Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          IBLiRdBJBej0dTJXiuoefircXEbDv/acn+De6KX6JLs=
Subject key identifier:   40:12:8E:A7:B7:6A:E1:48:F7:38:FE:9E:94:C0:F2:CA:AC:CD:90:70
Certificate issuer:       /CN=734B66FA6878EDCF866CF08634B1680301F14295
Certificate serial:       6A706E9B4DAE0C60D87A5381DBCE5F64EC340956
Authority key identifier: 73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 05 Feb 2026 09:30:01 +0000
ROA not before:           Thu 05 Feb 2026 09:25:01 +0000
ROA not after:            Thu 04 Feb 2027 09:30:01 +0000
asID:                     53086
IP address blocks:        187.33.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl
                          rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:70:6e:9b:4d:ae:0c:60:d8:7a:53:81:db:ce:5f:64:ec:34:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734B66FA6878EDCF866CF08634B1680301F14295
        Validity
            Not Before: Feb  5 09:25:01 2026 GMT
            Not After : Feb  4 09:30:01 2027 GMT
        Subject: CN=40128EA7B76AE148F738FE9E94C0F2CAACCD9070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:dd:f2:d8:9a:01:83:1b:c2:36:83:4f:c0:
                    f2:f3:23:c0:8c:ae:f2:9c:27:b5:99:66:1a:97:f3:
                    ec:ab:f7:a3:1a:bf:99:b5:94:7a:75:eb:11:d7:1a:
                    41:ee:6b:01:2f:c2:a8:96:10:08:98:12:ab:c5:88:
                    10:d4:22:fb:2b:26:17:7f:ac:fd:f6:f6:9c:1f:c9:
                    77:66:cc:cd:20:01:43:2f:68:02:22:c2:a5:73:40:
                    4a:fc:ad:33:32:09:7b:ac:38:bd:ab:b3:d2:93:5e:
                    ce:f1:a1:2d:2e:9a:a8:36:48:2b:d1:5f:95:22:5c:
                    d5:4d:ba:b8:da:52:75:08:34:ea:49:e7:71:7d:0e:
                    24:e5:4f:81:4d:0d:ab:88:39:e2:ce:59:2d:17:48:
                    52:ec:eb:4f:bd:6f:f5:a3:2f:78:e4:05:10:f5:ca:
                    ba:0e:1a:db:d0:05:ea:fa:5a:7b:4c:ae:ed:0a:79:
                    7f:a7:06:e8:b4:90:a1:d2:f8:ef:c3:ce:f9:ad:f5:
                    c1:a6:d5:12:ad:f5:44:5f:51:65:a2:0a:1b:82:6d:
                    fa:66:d2:23:20:b3:c6:13:a8:ff:d2:5e:eb:e2:b0:
                    4f:fe:a7:a2:71:5a:b1:3a:09:b8:28:13:cd:ec:e0:
                    40:e4:82:fd:5b:d4:32:52:66:c3:4c:ca:9a:a4:fc:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:12:8E:A7:B7:6A:E1:48:F7:38:FE:9E:94:C0:F2:CA:AC:CD:90:70
            X509v3 Authority Key Identifier:
                keyid:73:4B:66:FA:68:78:ED:CF:86:6C:F0:86:34:B1:68:03:01:F1:42:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/734B66FA6878EDCF866CF08634B1680301F14295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/734B66FA6878EDCF866CF08634B1680301F14295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/1/3138372e33332e3230302e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:5c:ec:bb:db:d8:cc:5b:90:e1:80:76:21:a1:9d:fc:88:62:
         55:f7:99:a8:b4:aa:b0:29:95:d3:6b:80:1d:aa:c1:d8:17:8f:
         fb:38:5e:a3:e8:00:b0:4c:5a:e5:16:71:3b:8f:af:b0:4d:e2:
         52:f4:60:8d:6f:7e:d6:83:da:ca:eb:19:59:61:cf:96:90:fa:
         f5:6c:4b:59:f7:11:ed:ef:bb:39:ff:44:89:78:af:17:61:e4:
         8c:e2:e1:63:5b:a8:f0:24:6a:44:fa:34:c0:fa:2b:5c:80:5d:
         e9:fb:10:f5:ff:54:31:19:b4:e9:43:24:56:a8:c1:65:59:b9:
         d3:24:6e:62:5e:48:d3:77:2e:c8:79:1a:20:ce:8f:8e:8a:8d:
         40:98:66:f8:78:a4:81:1f:31:ef:10:04:48:a9:da:06:81:7f:
         0e:0c:fc:e1:ab:06:0c:3f:0f:c7:8b:f4:f4:4b:65:1c:e7:20:
         97:a2:54:a0:b4:12:1a:17:90:06:6a:9d:98:df:62:e8:5d:22:
         a9:fe:62:bc:ee:1b:44:6a:eb:fe:cb:85:e7:59:48:d7:5c:c3:
         97:76:dc:cd:6b:cc:4e:7c:8a:0e:6e:cb:4a:ba:c5:27:86:f5:
         f9:6f:b0:6e:d4:03:d3:d3:2c:76:72:d6:a6:28:b6:53:5f:0a:
         34:a5:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:33 2026 by rpki-client