Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35392e302f32342d3234203d3e20323636333132.roa
File:                     3137302e3233382e35392e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          zAbWo4ZkRY8Etjc6tFYyLKqMEDea9xXxQNHgmcoAGO0=
Subject key identifier:   E0:CA:FC:CD:DB:54:64:68:E1:FE:3A:24:3B:7B:CF:44:71:7F:6E:AC
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       7B3B6D581EA1FD21226C9FC1DB8750E026F0097C
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35392e302f32342d3234203d3e20323636333132.roa
Signing time:             Thu 19 Feb 2026 00:03:59 +0000
ROA not before:           Wed 18 Feb 2026 23:58:59 +0000
ROA not after:            Thu 18 Feb 2027 00:03:59 +0000
asID:                     266312
IP address blocks:        170.238.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3b:6d:58:1e:a1:fd:21:22:6c:9f:c1:db:87:50:e0:26:f0:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Feb 18 23:58:59 2026 GMT
            Not After : Feb 18 00:03:59 2027 GMT
        Subject: CN=E0CAFCCDDB546468E1FE3A243B7BCF44717F6EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:18:73:e9:cc:b4:f0:ff:16:36:f1:60:e0:
                    24:d8:c6:9c:7b:30:13:e5:04:58:fa:f2:62:90:31:
                    45:53:42:cd:72:be:2e:fc:b8:a5:8a:27:15:a1:8c:
                    98:e4:49:50:98:8e:60:ba:75:e7:07:95:a7:bd:d8:
                    7e:9b:02:33:26:3b:8b:a8:3f:99:e1:0a:6f:b3:a5:
                    75:f9:8d:68:47:e0:11:ca:7a:4b:89:04:90:d4:5d:
                    b9:44:e9:c9:86:54:8c:97:98:a3:b9:1d:24:6a:07:
                    be:2c:63:fd:5a:02:87:98:8c:2e:ca:13:63:ce:d0:
                    f7:61:3f:16:0d:e6:e5:bf:26:1f:6d:ba:b6:d0:60:
                    00:2b:ec:e3:f4:03:82:f1:91:58:bf:c1:c8:cd:85:
                    d1:f7:0d:76:84:81:c1:da:05:62:73:a3:40:34:f1:
                    f8:17:b5:3d:2b:cc:24:6a:45:fd:22:6a:0b:50:6c:
                    7f:90:6c:7b:ee:19:e6:d3:45:76:a9:72:52:6a:a3:
                    1e:a1:f4:ea:0a:a8:80:57:8f:d6:62:73:42:a0:2c:
                    da:0f:c1:9d:f9:3e:40:11:3c:3b:4a:69:c8:76:1b:
                    7f:b6:fc:c1:97:e2:fa:c0:14:ce:b3:f9:8d:02:e0:
                    61:17:88:6c:ff:35:6d:cd:54:a6:71:ff:5d:a5:11:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:FC:CD:DB:54:64:68:E1:FE:3A:24:3B:7B:CF:44:71:7F:6E:AC
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35392e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:65:24:10:8a:fd:5e:fe:00:45:a8:a7:a5:90:0d:a4:ec:68:
         1d:df:c9:07:b9:b8:f9:44:30:6f:24:2e:d0:2a:3f:f0:80:1a:
         b9:2e:e0:3a:55:79:1c:b4:04:70:db:cf:75:e9:2d:e3:48:c8:
         cb:9e:63:c6:b1:39:cf:f9:07:18:2b:42:98:f9:eb:a7:92:13:
         12:92:6a:c0:46:1b:4e:93:e2:91:1f:f9:90:2e:5d:29:ee:96:
         f0:12:4f:74:c6:58:fa:1b:ee:2b:06:fc:66:ff:d8:50:af:ca:
         b0:d0:54:e0:5a:e7:db:b4:04:29:0d:f1:41:d6:62:dc:89:75:
         af:90:a8:43:92:5c:28:32:70:9d:3c:6d:84:35:3a:68:ee:0d:
         66:e7:f9:a3:fe:0c:34:7f:49:18:f4:00:89:34:e1:89:db:a8:
         60:2e:07:86:c7:a3:c7:70:c5:6d:9a:b8:30:10:b5:86:f3:4c:
         4d:54:b9:d5:11:c3:6e:ca:7e:99:9c:9b:39:d7:cf:fc:75:84:
         1d:14:14:ec:3a:cb:82:75:2a:f2:21:fe:26:20:34:86:a9:02:
         3d:0d:8e:7f:0e:81:f0:f8:2f:1b:13:c9:2a:49:58:5e:91:04:
         b6:34:4a:1c:bb:ee:a3:6e:71:d2:25:2e:91:d7:7d:a2:a6:09:
         d7:26:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:53:36 2026 by rpki-client