Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/3136382e39302e342e302f32322d3234203d3e20323635323737.roa
File:                     3136382e39302e342e302f32322d3234203d3e20323635323737.roa (raw, json)
Hash identifier:          TPXeiZs46jQPFZugx/L/1tApYWeXxKnzt/EF9mRvEUs=
Subject key identifier:   77:8D:58:79:D7:61:80:44:8B:7E:ED:39:2F:39:C3:1F:EE:5F:77:1D
Certificate issuer:       /CN=D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1
Certificate serial:       42D5FC9B9D1A4F69BED554B9D7E4EE63DFA0E0C4
Authority key identifier: D6:5C:C0:47:5C:7E:C2:7C:65:BF:5B:CD:A9:D0:33:A4:8C:13:BE:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/3136382e39302e342e302f32322d3234203d3e20323635323737.roa
Signing time:             Thu 05 Feb 2026 03:45:00 +0000
ROA not before:           Thu 05 Feb 2026 03:40:00 +0000
ROA not after:            Thu 04 Feb 2027 03:45:00 +0000
asID:                     265277
IP address blocks:        168.90.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.crl
                          rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:54:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d5:fc:9b:9d:1a:4f:69:be:d5:54:b9:d7:e4:ee:63:df:a0:e0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1
        Validity
            Not Before: Feb  5 03:40:00 2026 GMT
            Not After : Feb  4 03:45:00 2027 GMT
        Subject: CN=778D5879D76180448B7EED392F39C31FEE5F771D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:d6:31:a9:d7:45:b2:a9:6c:cc:db:2d:a4:
                    d1:c8:22:04:cf:4d:14:72:c4:5c:ff:cf:29:3a:35:
                    2a:41:2b:da:c8:87:48:ac:aa:f5:7f:7a:7c:74:a3:
                    3e:9d:2c:c7:48:e4:18:fb:66:a2:55:cc:0b:e6:7f:
                    74:04:26:3f:d1:19:23:36:53:dd:4e:73:c9:f7:f0:
                    b3:84:eb:32:45:42:af:70:95:62:d9:92:86:ac:43:
                    11:b5:80:7f:0c:b6:4b:26:77:48:ff:43:2a:2e:0d:
                    17:49:34:61:45:4a:28:6f:d5:42:16:bb:cc:40:62:
                    24:32:bd:7f:ec:39:2b:e6:5f:5a:78:b5:bc:bb:4b:
                    4f:55:98:f7:0c:aa:ac:7d:eb:a9:e4:02:31:6f:84:
                    b2:b8:09:51:60:89:38:cb:82:48:1d:ed:d9:32:97:
                    99:c4:18:53:3b:b9:2c:92:89:d1:c9:c8:68:d0:64:
                    af:00:a1:c4:a7:a2:ee:35:8a:53:0e:fa:05:47:db:
                    fe:77:19:db:1d:c9:87:6a:f5:00:cc:0d:0f:b2:8c:
                    bc:c8:77:aa:79:11:74:5e:d1:df:22:42:b1:3c:ba:
                    17:ea:c7:82:a4:c8:39:52:27:b0:6f:a3:f8:3c:48:
                    78:d5:f6:a0:d7:d9:9d:7c:ae:49:81:07:00:5b:fa:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:58:79:D7:61:80:44:8B:7E:ED:39:2F:39:C3:1F:EE:5F:77:1D
            X509v3 Authority Key Identifier:
                keyid:D6:5C:C0:47:5C:7E:C2:7C:65:BF:5B:CD:A9:D0:33:A4:8C:13:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D65CC0475C7EC27C65BF5BCDA9D033A48C13BEF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EuB2FXep3bQnb6KEQvGFt1ZMh8WjWxMAHkVweZuXJ4BC/1/3136382e39302e342e302f32322d3234203d3e20323635323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:36:75:a4:30:16:bd:ea:a4:33:6e:3c:5f:48:8f:b7:2f:f2:
         d2:87:01:ff:47:6f:67:d6:a9:2c:25:3e:d7:2a:00:ee:52:b5:
         f2:b9:75:22:00:56:24:0a:be:1b:23:82:9d:85:b8:56:7d:84:
         95:8b:fe:ad:33:e1:aa:69:68:e9:20:b9:ea:84:5e:9a:5e:62:
         9c:8e:21:24:5d:ef:e5:78:64:f5:84:49:84:7d:da:10:3e:d0:
         5c:98:1e:c5:94:f9:81:fa:ee:b6:c3:49:b0:d3:7c:7f:ac:83:
         a8:51:e2:0c:94:b3:7d:9c:75:32:6b:8d:88:5e:50:80:d0:72:
         32:91:8c:a5:e3:23:27:1d:a4:8e:53:3b:8e:aa:b6:40:c8:af:
         b7:46:12:1d:dd:72:5e:07:c4:fe:07:69:6b:b6:0b:c3:67:67:
         f4:39:dd:e1:59:6b:b0:f7:f0:a5:01:3c:12:b1:52:20:44:78:
         9d:df:f8:d3:8c:b8:4a:bc:a5:ec:cb:57:0e:15:50:d5:d6:71:
         5b:55:fe:7f:41:59:97:22:f2:fa:f3:ae:01:48:d1:40:19:f5:
         af:ad:eb:42:ad:5c:d6:b2:c3:b4:69:0b:22:b0:61:a3:32:9c:
         48:ed:af:7c:a1:a2:8d:aa:de:11:99:35:79:94:38:eb:fa:bb:
         84:83:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:53:45 2026 by rpki-client