Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          TxlG0812plpjPhvcX/d0Olltq3zIPufdkiSuAoXprqk=
Subject key identifier:   FC:7C:A1:AA:86:5E:16:A2:3B:1D:78:F2:9A:09:0D:99:5E:20:9B:DE
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       44E4C6F3C8954EDE76C55BC16CA18D88353A7B8F
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     266535
IP address blocks:        160.238.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e4:c6:f3:c8:95:4e:de:76:c5:5b:c1:6c:a1:8d:88:35:3a:7b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=3082010A0282010100D7349DC9FFDF34D11CA7BE71C068AA3B5DFFB820B309788BEBA8EFF6B966821FF2A8999490BBE195A790C857AF8E53F0CF31B8A0D6616C9FC9ACFE28F220A5F42A2FF782D93116E069732332AB30AD6D42D1B51E02AC0B8FD17F08ADB14CE7E04631E7E09F5BDF2FA8264A6116003B1511712B30D8F7696A3935F4527D894751C88F0FE46F55B988FF69E942B5164F89D2770C9A6459A76645278FF5D8E9573D262897A31C60E259DD216ACDF98DC5CFEA4AFCED77B61257D23A65D91C2134257F8A4A5B4E0B90D1D09E6016A7FF101AD633C3286F8DE67619CAF4A5CDC8021121AF605E5FCC92FC3ED6D43C5DD2FC7C803A520353FA7004684D2AA71524649B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:9d:c9:ff:df:34:d1:1c:a7:be:71:c0:68:
                    aa:3b:5d:ff:b8:20:b3:09:78:8b:eb:a8:ef:f6:b9:
                    66:82:1f:f2:a8:99:94:90:bb:e1:95:a7:90:c8:57:
                    af:8e:53:f0:cf:31:b8:a0:d6:61:6c:9f:c9:ac:fe:
                    28:f2:20:a5:f4:2a:2f:f7:82:d9:31:16:e0:69:73:
                    23:32:ab:30:ad:6d:42:d1:b5:1e:02:ac:0b:8f:d1:
                    7f:08:ad:b1:4c:e7:e0:46:31:e7:e0:9f:5b:df:2f:
                    a8:26:4a:61:16:00:3b:15:11:71:2b:30:d8:f7:69:
                    6a:39:35:f4:52:7d:89:47:51:c8:8f:0f:e4:6f:55:
                    b9:88:ff:69:e9:42:b5:16:4f:89:d2:77:0c:9a:64:
                    59:a7:66:45:27:8f:f5:d8:e9:57:3d:26:28:97:a3:
                    1c:60:e2:59:dd:21:6a:cd:f9:8d:c5:cf:ea:4a:fc:
                    ed:77:b6:12:57:d2:3a:65:d9:1c:21:34:25:7f:8a:
                    4a:5b:4e:0b:90:d1:d0:9e:60:16:a7:ff:10:1a:d6:
                    33:c3:28:6f:8d:e6:76:19:ca:f4:a5:cd:c8:02:11:
                    21:af:60:5e:5f:cc:92:fc:3e:d6:d4:3c:5d:d2:fc:
                    7c:80:3a:52:03:53:fa:70:04:68:4d:2a:a7:15:24:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7C:A1:AA:86:5E:16:A2:3B:1D:78:F2:9A:09:0D:99:5E:20:9B:DE
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:4f:28:67:87:81:f8:54:85:da:d2:ec:d7:30:9f:27:80:56:
         47:c5:f5:7c:05:b9:f9:89:d6:e3:76:22:b2:db:02:c1:e7:44:
         10:20:c3:ee:c8:27:6a:f5:b4:a7:c6:bf:f8:15:9a:12:f2:97:
         24:9e:3b:f5:14:54:37:b7:0e:3c:80:27:21:c0:3d:3e:f1:bd:
         2c:db:f6:fc:14:17:03:20:19:7a:18:b5:8a:d8:50:ff:6b:c3:
         b5:02:80:e5:50:83:4a:8e:0e:75:9f:d8:52:39:19:e7:19:1e:
         88:9a:4a:23:2d:5a:cf:48:45:b0:0b:d6:c4:18:a0:c4:2e:76:
         01:55:40:36:ae:8b:ad:31:2c:96:6d:41:da:9f:fe:bc:3d:6c:
         bc:4e:11:e1:b3:08:af:7e:30:b3:ce:81:bb:a6:dc:61:84:d7:
         d5:06:89:75:06:50:f7:26:66:9f:83:43:ed:91:28:3e:f4:37:
         7b:6f:b5:47:35:0e:a4:11:56:d8:e9:17:58:74:f8:f8:ab:b8:
         05:b1:53:76:70:e9:c2:05:2b:3b:50:7a:61:d6:e1:df:a5:aa:
         59:11:bf:63:f2:40:75:ab:a6:20:54:e9:f3:cd:93:a2:e0:92:
         f5:dd:8a:6f:c1:95:ec:b1:da:d2:08:9a:78:1d:46:18:b2:d6:
         52:ac:37:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:06 2026 by rpki-client