Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
File:                     3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (raw, json)
Hash identifier:          FwqDMyxYRdiFWlyjZ8rcVzPZ7GUj8ZiCNOYnjhKdwoA=
Subject key identifier:   94:E8:27:F3:6D:AE:8A:41:F8:8F:EB:90:A0:00:C5:38:33:F4:C0:A3
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       107513FEFCB9C524E863C0795A2F48B995BCC935
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
Signing time:             Thu 05 Feb 2026 13:03:52 +0000
ROA not before:           Thu 05 Feb 2026 12:58:52 +0000
ROA not after:            Thu 04 Feb 2027 13:03:52 +0000
asID:                     266312
IP address blocks:        170.238.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:75:13:fe:fc:b9:c5:24:e8:63:c0:79:5a:2f:48:b9:95:bc:c9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Feb  5 12:58:52 2026 GMT
            Not After : Feb  4 13:03:52 2027 GMT
        Subject: CN=94E827F36DAE8A41F88FEB90A000C53833F4C0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:2b:ae:ee:2e:e0:8f:b9:2e:34:f9:e5:34:
                    71:c0:ff:4c:1f:f5:d0:18:8e:f7:a7:34:39:09:c5:
                    57:5e:42:a9:6c:9c:fd:07:b2:30:33:ca:93:1b:53:
                    14:85:4d:eb:b4:ca:e8:e2:7e:0d:2e:cb:1a:56:38:
                    52:25:ad:39:0b:67:b0:2a:ef:56:ca:35:b2:a2:78:
                    49:79:77:e2:6a:a8:0e:92:44:f7:b0:eb:6d:61:68:
                    1e:09:bc:72:ac:dd:68:22:e6:83:a7:a9:80:ab:a0:
                    0c:67:2e:be:a4:e6:60:34:32:8a:bf:c3:fd:60:8f:
                    57:1a:01:c5:d9:fb:c1:27:b1:68:1b:7e:09:e6:4c:
                    86:0c:10:38:72:6d:65:b2:f9:10:8e:ca:b6:17:62:
                    3d:64:30:eb:15:96:e5:f5:55:5f:70:f3:c1:4e:9b:
                    0a:6a:84:15:51:b1:c1:fb:3f:3f:d7:fa:29:66:cd:
                    30:80:0c:32:7c:a9:03:9d:48:42:91:ec:3d:48:12:
                    1c:ee:b5:75:4d:16:88:8e:e2:15:03:0c:90:11:2d:
                    3e:10:81:b5:6c:c0:bc:e2:9c:01:6b:1d:2f:7f:52:
                    31:72:08:db:93:70:63:26:f7:9c:b8:72:f6:98:c0:
                    8b:86:29:7a:32:74:02:1a:dc:cb:1d:52:1d:4c:d6:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:27:F3:6D:AE:8A:41:F8:8F:EB:90:A0:00:C5:38:33:F4:C0:A3
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:3e:f5:32:4e:b1:6a:63:f7:33:f4:d5:19:ef:a4:71:72:ed:
         2e:88:a3:3f:53:79:a7:b5:04:7f:3c:42:88:61:b2:75:dc:c7:
         35:7c:89:d2:6e:a7:35:69:ab:13:0f:9f:6a:e9:3b:7a:ec:4a:
         29:5d:01:8e:54:e5:6c:51:6c:6a:7f:a6:97:bc:26:d8:fa:03:
         31:eb:d6:7c:69:42:5a:e3:34:cf:55:22:60:66:56:e6:70:05:
         8d:f5:2e:35:2d:20:b2:19:b4:90:54:51:3e:6c:e1:80:fc:7f:
         d0:42:e4:11:94:cb:c7:5e:9a:ae:55:5f:ba:a2:16:b3:64:86:
         1c:59:e7:53:4d:91:fe:9a:7f:6b:1d:b3:82:86:e7:fd:b4:d4:
         6c:0e:f2:f1:e2:40:13:5e:54:d9:23:e7:96:07:39:af:2f:ed:
         ee:3a:21:76:66:57:19:82:7c:b5:b7:c4:bc:fb:e9:5a:0e:49:
         5c:c0:8d:39:e5:aa:82:c2:2d:d3:8f:ec:fc:28:29:bb:88:20:
         64:f6:24:c4:03:ef:9c:42:4b:84:24:d6:97:ca:58:6c:e1:be:
         5c:7e:af:c1:0b:29:c0:1d:19:4b:af:e1:bb:02:21:de:f8:00:
         9c:e5:f7:73:8e:4e:12:bf:6e:b8:ab:05:ef:e5:08:8c:88:d5:
         fb:d4:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:56 2026 by rpki-client