Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa
File:                     3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa (raw, json)
Hash identifier:          F8VYA1Z18R/woa9bZoNYb8qcsOWF4ZlAfpWbymjmr8U=
Subject key identifier:   7B:C6:25:D2:EB:79:61:13:80:D8:C4:B1:49:8A:F8:70:38:69:08:5C
Certificate issuer:       /CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
Certificate serial:       7B1EBAE5F55088FBA79D86C23B4961519E4F7AA2
Authority key identifier: 20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa
Signing time:             Thu 05 Feb 2026 02:35:33 +0000
ROA not before:           Thu 05 Feb 2026 02:30:33 +0000
ROA not after:            Thu 04 Feb 2027 02:35:33 +0000
asID:                     262727
IP address blocks:        189.113.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl
                          rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1e:ba:e5:f5:50:88:fb:a7:9d:86:c2:3b:49:61:51:9e:4f:7a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20453DF9CBCD59107BDF91EC0FDEEE8A867A031B
        Validity
            Not Before: Feb  5 02:30:33 2026 GMT
            Not After : Feb  4 02:35:33 2027 GMT
        Subject: CN=7BC625D2EB79611380D8C4B1498AF8703869085C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:ff:65:ae:1a:a6:17:aa:18:02:71:ad:e7:
                    fb:24:dd:4f:01:d5:d1:ce:82:4a:68:1e:ec:92:bf:
                    c2:a1:b7:94:f9:7f:c5:d0:98:a5:69:a1:6c:6d:74:
                    b6:b8:6c:e9:ae:ee:6c:0c:24:4d:93:21:f6:79:0d:
                    bf:1f:22:43:2b:13:b6:e5:0b:63:f5:f9:4a:30:12:
                    e9:a0:1a:b0:d9:d0:ba:77:cb:24:09:88:47:23:1e:
                    be:41:02:9f:5e:66:86:a9:48:7f:c7:8e:2c:27:95:
                    b5:68:98:8a:d2:35:c4:db:3a:d7:94:12:e4:b6:3c:
                    b6:82:c9:ce:f6:e5:f4:b9:81:d6:38:65:37:0d:db:
                    a9:96:eb:10:0a:d8:e7:ec:c9:23:89:b4:23:38:d5:
                    1f:49:7f:58:60:19:a1:31:51:1a:a7:0b:df:aa:b4:
                    32:37:44:96:d1:f0:dc:1e:37:dd:93:d5:05:ba:c8:
                    59:e6:32:c8:ec:7e:a8:42:b5:17:b5:fc:53:62:0d:
                    75:3c:c6:fb:0e:29:4c:cc:0b:a8:1f:04:7d:32:a4:
                    4d:68:0b:54:74:a2:d5:a3:32:ac:d4:bd:84:2e:c9:
                    54:77:1e:7e:ac:5e:7a:d0:45:b3:26:d4:34:8a:81:
                    74:40:ef:cf:01:70:be:77:58:dd:b3:62:57:c0:67:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C6:25:D2:EB:79:61:13:80:D8:C4:B1:49:8A:F8:70:38:69:08:5C
            X509v3 Authority Key Identifier:
                keyid:20:45:3D:F9:CB:CD:59:10:7B:DF:91:EC:0F:DE:EE:8A:86:7A:03:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20453DF9CBCD59107BDF91EC0FDEEE8A867A031B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/1/3138392e3131332e35362e302f32312d3234203d3e20323632373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:88:bf:f0:07:49:d5:ce:32:4b:02:db:3d:fc:6a:6d:6d:
         fe:be:b8:8f:79:25:73:11:24:76:1c:29:bc:f7:14:39:bc:2a:
         f8:43:48:7b:30:73:3e:78:22:cb:6f:3a:b8:c1:68:6e:d0:11:
         a3:eb:c5:68:53:b0:53:37:cc:49:78:48:96:e3:e0:eb:00:bd:
         36:0c:9b:c3:3a:cd:39:6e:c8:ae:5e:4c:19:cf:9d:d8:cb:85:
         a4:7a:7b:42:ef:53:88:6b:76:68:db:4c:eb:27:a6:88:bc:62:
         1a:a0:bf:ae:d9:e5:b7:8d:57:d8:4c:7f:00:4c:42:34:01:77:
         9d:6d:35:15:9e:e1:c8:42:3f:88:1d:5e:0f:bd:07:1f:20:c9:
         88:1f:2f:27:9b:3a:c2:f6:c4:f9:ea:6f:81:86:92:e4:9c:b9:
         b4:1b:29:e8:a7:78:2f:69:71:73:53:1d:14:97:cd:7e:6a:aa:
         eb:16:25:da:95:04:96:1e:45:50:55:25:1c:48:0e:35:f5:a1:
         7d:0e:56:93:69:0c:21:c2:19:06:77:3e:36:02:25:aa:c9:51:
         a2:26:0e:84:ff:0c:4c:df:ee:59:82:67:46:89:df:b4:a2:e4:
         0f:81:43:d4:58:2b:c1:d9:9c:cc:87:9e:e4:e5:40:3b:73:14:
         32:91:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:49 2026 by rpki-client