:20:31:65:37:3d:
                    ff:67:d0:da:a0:2f:67:2f:9d:64:3d:be:07:d9:3b:
                    cd:e2:cf:2f:23:9c:59:e0:76:17:94:13:d0:b3:d7:
                    db:6d:4d:66:07:3d:3e:31:b0:b6:25:50:be:b3:83:
                    86:e5:af:01:7d:25:3e:39:c5:7c:8d:ed:75:ad:95:
                    8e:c8:cf:d4:df:b6:4b:db:fd:62:ee:62:89:7c:fc:
                    82:c0:d8:46:19:d0:46:16:d5:ff:94:17:f8:3c:7b:
                    6f:5c:05:4d:a9:40:3e:42:bf:59:66:04:a9:22:8c:
                    c5:9e:ac:69:67:38:e2:c5:8b:2a:39:a0:e4:51:27:
                    f0:15:85:d7:e1:bb:9e:17:db:0d:cf:3b:32:40:3e:
                    9e:ab:db:fe:87:44:f4:f2:14:c7:a1:b5:d0:66:b3:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:09:2A:A1:1A:A6:D9:F2:FE:89:7E:C9:D1:47:68:00:97:33:BE:21
            X509v3 Authority Key Identifier:
                keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31332e302f32342d3234203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:dc:27:30:77:4f:b8:96:c2:e5:3d:f9:d6:af:7f:5d:d0:0d:
         db:ef:88:54:8e:c9:1d:4f:85:5f:04:04:de:50:81:d1:2f:0f:
         8b:32:96:8c:e3:f6:fc:78:06:6c:70:24:86:a8:86:a1:c3:69:
         1a:5c:b0:e2:77:f0:5e:c0:b9:57:db:78:59:2a:40:7b:4d:1f:
         cc:11:15:89:01:e4:98:69:0a:8b:2c:9d:b7:22:f6:ca:ba:38:
         9d:ed:25:eb:e2:3f:c6:27:19:31:f0:3d:2c:f6:e2:c0:0f:fa:
         19:69:48:3e:2e:fa:d4:84:72:16:0c:6e:2c:0e:ba:82:ee:05:
         22:e3:bd:5e:a6:cc:c6:fc:37:f3:fc:33:1b:de:34:90:86:0a:
         df:69:ec:08:13:67:54:44:af:a7:e9:45:18:1f:c7:0a:bd:d8:
         7e:98:ee:da:f1:2a:59:f3:01:a9:a3:ab:29:ab:4c:39:a8:48:
         2c:85:e3:c0:1e:76:75:27:5b:81:57:2b:1e:3a:dc:cc:5d:b7:
         8e:4a:3e:78:ed:8f:89:21:e8:8b:9c:3a:11:5a:c0:f3:7c:6a:
         45:9c:83:a6:70:cf:89:cc:68:fc:8f:87:1c:d1:9d:20:3f:45:
         e9:f6:14:ab:f2:e6:53:09:f7:dd:0d:9a:f4:0d:5d:74:52:e5:
         f3:4e:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:10:16 2026 by rpki-client