Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa
File:                     3138372e33332e3139322e302f32302d3230203d3e203533303836.roa (raw, json)
Hash identifier:          S+6ImEMoMM3QFaUfW4RixSEIyiJrEAcVlWU4r6kJIOU=
Subject key identifier:   EA:4F:BB:E4:74:82:D2:65:05:43:48:9C:60:8C:37:6F:CC:D5:08:72
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       71F87D67378D3E39E386FDE416E2C73B8B5088E2
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa
Signing time:             Thu 05 Feb 2026 09:30:00 +0000
ROA not before:           Thu 05 Feb 2026 09:25:00 +0000
ROA not after:            Thu 04 Feb 2027 09:30:00 +0000
asID:                     53086
IP address blocks:        187.33.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f8:7d:67:37:8d:3e:39:e3:86:fd:e4:16:e2:c7:3b:8b:50:88:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Feb  5 09:25:00 2026 GMT
            Not After : Feb  4 09:30:00 2027 GMT
        Subject: CN=EA4FBBE47482D2650543489C608C376FCCD50872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d2:75:59:62:c8:e8:11:e2:da:38:0c:7f:cf:
                    a7:35:24:39:0b:06:e0:1e:dd:d4:5f:4e:4a:27:8a:
                    d1:df:42:cb:79:e2:6f:d2:60:43:66:6f:54:9c:55:
                    66:f7:53:55:fc:40:1d:7f:83:2d:04:c2:42:57:d1:
                    f8:5e:d0:8a:34:db:50:5d:e4:b4:51:42:21:12:e3:
                    6b:41:1a:56:b8:0a:19:10:51:f8:59:2d:ae:21:ab:
                    6e:99:51:76:ef:03:fe:02:48:95:9b:1b:ec:28:e2:
                    d8:7a:97:67:7e:c6:3e:86:3e:fc:19:22:c3:29:50:
                    0f:1d:4b:75:ac:e2:3b:ff:ab:73:a3:0f:df:1f:aa:
                    04:d6:45:d5:ba:f8:1d:c0:05:eb:dc:97:67:6c:0f:
                    d3:81:7d:0b:83:3b:29:d9:9b:29:f1:7a:d4:7f:ef:
                    44:69:6c:cc:d8:44:09:3d:b1:8a:eb:19:fd:11:65:
                    eb:e4:ec:52:fa:49:cd:18:ca:20:7d:fc:bb:b5:79:
                    43:ef:43:14:c0:6e:35:48:b9:0f:6a:59:48:a6:77:
                    f9:e1:f1:12:0b:c7:d0:49:69:3f:9c:79:7b:0d:df:
                    7c:76:19:48:e8:bf:a8:df:54:c9:31:84:04:93:93:
                    a5:fb:10:7d:8b:ce:e5:0d:88:f2:09:b2:2d:0b:21:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:BB:E4:74:82:D2:65:05:43:48:9C:60:8C:37:6F:CC:D5:08:72
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139322e302f32302d3230203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:52:dc:31:93:47:3f:03:d3:a5:d9:1c:69:b4:73:bf:b9:dc:
         e3:ac:de:ed:3c:27:b2:89:83:d1:26:d1:50:27:69:42:ea:1c:
         a1:25:56:15:e7:7c:e1:e9:60:13:1f:5a:e4:4b:9a:43:76:c7:
         37:55:b4:0e:c8:98:ea:e3:e5:c3:51:15:ce:0c:cf:5b:41:21:
         e9:1e:cb:af:ae:7b:36:f3:cc:8b:fd:58:e8:d7:81:60:19:7f:
         c6:9e:18:e0:f2:de:59:29:70:8d:eb:86:6c:a8:17:03:06:f4:
         23:d8:7c:f6:97:49:c0:80:f2:eb:4d:94:d2:94:58:05:1e:d1:
         40:87:be:70:6f:b8:2e:ee:a7:d5:f4:d6:0b:7e:fc:19:ba:26:
         d5:26:54:fb:ad:5e:6b:be:31:dc:90:29:04:ed:0b:45:66:b7:
         46:49:53:60:76:06:30:88:81:6c:76:6c:78:cb:5d:1b:9b:2e:
         03:88:4c:13:01:0b:c0:a8:ba:30:3a:5f:49:b2:99:76:76:4e:
         9f:3d:fd:b5:90:3f:62:79:c6:cc:9e:e9:3f:0c:9b:53:50:a0:
         00:0c:69:ae:32:59:88:dd:86:6a:8a:67:d3:6d:d7:ab:ba:24:
         dc:c3:cf:c7:87:fa:11:a8:f9:ea:dd:0c:2d:3b:c8:48:65:7d:
         40:4b:64:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:15 2026 by rpki-client