Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa
File:                     3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (raw, json)
Hash identifier:          sDeBZRhSqkCYDLKC5rJx5q6smcMqPE7uSMQ9nethdvg=
Subject key identifier:   69:54:C0:CB:22:B9:1A:B2:F3:CE:8F:17:E6:68:0A:FC:B1:26:EE:60
Certificate issuer:       /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
Certificate serial:       FBFBBCDA92CCE3062B8EC9ADBC32126E952741
Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa
Signing time:             Thu 05 Feb 2026 21:26:25 +0000
ROA not before:           Thu 05 Feb 2026 21:21:25 +0000
ROA not after:            Thu 04 Feb 2027 21:26:25 +0000
asID:                     262966
IP address blocks:        186.250.28.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl
                          rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fb:fb:bc:da:92:cc:e3:06:2b:8e:c9:ad:bc:32:12:6e:95:27:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229
        Validity
            Not Before: Feb  5 21:21:25 2026 GMT
            Not After : Feb  4 21:26:25 2027 GMT
        Subject: CN=6954C0CB22B91AB2F3CE8F17E6680AFCB126EE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:40:af:2d:c4:66:5b:34:df:1c:1a:75:84:
                    bc:56:99:4d:6f:00:68:40:39:2d:c5:01:f7:34:51:
                    5e:d4:4e:2a:1d:e2:6b:80:de:18:ae:b5:b9:81:5e:
                    01:d0:18:2b:21:74:78:84:31:0f:12:0c:29:80:ab:
                    19:c7:fc:f2:ab:ec:f7:7f:cd:52:80:e0:7e:cf:39:
                    01:8d:7c:14:4e:0f:b9:a2:04:c5:e4:b4:47:33:81:
                    4b:19:58:b1:6e:da:33:07:ef:f9:f3:70:67:39:62:
                    0a:48:3a:b7:d3:51:a1:bb:ce:cc:8f:c9:89:78:7d:
                    ef:ee:fd:75:7f:4d:3e:55:80:86:ed:17:a7:37:0e:
                    7e:62:f7:32:25:ce:0f:e5:69:ae:3c:c0:99:db:92:
                    8c:7e:52:b6:04:71:e1:1a:dd:d7:12:df:ab:93:67:
                    99:50:8a:34:45:22:e5:eb:c2:81:84:8f:36:6c:46:
                    e0:ab:e4:d7:a0:ea:91:f5:c9:fd:c0:f6:6c:75:8b:
                    6a:cc:e9:f0:ef:1c:86:62:58:bd:56:c8:0a:84:e7:
                    30:a6:9c:40:ad:20:fb:c4:59:51:9d:dc:1b:a9:3a:
                    90:a7:f2:58:e1:23:9c:a2:58:00:89:3e:48:fc:86:
                    8a:2e:85:8e:d8:99:c0:3e:51:c0:d4:55:5e:28:a7:
                    a7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:54:C0:CB:22:B9:1A:B2:F3:CE:8F:17:E6:68:0A:FC:B1:26:EE:60
            X509v3 Authority Key Identifier:
                keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:f2:96:dc:47:f6:77:17:9d:51:63:00:61:ff:88:7c:20:
         3c:52:50:d5:0e:9e:72:8c:e1:a7:67:26:93:14:6b:2a:17:eb:
         49:1e:54:4a:5d:42:d1:1a:9d:e9:df:b5:04:22:c1:d4:7d:07:
         25:62:cd:ce:98:01:d6:f0:60:64:79:ce:e7:53:3b:70:30:9f:
         6e:58:ef:4e:d5:61:f2:66:2d:39:8b:2b:0e:45:07:64:fb:fa:
         b9:21:a1:38:c6:f8:29:fc:71:fa:59:3c:45:f9:d6:40:b5:85:
         04:16:4b:83:30:e8:7d:47:35:2d:74:16:2b:86:0d:b0:3b:b3:
         e7:b9:65:93:44:15:20:08:bb:55:5c:d3:97:c6:44:d1:07:aa:
         a0:78:07:ad:c4:88:e3:db:4d:96:35:bc:fb:e1:15:72:88:e8:
         1a:53:85:12:e6:03:99:b0:75:8b:02:e0:d9:dd:d3:9a:96:2c:
         aa:24:53:b7:3b:96:f4:22:36:70:4c:a4:4d:40:bb:8f:eb:e2:
         2d:6a:5a:ce:fd:39:a1:80:bc:ef:f3:db:31:1c:62:c4:5c:81:
         a5:3f:3d:bf:e1:47:ce:1f:2c:c0:19:eb:ad:20:b5:86:ae:b2:
         03:dd:5b:b5:c3:5a:42:34:76:35:54:34:5a:52:c1:f8:14:ae:
         90:4b:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:57:37 2026 by rpki-client