Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          j6EZlTh46FwpYMkdCJqOCf/JWZDY7qeN2STXa3jOiO4=
Subject key identifier:   D6:A9:A3:BA:AA:85:67:48:40:B7:AD:58:61:75:05:EF:5B:20:F1:BC
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       77CE88D12FE3C21A8D5124DCC4BC87ADE8B2E873
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa
Signing time:             Thu 05 Feb 2026 18:42:31 +0000
ROA not before:           Thu 05 Feb 2026 18:37:31 +0000
ROA not after:            Thu 04 Feb 2027 18:42:31 +0000
asID:                     265885
IP address blocks:        128.201.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:88:d1:2f:e3:c2:1a:8d:51:24:dc:c4:bc:87:ad:e8:b2:e8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Feb  5 18:37:31 2026 GMT
            Not After : Feb  4 18:42:31 2027 GMT
        Subject: CN=D6A9A3BAAA85674840B7AD58617505EF5B20F1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:75:5a:3b:fb:77:ac:7a:27:5b:89:65:59:
                    42:bb:9d:56:b0:a7:ae:a8:1e:f3:28:f6:88:4f:04:
                    e3:d8:7c:e3:d5:60:3a:59:a6:3b:f9:39:5b:4f:c2:
                    4b:bc:d0:66:34:cb:55:c0:d0:dd:29:c7:2b:b5:30:
                    94:8a:9e:c2:da:43:6c:0d:da:4e:8f:3f:8f:35:43:
                    8b:27:c1:ee:09:4c:2d:e2:28:dd:62:63:2c:94:bc:
                    f4:5b:8d:66:69:61:a1:e2:e0:9c:56:bf:8d:32:fb:
                    12:2d:9b:67:de:98:f6:15:0b:49:7f:21:06:ad:e2:
                    79:37:aa:3c:c0:43:1e:d9:0f:64:16:04:a2:f4:2f:
                    e0:52:ec:4c:cd:dc:8d:24:90:39:2d:f8:4c:0c:99:
                    71:56:67:48:f8:fd:d2:6b:86:5b:a5:1d:31:e5:0a:
                    ca:f6:5e:47:b1:74:37:d9:93:14:3c:a6:25:93:ee:
                    bc:12:ed:70:81:6b:cb:59:c2:72:23:9c:e0:d1:7b:
                    8a:2b:f1:81:6f:14:b9:17:08:ff:78:92:fe:9a:7c:
                    cf:c4:0d:92:1c:49:12:45:f2:e8:49:cb:41:45:07:
                    a6:a9:bf:a7:4a:7d:91:b0:68:83:f4:96:89:be:c7:
                    a4:eb:08:de:e4:44:c4:5c:56:00:9f:9a:ca:2f:17:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A9:A3:BA:AA:85:67:48:40:B7:AD:58:61:75:05:EF:5B:20:F1:BC
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234362e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:83:a1:0c:a3:fe:95:0c:29:a8:8c:37:e5:a7:d2:72:77:0c:
         0d:53:1c:45:94:4f:39:92:fe:e7:f7:82:67:fb:17:6c:a0:c9:
         09:3c:b8:c8:71:15:7f:da:d1:47:d1:d6:ed:85:a5:50:68:a0:
         f4:c4:26:2f:e8:5b:ac:bd:4f:ee:89:0d:6a:7e:3e:1d:d9:e6:
         09:c3:75:9d:25:c6:42:c0:81:d7:99:2d:f7:5d:c4:cd:c1:b7:
         77:a3:15:3e:e9:30:c4:26:cb:36:cd:15:e2:2a:de:e7:1e:2e:
         53:58:42:99:eb:12:49:7e:65:a0:dd:30:f4:82:fa:72:50:67:
         58:e2:79:6f:66:2f:1d:d8:9d:51:cc:18:43:d3:3c:03:a7:bc:
         d2:38:dc:8e:fb:dc:d7:00:08:15:1a:67:3b:35:e5:c4:12:f5:
         b9:e7:0c:0e:a3:59:3c:b3:13:61:dc:27:22:a4:b0:39:72:90:
         9b:08:0f:36:af:a3:9d:e3:ec:a5:ff:da:62:98:85:cc:99:17:
         6a:22:7c:20:aa:bd:8e:46:ea:51:24:b7:97:3b:ae:8f:d2:52:
         82:82:71:2e:8c:9e:3c:73:05:87:9b:05:63:65:90:16:cb:ea:
         19:f7:91:33:d0:5f:71:5e:28:8b:e1:5a:1a:79:6e:3c:d1:0c:
         f0:a9:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:45 2026 by rpki-client