Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139362e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3139362e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          /wdBDcUBBsTZ1QAA/DmbhhG9Ytsqks4C+uGGYyH4FUY=
Subject key identifier:   99:2D:E7:AF:5D:0C:68:F1:78:F0:C6:11:F6:E3:3B:84:A0:89:B8:28
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       29FD4CEB7DB1D99FB2B6BEBE3482397AA271CF12
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139362e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 05 Feb 2026 09:30:01 +0000
ROA not before:           Thu 05 Feb 2026 09:25:01 +0000
ROA not after:            Thu 04 Feb 2027 09:30:01 +0000
asID:                     53086
IP address blocks:        187.33.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fd:4c:eb:7d:b1:d9:9f:b2:b6:be:be:34:82:39:7a:a2:71:cf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Feb  5 09:25:01 2026 GMT
            Not After : Feb  4 09:30:01 2027 GMT
        Subject: CN=992DE7AF5D0C68F178F0C611F6E33B84A089B828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:8b:1f:f7:da:22:14:d0:ce:5f:54:1d:25:
                    f5:dc:c7:9f:f0:57:bd:09:fb:f4:5d:14:6b:3a:a5:
                    21:a6:59:df:e1:00:7d:16:02:30:16:19:e7:d2:5a:
                    ce:ac:8e:ee:44:01:07:39:49:8a:8d:e9:fe:7d:8a:
                    ba:60:aa:a5:0c:99:da:4e:fa:63:32:c9:19:31:f2:
                    6d:59:ae:35:b5:b4:a9:56:77:5c:da:53:dc:e1:da:
                    e6:f8:db:bc:bb:35:dd:2b:06:34:b0:a8:ed:2b:91:
                    31:af:d7:40:6e:6a:9f:3b:24:6a:7e:45:a6:0d:70:
                    c7:63:f0:65:b4:d9:df:38:5f:10:61:9e:9d:11:7e:
                    70:23:0f:fa:15:6b:2a:33:fa:e2:68:29:e3:49:bf:
                    1a:74:aa:a4:42:eb:6d:4f:53:b4:19:96:63:2d:6e:
                    dd:48:66:8b:25:90:78:f2:f5:f7:5f:94:26:63:68:
                    d4:46:d8:d4:ab:b0:a6:cb:42:46:bf:3e:5d:b5:d0:
                    ba:36:02:dd:90:09:92:db:dc:ec:eb:da:66:f7:a3:
                    6d:5e:85:e4:be:5c:a4:7a:ad:fc:43:f4:77:fb:d7:
                    cd:1d:0a:ab:a1:1d:b4:b7:ec:ca:d2:cc:47:10:ee:
                    b4:ba:52:b8:14:6a:9d:c0:60:73:8b:5e:78:12:db:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:E7:AF:5D:0C:68:F1:78:F0:C6:11:F6:E3:3B:84:A0:89:B8:28
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3139362e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:09:05:79:d3:e6:6c:c3:6d:fd:47:24:dc:d6:9f:41:c3:
         2e:2d:fa:47:0b:e4:28:1a:a1:5d:e9:69:3a:bf:fd:f7:f6:f6:
         e7:08:7c:48:a4:78:5a:b3:06:c6:0a:ab:25:f8:83:d8:b0:e3:
         b8:25:fb:c0:21:6c:34:6f:87:7c:6f:1c:e1:4b:3c:5a:3b:27:
         9b:2b:f6:6a:41:26:7f:55:c2:da:81:7e:c5:00:87:e7:e4:28:
         53:e0:7a:52:b4:6b:9d:27:94:85:23:60:4a:b8:b8:f9:18:99:
         ee:bb:dd:f6:d5:ea:dd:f3:e9:a1:9a:c3:a0:17:91:ea:a7:7b:
         d4:7d:d7:8e:58:f0:4d:4e:c5:f4:c2:31:57:44:a4:94:e1:0c:
         89:47:53:a1:0a:2c:03:67:ae:28:a6:31:6d:60:bc:04:16:10:
         bb:78:43:34:de:64:2c:e5:b3:6d:e1:5f:ff:ec:6a:e6:0e:16:
         16:34:a1:db:4d:9d:1c:5e:40:28:62:a6:ed:b0:8e:2b:4b:4a:
         32:5a:41:5d:e1:a9:23:3a:8f:5e:40:32:45:e8:53:66:eb:52:
         01:b8:30:b2:0c:e9:38:2e:4c:2f:ad:96:ef:4e:c4:f0:f6:5d:
         62:68:b6:42:52:ba:7c:c5:25:73:64:05:92:34:3e:8a:0f:6a:
         19:df:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:51 2026 by rpki-client