Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
File:                     3136382e302e39362e302f32322d3234203d3e20323635323334.roa (raw, json)
Hash identifier:          IpYA9y0ijIW/sEhUkgda/twmkTIFtNA/LEL/r5qvAfg=
Subject key identifier:   5F:E5:AD:F0:D5:5D:C8:3B:9B:16:71:09:77:BE:DF:1F:BE:0D:CF:2E
Certificate issuer:       /CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
Certificate serial:       331E531DFCCEB7238F0731D599ACC8797F3D9348
Authority key identifier: FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     265234
IP address blocks:        168.0.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl
                          rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:53:1d:fc:ce:b7:23:8f:07:31:d5:99:ac:c8:79:7f:3d:93:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:9c:1c:1c:06:3b:80:0d:c2:cb:08:f0:49:
                    4d:ca:26:9c:a9:08:10:c1:cc:dd:eb:7f:4b:1a:ce:
                    bd:b5:6d:24:c2:b3:d5:d7:40:b3:04:d7:ca:2d:79:
                    34:83:1e:04:c1:75:fc:8f:05:f4:6a:de:85:dd:03:
                    2c:fc:46:a2:10:63:9d:12:2d:44:77:84:28:b9:6b:
                    7f:b1:e4:a4:0b:f2:eb:9c:fb:8b:56:ff:61:d7:50:
                    76:84:2f:84:1a:8d:be:c5:c2:e3:01:d3:7d:fb:17:
                    6b:a1:4c:ff:ee:4f:9a:3b:42:67:8e:ca:83:fc:01:
                    28:dc:dd:ec:e2:0c:76:a8:a4:e3:85:f4:cd:91:c5:
                    f2:c8:fd:38:82:ba:1e:b7:e0:d3:be:cc:54:82:ae:
                    29:23:71:47:9f:f6:3d:ed:87:4d:e0:37:31:19:e5:
                    a9:61:15:c6:7c:22:4b:df:4b:0b:2f:62:09:d6:29:
                    d5:7f:eb:98:7c:07:a8:f8:21:38:08:43:0c:44:bf:
                    36:22:0f:49:bb:c4:0c:9e:ed:b9:a8:9a:91:a5:07:
                    da:f8:98:39:ee:44:be:59:63:2b:50:73:2d:33:15:
                    de:1e:be:b9:1a:96:2e:fb:9d:dc:fd:32:cb:f0:f4:
                    32:ea:e4:32:c1:c6:39:bc:0a:f2:d6:93:cf:ab:0f:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:AD:F0:D5:5D:C8:3B:9B:16:71:09:77:BE:DF:1F:BE:0D:CF:2E
            X509v3 Authority Key Identifier:
                keyid:FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/3136382e302e39362e302f32322d3234203d3e20323635323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:71:56:a3:4c:e5:46:cb:c4:7f:c4:0c:40:db:fb:c5:73:84:
         35:d4:03:36:08:8d:06:1f:f1:73:5d:fd:af:c5:04:eb:a7:1b:
         4c:59:b2:43:1a:90:ab:18:ed:f6:25:9c:d1:84:ba:6b:d0:e0:
         9a:5f:ae:4e:62:65:83:ce:00:b4:a3:f6:dd:69:0c:1c:42:e6:
         9a:ff:f1:22:b5:f3:f7:c4:07:29:db:5a:ec:42:e2:9b:75:4a:
         eb:ad:88:10:e2:ae:cd:25:67:9c:c5:d4:85:99:bc:b0:e3:cd:
         3f:e0:ef:39:ef:00:0f:a7:67:36:f1:c9:5d:93:ba:21:96:45:
         84:2b:45:c3:63:ff:a4:8f:e0:c8:7e:c1:bf:65:eb:c7:57:03:
         48:3c:c2:2b:0d:f4:bd:e8:b5:4f:45:d5:c2:76:c0:06:aa:e3:
         32:65:b6:0e:b2:63:27:fb:71:f0:0c:44:21:9a:57:a3:43:93:
         f0:f4:6f:46:af:54:6a:1a:53:7b:86:91:43:26:dc:12:2e:fe:
         b7:2c:27:c3:0e:09:68:51:13:e9:38:7b:2f:f4:cd:49:1d:e4:
         b5:0b:18:01:64:fa:bc:41:96:41:70:d0:dc:46:39:da:a3:80:
         50:31:43:91:1e:ea:f9:ed:b9:4f:8e:e4:6e:82:64:82:cd:85:
         69:7b:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:10:17 2026 by rpki-client