Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3232203d3e20323636303039.roa
File:                     3138312e3139312e3130342e302f32322d3232203d3e20323636303039.roa (raw, json)
Hash identifier:          wZGtTc19uLanNxG2WlR3QitrZATksiDxRl0TwkESJs4=
Subject key identifier:   83:BF:74:D9:CC:05:C0:45:A8:B1:65:14:09:0D:46:F2:7C:1D:4E:6D
Certificate issuer:       /CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
Certificate serial:       0EA57D752E9EFDAE0E03550D7BE07BC1D31ACE3D
Authority key identifier: 7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3232203d3e20323636303039.roa
Signing time:             Wed 28 Jan 2026 15:00:57 +0000
ROA not before:           Wed 28 Jan 2026 14:55:57 +0000
ROA not after:            Wed 27 Jan 2027 15:00:57 +0000
asID:                     266009
IP address blocks:        181.191.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl
                          rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a5:7d:75:2e:9e:fd:ae:0e:03:55:0d:7b:e0:7b:c1:d3:1a:ce:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
        Validity
            Not Before: Jan 28 14:55:57 2026 GMT
            Not After : Jan 27 15:00:57 2027 GMT
        Subject: CN=83BF74D9CC05C045A8B16514090D46F27C1D4E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:6b:af:45:6d:08:c1:45:21:a7:0a:2d:3c:
                    83:f2:b9:99:dc:e0:69:98:86:6d:bb:4e:bd:7d:41:
                    b7:94:a3:d3:62:4f:a0:1f:a3:e8:93:2e:d6:3f:b4:
                    52:43:f4:35:2e:92:30:d3:c4:6c:a4:34:5f:bc:1b:
                    9f:a3:71:24:d5:fd:73:b9:f7:03:2d:00:71:7b:36:
                    a7:d8:fc:d9:1c:ef:54:bb:d2:77:a2:95:5b:49:dc:
                    47:39:73:fc:38:ed:71:90:f1:2f:08:fe:d5:be:34:
                    1c:2d:f0:89:b6:04:98:79:e6:f2:36:10:d9:3f:6a:
                    25:e4:c5:22:e0:74:37:8b:cd:e0:c9:1d:6e:62:f0:
                    25:dc:39:6c:46:0f:c1:68:ac:e5:99:d8:bd:a5:75:
                    4b:9a:01:cd:24:9a:af:10:3b:d8:e1:b0:29:f6:c4:
                    4e:56:fa:22:04:d1:71:8f:ff:b5:81:d7:4b:7d:e6:
                    a5:ce:05:45:6f:f1:3b:7f:1d:4b:96:0f:01:dd:74:
                    46:57:09:59:ea:25:98:2c:1e:91:4b:6f:8b:7f:09:
                    22:14:2a:7e:85:18:0b:f5:d6:ed:c1:83:92:63:24:
                    83:c9:19:c0:70:30:86:0d:3a:4e:11:64:df:b1:6b:
                    b2:a4:79:22:de:0a:b7:2c:39:08:87:11:f6:00:6f:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:74:D9:CC:05:C0:45:A8:B1:65:14:09:0D:46:F2:7C:1D:4E:6D
            X509v3 Authority Key Identifier:
                keyid:7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130342e302f32322d3232203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:e6:01:80:d8:50:1e:15:2b:12:20:67:1f:68:22:48:8a:
         b9:fb:8b:45:44:7b:49:c4:7c:52:6d:7c:3f:04:ee:c7:4b:c5:
         71:6e:bc:81:87:bd:d1:29:57:45:5c:e3:67:c7:05:22:02:98:
         27:e8:a5:5b:11:44:b6:9f:98:7c:92:ac:ac:9a:2d:73:df:b4:
         63:f0:39:3d:cf:34:d4:8b:56:55:da:ab:56:6b:c7:79:d1:c3:
         d1:75:4a:e9:18:88:7b:46:de:77:6c:6d:53:a6:41:b1:c6:8e:
         94:69:c1:05:6a:1e:6f:d8:49:1b:70:db:f5:1f:b6:10:ab:43:
         f4:c9:2b:f6:f2:1b:54:32:d5:ed:33:36:da:c3:cb:09:03:96:
         0a:12:8b:9f:ce:8a:20:c6:9e:cc:98:a7:13:56:58:ad:3d:c6:
         31:c7:28:85:ce:3d:b9:45:bd:2c:d0:7e:6e:4d:3e:d1:97:53:
         76:93:39:5a:3d:fc:6e:60:ca:74:a6:85:2a:53:67:85:9b:8a:
         db:57:7b:39:6d:ed:a9:d5:41:fa:5c:27:27:d7:f7:f6:e7:15:
         e3:44:52:42:b0:32:9f:f6:93:e5:e8:62:ca:d1:df:48:f9:1f:
         5b:bc:3f:21:71:52:62:99:61:a1:0b:28:d6:83:2b:96:e6:ec:
         bb:a8:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:06:35 2026 by rpki-client