Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3138362e32362e36382e302f32322d3234203d3e20323730393233.roa
File:                     3138362e32362e36382e302f32322d3234203d3e20323730393233.roa (raw, json)
Hash identifier:          ML47epr+BpH8xtAeDWrtTL74LrCvv+0dv5IOZTh7dJ8=
Subject key identifier:   88:F1:C9:10:36:85:77:8E:0B:D9:29:BF:55:2F:A4:6D:55:9C:2D:71
Certificate issuer:       /CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Certificate serial:       040AABE26E9D0095FB2100E487EB5BCA3F94EDF2
Authority key identifier: 3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3138362e32362e36382e302f32322d3234203d3e20323730393233.roa
Signing time:             Thu 05 Feb 2026 04:01:05 +0000
ROA not before:           Thu 05 Feb 2026 03:56:05 +0000
ROA not after:            Thu 04 Feb 2027 04:01:05 +0000
asID:                     270923
IP address blocks:        186.26.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
                          rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0a:ab:e2:6e:9d:00:95:fb:21:00:e4:87:eb:5b:ca:3f:94:ed:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
        Validity
            Not Before: Feb  5 03:56:05 2026 GMT
            Not After : Feb  4 04:01:05 2027 GMT
        Subject: CN=88F1C9103685778E0BD929BF552FA46D559C2D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:7c:87:90:39:ab:fc:a1:99:f2:dd:d5:cf:
                    9e:bc:e9:4b:b2:cf:01:8e:2b:6d:99:95:e8:6e:88:
                    90:ff:61:e5:89:ee:87:0d:ff:4c:64:87:1b:78:c0:
                    77:30:e3:94:20:96:35:63:fc:6b:32:bb:8b:d7:6f:
                    4f:53:e8:09:e8:d0:28:0e:73:02:f2:8c:74:45:a7:
                    f0:d8:68:03:ef:96:fa:15:d9:37:8d:8d:df:46:bb:
                    b7:f4:b9:99:07:23:3d:d3:4d:ba:de:cd:4c:93:f5:
                    4c:1e:40:25:0e:5a:79:a5:60:3d:f8:90:46:de:6f:
                    19:45:ce:26:4d:12:e7:0e:7e:1e:a3:dc:f0:d3:a4:
                    a8:0b:0a:6f:39:13:ef:d9:e0:14:26:25:d0:d5:dd:
                    0a:2c:47:b3:9e:e4:c9:c7:a3:99:57:6f:ec:8a:8c:
                    d9:83:9b:b4:ab:18:41:32:5d:db:f0:52:45:69:7a:
                    0a:4a:3e:52:2b:c1:29:67:46:64:2a:ad:93:59:d4:
                    49:77:9b:da:cd:55:0a:60:14:0c:86:71:99:ac:1e:
                    99:a6:54:70:a3:83:44:a6:04:74:80:6c:eb:93:33:
                    12:17:ea:6b:19:da:17:28:f1:92:4d:11:c7:29:cb:
                    1f:ee:20:2c:7d:ba:b7:a9:0a:49:77:f6:ed:7b:d0:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:C9:10:36:85:77:8E:0B:D9:29:BF:55:2F:A4:6D:55:9C:2D:71
            X509v3 Authority Key Identifier:
                keyid:3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3138362e32362e36382e302f32322d3234203d3e20323730393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:1c:9a:fd:39:f3:88:ee:4f:19:06:c9:d6:6b:6a:d4:49:e2:
         fb:28:7b:f8:bd:3c:a1:cd:d1:2d:ff:0f:00:b1:d1:df:48:8c:
         26:85:6c:a9:f1:85:0e:6c:02:b0:f9:3c:e2:84:13:fa:ec:e4:
         b3:65:dd:6f:6a:21:30:83:6b:b2:d5:e9:3a:04:af:e1:b8:87:
         f6:27:ba:5d:57:27:ad:93:4f:d6:ae:fe:53:38:ae:16:58:88:
         26:83:c1:ea:b7:ab:9b:c9:d4:0b:3b:6b:23:73:27:df:58:d5:
         04:03:42:72:73:3d:0d:30:ee:62:85:6c:be:6e:0c:71:f8:d8:
         39:97:b1:ad:57:35:0c:fa:dd:23:94:89:e8:fa:c0:42:80:2e:
         84:d3:b1:4d:a2:12:e0:02:38:33:b0:20:ba:75:11:ea:2f:7f:
         3f:6d:d2:0a:95:42:cb:63:3a:e2:69:c0:2b:f8:65:ac:f0:0a:
         b1:a3:1f:ab:c9:25:1f:da:c0:c7:fe:66:c5:dc:ae:6d:ce:fa:
         e2:75:fd:0f:67:83:37:de:b1:50:13:36:9c:58:c2:60:31:c3:
         91:56:45:51:bb:ac:2f:d3:8e:07:1a:69:60:e3:22:e0:a1:6a:
         2e:32:43:0c:48:b2:f0:05:76:28:d3:39:45:c0:c5:3a:c7:bc:
         e8:5d:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:24 2026 by rpki-client