Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3138392e39302e39362e302f32302d3332203d3e203238363334.roa
File:                     3138392e39302e39362e302f32302d3332203d3e203238363334.roa (raw, json)
Hash identifier:          dP+Exqx6yblDuBAesafJP46VFYhPiDun28jsF6/yRYw=
Subject key identifier:   25:82:B7:4E:E7:E1:53:83:9F:D6:64:F8:5D:68:E7:F5:2A:03:B7:3E
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       68A031D19852CCED6D3F9A4346AFEAF99AA1874C
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3138392e39302e39362e302f32302d3332203d3e203238363334.roa
Signing time:             Thu 05 Feb 2026 08:42:47 +0000
ROA not before:           Thu 05 Feb 2026 08:37:47 +0000
ROA not after:            Thu 04 Feb 2027 08:42:47 +0000
asID:                     28634
IP address blocks:        189.90.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl
                          rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a0:31:d1:98:52:cc:ed:6d:3f:9a:43:46:af:ea:f9:9a:a1:87:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Feb  5 08:37:47 2026 GMT
            Not After : Feb  4 08:42:47 2027 GMT
        Subject: CN=2582B74EE7E153839FD664F85D68E7F52A03B73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:5a:cc:ea:7b:51:ce:24:3d:9d:21:66:5b:
                    ea:f9:3e:c3:17:2a:21:cb:13:f1:7f:79:c8:2e:a4:
                    cd:e0:ef:32:6b:4b:d5:ae:1f:82:bd:9f:1b:b7:d9:
                    7b:c9:d6:81:eb:23:78:ca:79:59:82:28:b0:74:77:
                    95:a7:c4:05:4d:0b:a8:99:c6:36:83:82:f8:33:aa:
                    42:ac:33:00:41:4b:75:36:d0:77:4e:00:f0:68:60:
                    09:27:14:93:79:3c:e2:e0:de:80:a5:15:c7:fd:53:
                    c4:e9:15:6a:89:2b:71:86:ef:d4:2e:cb:d2:33:ca:
                    88:a4:9f:df:c3:38:f2:69:e6:64:c6:04:d3:71:79:
                    27:e2:69:3d:4f:6a:d3:15:4c:8a:c5:f8:b2:cf:7b:
                    94:d4:00:6f:e7:4d:b5:2e:8d:7b:3e:07:19:1c:45:
                    5a:e2:4b:db:70:24:bd:df:23:23:49:6c:bf:be:ba:
                    ce:05:7c:42:f2:ca:65:6b:ea:54:60:99:da:f3:18:
                    44:3f:64:e5:9d:65:af:bf:14:59:ea:ac:c7:f2:11:
                    95:3f:f0:74:92:03:df:33:d6:c4:6c:c0:66:bd:d5:
                    db:51:74:56:eb:f0:9b:6f:0e:c4:aa:df:65:9e:56:
                    66:91:b0:7e:e4:27:9b:b1:a0:ec:ac:bd:0a:20:80:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:82:B7:4E:E7:E1:53:83:9F:D6:64:F8:5D:68:E7:F5:2A:03:B7:3E
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3138392e39302e39362e302f32302d3332203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:81:f4:da:cd:7b:7e:2d:77:ff:a4:a8:73:b3:42:51:ff:09:
         8d:68:3e:c1:bb:dc:72:75:90:d4:b2:6f:2c:e4:b0:81:dd:59:
         76:ac:88:0d:ec:60:41:73:33:b0:a0:d5:09:fe:06:32:c9:bd:
         06:cb:7d:a5:d2:0e:7e:26:a9:4b:5a:a0:73:c7:b6:09:10:c0:
         1d:e7:45:94:55:23:e3:b4:1a:3a:21:2e:88:14:51:5c:6d:88:
         bd:1a:94:cc:dc:af:cd:25:30:f0:05:00:e7:9d:88:66:11:e3:
         d0:b4:d8:8c:80:4e:bb:87:fb:9b:64:c4:1a:80:de:ff:fa:60:
         d4:c2:42:70:14:10:2e:9e:e5:08:1e:cc:30:97:8a:39:6b:cc:
         56:b9:4f:e7:a2:57:15:6f:7e:6e:b3:2f:d6:69:72:45:a1:28:
         5d:61:ec:27:2e:7d:f5:be:d3:b2:93:fe:88:eb:2b:a4:f5:f3:
         01:a0:e5:34:5a:a6:23:c2:58:4b:f3:f8:8f:f1:41:ea:30:c9:
         a9:07:77:5e:c2:46:5a:91:b9:69:23:c8:01:52:62:52:7b:41:
         94:f1:ce:c9:f4:e9:67:f8:27:25:93:a2:60:ad:1d:fc:f6:a8:
         76:01:c7:83:db:32:1d:de:ae:80:c0:e6:65:91:31:22:6b:93:
         44:05:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:22 2026 by rpki-client