Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
File:                     3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa (raw, json)
Hash identifier:          R+0RoRwLxz1U1rCLr95bzVTyQmKim6EItc3lETPKhyw=
Subject key identifier:   3F:69:A5:E7:5C:E0:8B:89:1C:2A:C3:03:2B:5F:04:D4:1A:80:BF:57
Certificate issuer:       /CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
Certificate serial:       58B4B7728BB0B4CEB000CAF6ACEA54EB6D5D2C3E
Authority key identifier: C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa
Signing time:             Thu 05 Feb 2026 19:34:22 +0000
ROA not before:           Thu 05 Feb 2026 19:29:22 +0000
ROA not after:            Thu 04 Feb 2027 19:34:22 +0000
asID:                     40356
IP address blocks:        189.126.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl
                          rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b4:b7:72:8b:b0:b4:ce:b0:00:ca:f6:ac:ea:54:eb:6d:5d:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9
        Validity
            Not Before: Feb  5 19:29:22 2026 GMT
            Not After : Feb  4 19:34:22 2027 GMT
        Subject: CN=3F69A5E75CE08B891C2AC3032B5F04D41A80BF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:5a:e7:13:f6:f4:9f:c3:0e:ce:d2:03:6d:
                    a9:28:65:e9:fe:19:63:27:b4:49:c8:a5:5d:6a:0b:
                    dd:be:d8:40:14:b5:e0:7d:cf:34:f5:5d:fe:f6:09:
                    f6:dc:3c:cd:0b:63:17:e9:5b:7b:06:bf:89:63:17:
                    3d:db:f5:6d:14:85:fe:6e:78:62:51:35:2b:40:ca:
                    f0:34:00:b7:8f:99:66:c6:a7:48:5a:f9:5c:8a:fa:
                    03:45:17:a1:29:dd:4b:d4:af:72:50:27:50:d7:8d:
                    1c:10:aa:b9:dd:89:83:43:63:06:30:bc:6b:c9:d5:
                    fb:5a:00:14:29:f0:7e:35:85:6a:9f:05:9e:bd:b5:
                    5b:ff:09:2f:26:cd:59:b4:85:a8:50:cf:fc:ce:6b:
                    8c:e6:04:2d:c4:91:12:94:95:f8:0e:b4:1b:14:1b:
                    30:03:71:11:73:b4:ce:94:05:bb:e5:cc:b7:34:e5:
                    fa:97:4d:5a:f4:1f:e7:da:19:e5:80:0b:43:cf:b4:
                    52:ce:42:92:07:95:6d:13:d5:74:7e:7a:58:4d:6d:
                    09:80:66:db:f0:a8:e5:11:4d:e8:50:d4:a7:19:a0:
                    79:25:c0:4f:01:4d:1d:d3:2d:91:33:75:9d:07:85:
                    fd:46:b0:b6:f7:86:ed:5f:e2:0f:84:11:a3:08:86:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:69:A5:E7:5C:E0:8B:89:1C:2A:C3:03:2B:5F:04:D4:1A:80:BF:57
            X509v3 Authority Key Identifier:
                keyid:C9:C8:FE:4C:4B:95:AA:80:D3:B7:3D:CD:13:6D:A1:E1:B8:36:56:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9C8FE4C4B95AA80D3B73DCD136DA1E1B83656D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DpbK13TzqdWKfXprMDHHx9KZCJ6wvvYG2GdNtfpfDbXP/1/3138392e3132362e3133362e302f32342d3234203d3e203430333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:b0:d9:0a:a3:a7:84:ad:83:4c:46:e1:bb:1f:8d:3f:5b:
         90:8f:c7:ff:c8:e2:e3:20:82:98:44:c9:db:bd:55:83:de:da:
         77:de:73:29:5d:70:0e:9f:51:5d:a7:8c:7d:e7:5e:b9:f7:ad:
         17:24:71:35:f8:3f:68:6f:0b:68:69:11:03:db:2e:d9:39:37:
         8a:a6:76:5d:ac:2e:44:bb:f5:63:06:3a:5f:e2:b7:b7:b6:08:
         aa:50:5a:2b:a3:16:63:08:0e:e8:9f:be:09:c1:80:3a:8c:b2:
         09:4b:a3:8e:90:6e:e2:15:3a:4b:62:97:5e:30:65:a7:d5:c5:
         4b:3f:3f:30:54:bb:e7:e0:b0:13:c9:c4:8d:65:71:7b:a0:01:
         8a:c6:7e:d5:3e:bf:d5:cc:8f:67:86:d4:5a:91:b5:e0:fb:f8:
         35:ce:e5:48:a4:13:08:62:75:47:5e:15:8e:66:db:53:dc:f9:
         ae:36:b3:b6:47:1c:51:ed:97:ba:0d:ef:ef:9e:71:11:fb:78:
         05:af:87:a7:b1:cb:f4:cf:7a:79:df:86:6d:0f:e1:d5:75:b2:
         e4:cb:9b:17:5f:e9:79:a0:cc:d8:70:64:5c:17:de:81:78:de:
         0f:95:a1:34:aa:cd:f9:c6:f5:e3:e0:fa:39:b0:e1:d1:30:ca:
         9e:22:90:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:31 2026 by rpki-client