Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa
File:                     3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          tvRwHUxjhA267CUJXNuW127IH/hF3eYIe06RspqjnhU=
Subject key identifier:   5E:0F:EB:AE:3C:B5:93:6F:5B:98:2B:D2:9E:82:DD:FB:32:97:D5:3F
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       6879C77675E8D62BAD85D7F106444C97BD39A760
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa
Signing time:             Wed 04 Feb 2026 21:02:33 +0000
ROA not before:           Wed 04 Feb 2026 20:57:33 +0000
ROA not after:            Wed 03 Feb 2027 21:02:33 +0000
asID:                     263098
IP address blocks:        167.249.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:79:c7:76:75:e8:d6:2b:ad:85:d7:f1:06:44:4c:97:bd:39:a7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Feb  4 20:57:33 2026 GMT
            Not After : Feb  3 21:02:33 2027 GMT
        Subject: CN=5E0FEBAE3CB5936F5B982BD29E82DDFB3297D53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:43:14:12:42:2e:af:ad:c9:94:13:5a:72:
                    6b:e8:5a:47:6d:ee:a0:62:56:57:f4:a7:db:92:5c:
                    b0:66:6a:46:5d:a7:5a:23:ad:01:37:07:12:d8:02:
                    95:d8:89:a6:09:2e:5f:6f:74:94:b9:08:29:ea:13:
                    f0:0c:85:f6:8e:e8:84:bd:fa:b8:f5:87:81:cd:fa:
                    f1:02:cd:19:73:d7:8f:39:e3:6d:9b:ab:80:30:67:
                    b0:5c:c3:14:55:d6:ff:05:8e:35:b1:7c:5c:97:5d:
                    60:13:59:e1:09:7c:40:b3:ab:da:39:b6:54:41:8a:
                    bd:ae:54:cc:2b:b9:28:b1:8a:8c:60:67:f5:fc:7f:
                    37:00:92:ec:3c:bf:43:7d:b0:48:7f:59:d6:a6:b4:
                    05:2e:d8:a7:28:ab:9e:0a:49:b2:b4:db:7c:06:7d:
                    6a:36:4c:38:fe:da:3c:fe:7e:9d:f6:b2:96:40:71:
                    05:08:a7:db:2a:7e:87:e0:3f:8c:8b:3b:3e:d4:3e:
                    1a:b2:34:2e:0b:2b:b6:e9:61:0f:07:f2:7b:88:b6:
                    3b:d3:8f:b2:12:98:2d:79:06:49:e0:33:3f:27:38:
                    c6:20:e2:a0:a9:0c:4c:58:11:63:7d:2e:03:4b:dd:
                    59:a6:fc:3b:03:8d:bd:c2:65:b2:fa:e7:33:29:fc:
                    a0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:EB:AE:3C:B5:93:6F:5B:98:2B:D2:9E:82:DD:FB:32:97:D5:3F
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3136372e3234392e3138302e302f32322d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:66:3a:34:d3:16:8d:e4:61:f0:8f:a2:d1:e8:a9:c6:cb:
         1b:1e:66:2b:2d:97:33:64:66:ec:16:5c:3d:3e:6d:1d:7d:32:
         7d:1b:64:e5:ea:07:48:97:8a:8e:df:85:66:e7:7c:28:13:1b:
         ea:77:3a:61:65:74:1a:ff:b5:97:cb:ef:d9:c1:ae:a1:ac:7d:
         b3:c9:2d:1e:d8:f1:46:26:09:93:3e:5a:87:bb:fb:7e:d2:32:
         d3:78:3a:ab:f6:b8:65:a7:6b:fa:ac:47:64:7c:8c:cf:17:aa:
         dd:80:c9:c5:45:9b:5a:03:10:ca:88:36:c3:9a:8d:a8:75:d7:
         69:65:85:86:33:6a:1b:9f:76:78:fd:ae:3e:71:b2:cb:a2:79:
         c4:6b:ba:5a:c7:f5:91:fb:f7:ff:eb:9d:d2:a0:c5:0f:23:ae:
         b7:98:65:b7:67:c3:e3:d9:b0:0e:57:96:24:31:12:e9:00:ce:
         b8:79:f5:51:4a:aa:67:26:e5:79:e1:25:21:3f:57:62:1d:58:
         ad:23:a4:7a:54:0f:13:78:98:16:d1:96:ee:6b:73:d3:7c:e7:
         67:f6:2b:36:99:06:bf:44:8b:44:ca:cc:68:b6:b9:f7:a1:95:
         f4:94:69:60:cd:6a:4e:be:73:4d:a3:f0:7a:91:5c:bf:c1:e2:
         4e:7b:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:02 2026 by rpki-client