Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          Mpe5/idJmRp1cNXJYCyARrtABVfhbdPKne04ORvkzmY=
Subject key identifier:   AB:F3:1B:50:7D:AA:F6:5D:39:AC:A4:B3:A8:B8:F0:F4:7B:1F:25:6C
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       0E870D57632710084AC2FD02C6C4447D90BF9E6F
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
Signing time:             Mon 09 Feb 2026 23:33:22 +0000
ROA not before:           Mon 09 Feb 2026 23:28:22 +0000
ROA not after:            Mon 08 Feb 2027 23:33:22 +0000
asID:                     266535
IP address blocks:        160.238.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl
                          rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:87:0d:57:63:27:10:08:4a:c2:fd:02:c6:c4:44:7d:90:bf:9e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Feb  9 23:28:22 2026 GMT
            Not After : Feb  8 23:33:22 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7e:0e:8a:f0:ae:91:89:38:88:3d:d9:ab:58:
                    59:a0:f7:db:90:58:ee:ea:fa:49:d8:74:71:5b:cf:
                    cc:a3:e0:bb:84:a2:c9:f1:5c:e3:98:d0:24:e9:e3:
                    65:33:84:9b:00:eb:85:60:7b:1c:27:bf:80:e8:4b:
                    b8:4d:d5:e7:d7:0c:ba:17:ad:16:87:db:e4:19:14:
                    fd:10:b4:ab:63:12:aa:28:99:8f:3b:0e:8d:96:51:
                    f9:df:af:26:d6:ef:ef:30:39:5f:5e:e6:bd:01:ba:
                    ad:77:d3:34:ee:b6:dd:88:23:d4:11:7d:f1:b7:a4:
                    87:1a:00:b8:45:b2:3e:42:d5:89:b6:9c:73:c9:8b:
                    9b:ae:61:ba:ec:62:fa:c1:c7:8f:12:3b:7f:36:a8:
                    dc:72:b6:45:96:65:12:d3:f0:35:44:1e:b9:a4:4b:
                    1e:dd:20:f6:7e:6d:2d:50:43:32:96:7e:45:ed:99:
                    dc:e9:b3:38:84:54:34:c2:92:ae:a9:d8:eb:72:80:
                    15:09:6f:81:5d:ed:eb:90:63:12:15:c4:b3:9d:87:
                    40:7a:27:06:32:d8:3f:bf:29:8d:cd:b4:48:61:7c:
                    cd:99:34:7c:e3:23:c6:d5:9b:0c:27:01:61:d6:ea:
                    81:75:c2:70:9d:5a:e2:0d:16:12:e1:6f:1e:36:2c:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F3:1B:50:7D:AA:F6:5D:39:AC:A4:B3:A8:B8:F0:F4:7B:1F:25:6C
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e7:8d:66:1f:3a:88:4d:ad:e0:69:36:ed:63:c8:43:01:95:
         37:41:70:41:d3:c7:95:44:09:3c:60:7c:1b:57:07:01:4d:78:
         c0:de:e9:3c:65:fb:e6:fe:c1:48:0a:77:fb:aa:99:09:33:51:
         6f:72:81:5b:9d:97:5f:e7:cf:dc:da:bb:c4:dd:ad:6c:09:60:
         32:f2:49:48:d2:e5:84:94:89:13:30:9f:a8:7e:f0:87:74:63:
         d3:e0:92:ea:a7:d3:97:3f:40:e7:b8:29:63:01:ed:09:83:a9:
         f2:ff:63:15:0b:21:d2:50:f7:b3:b3:3d:1a:e6:54:72:a2:6c:
         1d:9a:7e:78:59:c4:fd:5d:dd:be:47:a6:23:89:32:64:b7:64:
         53:a7:45:45:e6:11:27:51:ee:f0:81:77:ad:63:5c:15:9a:43:
         d1:a5:e6:84:34:5c:8a:e8:44:3c:80:a8:5a:1d:e2:48:c9:43:
         31:db:21:e0:43:c5:4c:66:b9:71:b2:30:bd:37:e7:57:d7:42:
         b9:73:7f:cd:67:49:70:14:86:06:8a:8c:fe:e1:14:b1:30:34:
         3f:e1:16:1a:bd:90:d9:ec:49:0b:13:c5:fe:a4:67:6b:30:be:
         36:b8:05:37:c5:2e:94:bf:dc:ec:c8:a0:0d:e7:ca:5a:e6:1b:
         42:ee:f9:de
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUDocNV2MnEAhKwv0CxsREfZC/nm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyRUQzNDAwMzREMDM2ODIzMDg1MDg2N0MzMEUyNDU5
OTAxMThBMjAeFw0yNjAyMDkyMzI4MjJaFw0yNzAyMDgyMzMzMjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjY3RTBFOEFGMEFFOTE4OTM4
ODgzREQ5QUI1ODU5QTBGN0RCOTA1OEVFRUFGQTQ5RDg3NDcxNUJDRkNDQTNFMEJC
ODRBMkM5RjE1Q0UzOThEMDI0RTlFMzY1MzM4NDlCMDBFQjg1NjA3QjFDMjdCRjgw
RTg0QkI4NERENUU3RDcwQ0JBMTdBRDE2ODdEQkU0MTkxNEZEMTBCNEFCNjMxMkFB
Mjg5OThGM0IwRThEOTY1MUY5REZBRjI2RDZFRkVGMzAzOTVGNUVFNkJEMDFCQUFE
NzdEMzM0RUVCNkREODgyM0Q0MTE3REYxQjdBNDg3MUEwMEI4NDVCMjNFNDJENTg5
QjY5QzczQzk4QjlCQUU2MUJBRUM2MkZBQzFDNzhGMTIzQjdGMzZBOERDNzJCNjQ1
OTY2NTEyRDNGMDM1NDQxRUI5QTQ0QjFFREQyMEY2N0U2RDJENTA0MzMyOTY3RTQ1
RUQ5OURDRTlCMzM4ODQ1NDM0QzI5MkFFQTlEOEVCNzI4MDE1MDk2RjgxNURFREVC
OTA2MzEyMTVDNEIzOUQ4NzQwN0EyNzA2MzJEODNGQkYyOThEQ0RCNDQ4NjE3Q0NE
OTkzNDdDRTMyM0M2RDU5QjBDMjcwMTYxRDZFQTgxNzVDMjcwOUQ1QUUyMEQxNjEy
RTE2RjFFMzYyQzc3QTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9n4OivCukYk4iD3Zq1hZoPfbkFju6vpJ2HRxW8/Mo+C7hKLJ8Vzj
mNAk6eNlM4SbAOuFYHscJ7+A6Eu4TdXn1wy6F60Wh9vkGRT9ELSrYxKqKJmPOw6N
llH5368m1u/vMDlfXua9Abqtd9M07rbdiCPUEX3xt6SHGgC4RbI+QtWJtpxzyYub
rmG67GL6wcePEjt/NqjccrZFlmUS0/A1RB65pEse3SD2fm0tUEMyln5F7Znc6bM4
hFQ0wpKuqdjrcoAVCW+BXe3rkGMSFcSznYdAeicGMtg/vymNzbRIYXzNmTR84yPG
1ZsMJwFh1uqBdcJwnVriDRYS4W8eNix3pwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKvzG1B9qvZdOayks6i48PR7HyVsMB8GA1UdIwQYMBaAFMou00ADTQNoIwhQhnww
4kWZARiiMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzEvQ0EyRUQzNDAwMzREMDM2
ODIzMDg1MDg2N0MzMEUyNDU5OTAxMThBMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DQTJFRDM0MDAzNEQwMzY4MjMwODUwODY3QzMwRTI0NTk5MDEx
OEEyLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8xLzMxMzYzMDJlMzIzMzM4MmUzMTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNTMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACg7qIwDQYJKoZIhvcNAQELBQADggEBAHjnjWYfOohNreBpNu1jyEMBlTdBcEHT
x5VECTxgfBtXBwFNeMDe6Txl++b+wUgKd/uqmQkzUW9ygVudl1/nz9zau8TdrWwJ
YDLySUjS5YSUiRMwn6h+8Id0Y9Pgkuqn05c/QOe4KWMB7QmDqfL/YxULIdJQ97Oz
PRrmVHKibB2afnhZxP1d3b5HpiOJMmS3ZFOnRUXmESdR7vCBd61jXBWaQ9Gl5oQ0
XIroRDyAqFod4kjJQzHbIeBDxUxmuXGyML0351fXQrlzf81nSXAUhgaKjP7hFLEw
ND/hFhq9kNnsSQsTxf6kZ2swvja4BTfFLpS/3OzIoA3nylrmG0Lu+d4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:11 2026 by rpki-client