Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
File:                     3139312e352e34382e302f32312d3234203d3e20323633353332.roa (raw, json)
Hash identifier:          iOv0kJlRT73BzDC+cgc/lvNfYbHLtT+JbH8RtNxcEBI=
Subject key identifier:   0C:F0:4D:57:60:52:12:46:E6:8C:AA:E0:4E:F1:0B:4A:84:75:BB:8F
Certificate issuer:       /CN=40024D9137B1E11B244B48E87E69634A33E200A3
Certificate serial:       2C9A22C1D55FCC67130EE763AB617C4D527EB1C6
Authority key identifier: 40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa
Signing time:             Thu 05 Feb 2026 09:08:25 +0000
ROA not before:           Thu 05 Feb 2026 09:03:25 +0000
ROA not after:            Thu 04 Feb 2027 09:08:25 +0000
asID:                     263532
IP address blocks:        191.5.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl
                          rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9a:22:c1:d5:5f:cc:67:13:0e:e7:63:ab:61:7c:4d:52:7e:b1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40024D9137B1E11B244B48E87E69634A33E200A3
        Validity
            Not Before: Feb  5 09:03:25 2026 GMT
            Not After : Feb  4 09:08:25 2027 GMT
        Subject: CN=0CF04D5760521246E68CAAE04EF10B4A8475BB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:e1:4b:d9:a2:50:7c:58:d3:fd:26:ef:93:
                    6a:27:21:68:0a:e6:13:62:e7:f0:ba:80:a4:8d:e5:
                    d9:0f:b9:4f:45:2d:85:71:6f:3d:9e:d1:5d:0c:23:
                    be:98:63:bd:63:b6:83:a6:32:14:ab:ba:5f:02:cc:
                    fb:cb:12:f8:e4:b4:c7:6a:7a:71:e5:bc:17:c2:22:
                    86:b2:e1:8d:e0:89:f7:ab:7b:db:05:4a:06:ac:55:
                    5a:dd:73:9f:3b:8d:6c:29:19:25:85:af:24:99:6c:
                    c8:db:c9:c5:e2:77:9e:53:19:fd:0f:90:b7:75:3c:
                    2c:04:4c:28:ab:bf:91:28:3e:94:29:04:78:2e:28:
                    a3:7d:58:eb:bc:ba:19:a2:4d:1a:6a:94:26:52:62:
                    6e:79:b4:fe:7f:34:b6:9d:8f:93:eb:d5:58:e5:87:
                    f9:6f:fc:44:99:88:82:e6:13:13:63:1a:18:2e:9d:
                    1f:61:10:04:6b:29:e1:a4:74:4a:59:15:4e:d3:1d:
                    31:77:06:e0:47:6e:6b:dc:ba:f9:40:5b:ff:6e:5c:
                    b0:ee:17:b6:e4:61:1a:f4:74:58:bd:e4:49:86:b1:
                    ea:03:e7:75:a4:37:f0:19:95:11:29:0b:ff:bd:90:
                    43:34:e7:c6:18:e6:e4:f1:04:fe:78:27:dc:8f:e0:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F0:4D:57:60:52:12:46:E6:8C:AA:E0:4E:F1:0B:4A:84:75:BB:8F
            X509v3 Authority Key Identifier:
                keyid:40:02:4D:91:37:B1:E1:1B:24:4B:48:E8:7E:69:63:4A:33:E2:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/40024D9137B1E11B244B48E87E69634A33E200A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40024D9137B1E11B244B48E87E69634A33E200A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Epow7tyDvPA621U7rJpoCiEFF6pWV5m7cWhT9msj4rVH/1/3139312e352e34382e302f32312d3234203d3e20323633353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:5e:ad:f6:ef:ee:5c:44:f8:87:bb:f2:76:c9:6b:50:8a:
         0b:fc:66:24:7c:f5:ff:86:04:a9:24:07:74:85:9e:00:b1:a6:
         80:02:9e:3a:fb:31:8b:7e:0f:77:64:5a:2d:8a:e1:93:78:cb:
         bf:ff:6b:a3:2b:07:c4:ed:ec:8e:6f:04:8a:98:d4:13:f0:fa:
         3d:64:b9:16:37:7b:ad:db:ea:2b:82:f7:c1:f2:5f:e1:93:ba:
         8f:58:75:a7:c2:91:80:29:16:ae:0f:4d:4e:08:a3:4c:02:75:
         bb:86:91:f1:31:12:65:f2:c7:98:ee:4f:6c:eb:f9:34:83:0c:
         23:9b:14:26:6f:4d:08:4b:52:62:76:ec:27:ed:53:22:76:2b:
         c2:9f:c8:a7:43:cb:8e:7b:06:a5:13:9a:34:e1:c9:c9:81:a3:
         dd:8b:c8:60:d0:1e:e8:d2:b0:d5:c8:57:69:b5:4f:fe:b0:17:
         2c:d6:05:be:30:5a:bc:16:76:88:92:1e:40:17:70:38:a7:98:
         e5:e4:00:eb:bf:93:6a:03:f6:97:3e:e0:29:25:6f:d1:93:09:
         73:d6:e1:b8:60:9f:72:81:c9:2f:1b:3d:a9:3e:d4:43:14:47:
         01:e1:57:8b:f1:6e:22:0b:68:a2:09:53:23:55:ac:18:79:94:
         54:45:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:17 2026 by rpki-client