Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3137392e39362e3134342e302f32302d3332203d3e203238363334.roa
File:                     3137392e39362e3134342e302f32302d3332203d3e203238363334.roa (raw, json)
Hash identifier:          VV3slyXw0dXnOyRYL699MDERwdC66RjHXPVvG9vvh+8=
Subject key identifier:   CD:85:A5:C0:4B:C1:6F:4C:3B:96:60:CB:53:CD:45:D6:F4:25:56:1D
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       38E4FDCC59D56309F76FE26C9122E1FD18773A1A
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3137392e39362e3134342e302f32302d3332203d3e203238363334.roa
Signing time:             Thu 05 Feb 2026 08:42:47 +0000
ROA not before:           Thu 05 Feb 2026 08:37:47 +0000
ROA not after:            Thu 04 Feb 2027 08:42:47 +0000
asID:                     28634
IP address blocks:        179.96.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e4:fd:cc:59:d5:63:09:f7:6f:e2:6c:91:22:e1:fd:18:77:3a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Feb  5 08:37:47 2026 GMT
            Not After : Feb  4 08:42:47 2027 GMT
        Subject: CN=CD85A5C04BC16F4C3B9660CB53CD45D6F425561D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:9f:e2:5c:0c:6e:e3:4d:dd:6c:ee:b5:25:
                    e5:ed:a2:36:47:95:5d:4b:33:da:33:20:cb:b8:76:
                    bd:fe:8f:75:2d:6a:88:3b:92:d1:bb:67:f3:10:db:
                    70:91:d8:8f:86:0d:54:5a:f7:65:ed:c9:c3:7c:88:
                    c2:dd:86:e5:0e:0c:a4:41:d6:46:f0:e4:cf:51:02:
                    bb:cd:10:71:16:73:43:4e:ec:b5:b3:da:96:6b:c0:
                    af:4b:53:41:d5:59:3c:aa:9e:30:45:8e:a9:5a:6f:
                    9e:6f:5c:91:e4:6e:c4:0b:7f:4f:73:60:e9:f0:9d:
                    3e:4d:0b:3b:97:7d:c6:c5:b1:22:ca:24:ae:f5:fc:
                    2b:7a:ec:90:5c:fd:67:a4:e1:c2:4b:06:58:71:36:
                    58:7d:8b:b3:38:98:55:60:b5:31:ee:08:46:b4:5d:
                    5a:a9:61:70:df:bc:37:2b:8c:1e:7b:a1:16:99:92:
                    b8:8f:03:7a:94:ad:5f:10:39:e3:57:eb:bf:e2:bd:
                    56:88:27:1c:68:f4:5b:d2:73:a0:19:e7:b8:f4:28:
                    dd:a1:b1:c4:24:c6:4c:f6:04:f9:8d:f9:30:87:8a:
                    62:0c:17:31:b2:78:1a:89:8d:e5:ac:b5:20:76:e6:
                    a3:d6:04:fa:8d:a5:2a:ac:6d:48:9e:81:3b:d3:6d:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:A5:C0:4B:C1:6F:4C:3B:96:60:CB:53:CD:45:D6:F4:25:56:1D
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3137392e39362e3134342e302f32302d3332203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:c7:05:b9:be:b7:40:c2:c9:5d:24:eb:6c:25:2c:f3:7e:24:
         fa:37:81:03:b3:88:d7:fd:b7:89:dc:4e:2c:ff:69:b6:d2:02:
         6a:2e:6a:c7:65:70:dd:2b:76:35:c8:c4:38:08:27:e0:40:a5:
         fc:52:7e:45:6e:fa:22:f0:c5:63:e6:0a:16:82:c5:4e:3b:89:
         10:97:f4:c9:98:89:99:b0:0e:04:7b:06:78:9a:5a:71:de:28:
         34:0f:bf:32:04:74:e0:ba:5c:b7:24:62:aa:4f:2c:6c:47:d5:
         4f:28:16:ed:36:1b:f8:20:5a:3b:6a:1e:f8:1b:22:05:7f:99:
         18:14:50:2f:53:3e:e4:fb:fd:be:9a:66:ed:13:c6:6a:13:98:
         7a:ae:fc:97:44:bc:f6:18:06:30:53:32:0f:cb:50:7c:ec:77:
         8e:33:36:09:8f:d2:aa:37:d7:37:80:a6:30:14:2c:36:39:88:
         80:41:02:ef:d9:2a:20:7d:5f:f6:54:0e:0f:f3:e9:34:5d:64:
         39:a3:02:a6:28:47:60:a6:c8:86:55:d4:2a:71:01:5f:ec:78:
         8d:7a:e1:76:74:fe:23:fa:a2:66:68:de:84:d5:c0:c0:74:a1:
         61:97:bf:ea:1d:05:e7:c5:fc:b0:94:ee:8e:aa:bf:d4:a0:c7:
         54:3f:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:13 2026 by rpki-client