Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa
File:                     3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa (raw, json)
Hash identifier:          /nXIP4z7stQqUbA4CtzR/0RQ1Bfe0cFNMuYXsa2oqtA=
Subject key identifier:   F8:6F:2B:FB:D9:AB:74:C9:3E:EE:B4:38:0D:11:B1:6D:69:BE:D5:CE
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       2A78AB07F9A9C73B4DB32C56B0121E6C9A02FF31
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa
Signing time:             Thu 05 Feb 2026 18:05:43 +0000
ROA not before:           Thu 05 Feb 2026 18:00:43 +0000
ROA not after:            Thu 04 Feb 2027 18:05:43 +0000
asID:                     264512
IP address blocks:        132.255.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
                          rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:78:ab:07:f9:a9:c7:3b:4d:b3:2c:56:b0:12:1e:6c:9a:02:ff:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Feb  5 18:00:43 2026 GMT
            Not After : Feb  4 18:05:43 2027 GMT
        Subject: CN=F86F2BFBD9AB74C93EEEB4380D11B16D69BED5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:54:d0:50:f9:54:b3:da:3c:4f:a9:78:14:
                    2f:06:c1:79:3e:7a:6b:fa:62:51:59:9d:2e:06:18:
                    8f:e5:27:b8:87:9a:bb:57:c6:22:50:4f:15:46:5e:
                    b5:ae:22:ea:f5:09:07:59:8e:db:30:44:e8:e7:43:
                    7e:da:11:38:ba:33:d6:30:b1:08:47:75:96:7a:3a:
                    fc:36:4c:84:e3:15:f8:eb:2a:64:ee:f3:f7:06:ac:
                    71:7d:c4:37:c5:2c:16:36:85:df:37:9d:4f:71:aa:
                    09:9d:14:b2:91:e4:ee:6b:02:e6:4d:da:7d:d2:da:
                    23:59:c0:25:db:16:0d:a0:00:93:ad:8d:0e:b5:17:
                    8c:be:6c:01:d3:fe:ed:f1:13:8d:be:39:4e:b7:23:
                    e4:7e:d1:f3:a4:60:a8:cd:3e:a9:a1:9e:e4:fc:f0:
                    3b:2b:ab:aa:f2:7a:33:8d:b3:0a:dd:c0:b1:49:10:
                    0e:d9:d6:0b:e1:a3:2d:5a:32:c6:a3:fe:39:7d:81:
                    eb:17:ad:c7:27:ff:5e:60:d3:f5:46:3d:53:b9:89:
                    5a:51:86:59:0a:7b:b8:45:31:8e:12:4c:dd:ac:72:
                    46:72:19:50:72:5d:f5:3c:1c:6d:a2:45:ef:b7:45:
                    a1:e1:96:9e:1b:95:a7:4f:05:53:92:49:31:3b:52:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6F:2B:FB:D9:AB:74:C9:3E:EE:B4:38:0D:11:B1:6D:69:BE:D5:CE
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133322e3235352e3232382e302f32322d3234203d3e20323634353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:42:db:e1:d2:a6:53:4a:e9:a2:3d:77:42:db:ed:22:61:61:
         50:ae:6e:24:31:31:7c:26:6d:4b:17:03:ad:2f:ff:6c:b6:a7:
         1f:9c:83:b3:0f:31:ed:31:50:7f:a3:a0:1c:3d:c0:ff:47:2c:
         91:d3:ed:02:e4:1a:e4:9f:99:cc:5c:a1:ab:c0:17:3c:ce:c6:
         b7:c2:b0:1a:90:51:4b:b1:5f:99:aa:a9:b5:38:4a:ef:66:73:
         06:dc:7b:77:70:55:60:e5:3d:d1:85:03:43:c6:c9:d2:23:0b:
         85:e4:c5:52:d1:58:cf:81:50:57:da:02:c6:d1:90:01:80:4e:
         47:7d:2b:d8:11:aa:1e:48:12:90:51:12:cf:03:3c:ec:6f:f9:
         27:6e:ec:bf:9f:17:89:d4:4d:53:56:5c:1c:c7:b7:52:0c:4a:
         51:e5:8d:27:c0:aa:49:51:85:70:97:a0:8e:33:d5:e0:3c:53:
         c9:76:20:dd:49:e2:a2:fa:81:3c:6a:cd:2a:b6:0a:37:b2:50:
         cc:4f:b3:1c:05:f6:24:b8:b7:90:3b:3d:a8:57:95:dd:4f:d4:
         51:ab:b2:a7:ee:d1:df:65:4a:f5:60:ae:3f:79:dc:53:43:fd:
         ec:cf:db:0d:85:79:62:aa:3e:ac:bb:2b:b1:c5:41:21:02:24:
         00:f9:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:13 2026 by rpki-client