Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa
File:                     3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          1RKSqDo1JgPyiCbyvaujL8tuPC2KTJ/BzPuZq6KksVI=
Subject key identifier:   ED:CB:6D:AD:10:8F:62:5C:F8:CD:D9:38:DE:69:08:1F:FB:AD:A8:9F
Certificate issuer:       /CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
Certificate serial:       103B0147DB3374A9A71554A536AB67B1C4F93487
Authority key identifier: 43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa
Signing time:             Wed 04 Feb 2026 21:02:33 +0000
ROA not before:           Wed 04 Feb 2026 20:57:33 +0000
ROA not after:            Wed 03 Feb 2027 21:02:33 +0000
asID:                     263098
IP address blocks:        186.208.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3b:01:47:db:33:74:a9:a7:15:54:a5:36:ab:67:b1:c4:f9:34:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Validity
            Not Before: Feb  4 20:57:33 2026 GMT
            Not After : Feb  3 21:02:33 2027 GMT
        Subject: CN=EDCB6DAD108F625CF8CDD938DE69081FFBADA89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:19:71:04:d9:f8:c4:c9:84:cb:49:f3:45:cc:
                    62:b8:cb:1f:c9:45:67:6b:0d:96:3d:26:42:09:e4:
                    d0:01:0c:36:a1:1f:d8:03:e2:4f:60:f0:47:1a:77:
                    b7:43:29:86:54:3b:10:6d:8e:a2:5c:ba:f7:f7:73:
                    1f:fe:b8:9b:a8:39:5a:43:c7:97:e9:89:49:d0:77:
                    0e:78:ea:9a:e0:43:97:6d:6c:e4:fb:a0:07:d3:1f:
                    a6:5a:62:c3:08:a9:cf:3d:76:0e:af:1b:b8:64:3a:
                    73:cd:48:44:19:34:65:7f:50:32:1a:22:30:fd:90:
                    55:fa:bb:c7:78:3a:66:ef:07:90:8c:4a:3b:34:e1:
                    57:a7:e5:cb:3d:a4:ee:50:58:1f:13:2f:8e:0d:77:
                    db:a7:c1:44:0e:f4:3a:f1:12:2c:30:83:d1:a0:1c:
                    da:de:96:51:76:ca:1c:f6:b3:cd:54:b4:fc:ea:e4:
                    b3:3f:12:38:7c:83:55:e9:99:05:8c:78:83:0c:f5:
                    2b:74:87:ef:fc:3d:64:0a:42:3d:8f:59:55:96:ab:
                    05:03:b5:9c:92:c2:03:58:33:78:41:17:83:28:1c:
                    51:9b:79:b9:d2:7c:e4:ef:fa:4d:ab:0b:e4:9d:6a:
                    93:69:7d:2e:43:4e:3b:a4:b4:8d:54:6a:a2:d3:68:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:6D:AD:10:8F:62:5C:F8:CD:D9:38:DE:69:08:1F:FB:AD:A8:9F
            X509v3 Authority Key Identifier:
                keyid:43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/3138362e3230382e3235322e302f32322d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:71:37:fe:bc:31:26:63:48:48:a5:e0:e0:d5:56:51:99:87:
         27:6a:d4:a4:0e:c8:9d:7c:ab:7e:a8:aa:1e:77:18:f8:39:95:
         65:c8:f2:d8:37:9e:32:8f:e6:42:7a:a1:58:69:d8:6f:76:22:
         b5:ae:95:18:65:98:5c:4d:c5:0c:e6:2f:a6:38:80:b2:a7:30:
         01:a3:1e:cf:ef:b8:c2:04:4b:62:f4:fe:e8:6b:87:ae:ae:7e:
         cc:5a:c9:62:61:32:ee:2e:52:da:53:85:d3:77:7c:79:5d:c5:
         f5:4c:a6:4a:c3:89:8e:1f:03:a8:8d:1d:c7:f9:6b:69:7a:0f:
         0b:69:ca:0a:82:6f:b3:7f:09:b6:ea:00:59:19:65:87:5c:9a:
         d9:40:90:55:15:47:69:50:52:ce:5a:b6:64:97:ae:31:f1:58:
         1a:94:9c:bf:8b:ad:a4:1c:34:c9:66:bd:bf:cd:84:af:c0:86:
         da:1f:a3:c0:48:0f:58:70:d6:cc:25:fa:81:7e:2e:0e:46:34:
         51:d2:13:1d:1d:bf:44:1f:a4:c4:f0:20:56:4f:a0:8d:b7:41:
         63:65:55:a4:7b:da:29:ff:ad:6e:e6:d3:28:7d:af:57:69:9a:
         74:0c:80:92:2f:2a:ed:b7:2f:27:4d:a2:ce:86:d7:7b:85:32:
         00:aa:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:47:51 2026 by rpki-client