Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa
File:                     3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          wkhkgGTL9dFvLeHbUF+2dYgQFYjNivfICInGI3gCPSo=
Subject key identifier:   21:51:E5:AD:3F:63:69:66:CA:28:87:A4:88:F7:2C:5C:7D:94:FB:DD
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       08BFEFA0C456D1DF57E46A2244CAD0F070C00F8D
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa
Signing time:             Thu 05 Feb 2026 08:46:17 +0000
ROA not before:           Thu 05 Feb 2026 08:41:17 +0000
ROA not after:            Thu 04 Feb 2027 08:46:17 +0000
asID:                     267357
IP address blocks:        131.196.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bf:ef:a0:c4:56:d1:df:57:e4:6a:22:44:ca:d0:f0:70:c0:0f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Feb  5 08:41:17 2026 GMT
            Not After : Feb  4 08:46:17 2027 GMT
        Subject: CN=2151E5AD3F636966CA2887A488F72C5C7D94FBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:02:04:6c:55:e8:e1:8f:e6:7f:96:dd:ef:
                    ca:10:b7:31:6e:a9:4b:00:e9:d1:60:f3:05:9d:50:
                    e0:43:35:10:eb:2b:76:64:35:0a:0c:51:ab:d4:f2:
                    b9:9c:4f:7b:aa:c3:db:30:d6:7a:de:5a:46:1d:26:
                    e9:2f:05:21:76:40:2c:02:52:37:2d:2e:54:74:fa:
                    4c:d4:97:08:1c:22:3d:b8:b6:4f:8f:85:88:e9:83:
                    11:ba:00:0f:4a:eb:f7:95:9b:f2:c8:db:d5:fc:80:
                    72:bd:e8:ef:2d:23:e2:31:64:cd:e2:ea:bd:20:e6:
                    c2:16:b6:58:0e:c2:21:f8:46:7e:b1:dc:23:f2:08:
                    e7:35:4a:d0:a0:b7:8a:2b:0d:da:c5:28:4b:e4:9b:
                    48:6a:3d:3f:cd:60:8d:eb:34:ec:81:5e:27:3d:08:
                    d2:e4:73:db:c5:32:17:5e:07:09:14:00:f0:83:05:
                    b4:11:45:93:d1:ad:17:53:83:75:b7:90:48:62:b4:
                    ef:aa:f2:c1:18:04:b9:ab:03:78:8a:47:c4:cb:7c:
                    c6:9a:35:aa:ae:89:52:ba:7c:40:eb:b8:e0:53:5e:
                    10:ba:01:fb:08:b8:19:54:84:06:f6:c9:dd:80:31:
                    62:ed:ef:e4:86:72:99:52:fb:6c:aa:e9:4f:0e:c0:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:51:E5:AD:3F:63:69:66:CA:28:87:A4:88:F7:2C:5C:7D:94:FB:DD
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:a7:0b:43:4a:e8:8f:d5:3b:2f:2b:90:4f:8d:07:01:cf:
         99:7d:d1:15:6d:d0:4b:2e:d3:80:2d:ef:f0:65:6d:48:3e:ed:
         18:d5:b2:d3:10:ef:95:af:74:cb:65:f0:b6:9c:69:57:e1:8f:
         48:05:88:6d:f0:f4:08:af:e1:e2:5c:6e:b4:28:ad:2d:9b:ce:
         85:72:19:3f:d0:a1:14:e5:f7:6d:60:0a:66:cd:b3:12:30:15:
         af:e5:ad:5b:14:40:f1:6c:61:7e:32:a2:76:23:b1:fc:06:3f:
         dd:20:26:9d:33:e2:47:56:d3:f7:59:50:a1:7e:57:c3:90:af:
         d8:42:53:d2:25:b3:b4:97:94:b7:c9:ba:f9:11:28:d3:87:b7:
         ef:26:fa:e0:67:77:3b:0a:78:d5:61:7d:72:9a:0b:b9:50:94:
         90:62:1d:5d:07:85:b2:26:fe:c8:59:58:9e:61:cc:1d:1c:40:
         70:a2:88:5f:ca:52:39:26:2e:fd:1f:60:ff:00:fc:29:57:ab:
         b0:17:8b:da:46:67:9b:81:4f:67:c6:ed:ab:dc:3c:f3:81:48:
         d9:ba:e8:40:b8:08:96:92:41:fc:5a:15:91:38:bd:93:b8:32:
         81:8e:27:3e:8a:e7:25:54:5f:d1:77:05:9a:b6:a9:6e:ae:dd:
         31:92:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:06 2026 by rpki-client