Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa
File:                     3139302e38332e35362e302f32322d3332203d3e20323730333534.roa (raw, json)
Hash identifier:          EKcgXFnu+IbEZT8PLAUccUxYsxBrLHmqx4FyOw8vJJ0=
Subject key identifier:   6A:18:6A:32:44:98:60:36:E5:3F:2E:4C:90:A5:BB:1A:0E:EC:44:1E
Certificate issuer:       /CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
Certificate serial:       53E343E752E1E42EDDB06B88D31FA40A75444E62
Authority key identifier: 73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa
Signing time:             Thu 05 Feb 2026 00:55:37 +0000
ROA not before:           Thu 05 Feb 2026 00:50:37 +0000
ROA not after:            Thu 04 Feb 2027 00:55:37 +0000
asID:                     270354
IP address blocks:        190.83.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl
                          rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:43:e7:52:e1:e4:2e:dd:b0:6b:88:d3:1f:a4:0a:75:44:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736CC7BD00E444B3C507A4A165D0774513CFB15B
        Validity
            Not Before: Feb  5 00:50:37 2026 GMT
            Not After : Feb  4 00:55:37 2027 GMT
        Subject: CN=6A186A3244986036E53F2E4C90A5BB1A0EEC441E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:ac:a1:8e:73:69:a7:2a:ef:cc:cf:92:e3:
                    71:bf:28:0b:b3:10:2a:75:39:89:c8:c6:98:f0:f7:
                    89:13:ae:1a:5a:7a:eb:27:b6:9c:6e:92:6a:d8:96:
                    11:54:b7:0a:c3:3d:1d:68:07:42:fa:3e:c6:94:c6:
                    90:35:7e:2f:56:e4:97:eb:18:bd:b7:e0:f6:44:58:
                    73:0a:a8:10:b0:3c:a2:d9:73:1e:3a:cb:cc:78:77:
                    ff:da:06:61:c5:37:0a:43:5f:f3:0f:e4:ca:8c:67:
                    09:38:c3:e3:9d:bc:11:f2:9c:28:08:79:95:d0:bb:
                    c2:57:1c:bd:5a:65:74:f4:36:44:81:35:14:5c:01:
                    df:42:39:f2:64:78:c5:df:98:36:24:41:bd:ac:ab:
                    3d:b0:03:fa:7c:94:b1:80:9e:e1:f9:8f:f8:f2:a0:
                    83:8a:d2:75:40:ef:2f:04:c4:f0:82:9c:1e:d9:f2:
                    e4:7f:9c:20:99:12:2f:5f:6b:eb:12:37:58:fb:76:
                    ed:90:e6:21:b7:6b:ea:63:27:99:c9:e0:d1:4f:fc:
                    60:b8:96:71:2f:23:6b:46:c2:43:79:a9:15:ba:d9:
                    1f:1c:c2:bb:6f:a9:4f:e8:f7:63:3e:e1:d4:f8:3f:
                    37:70:83:5f:c4:c8:4f:99:58:ca:2d:32:3c:7e:8c:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:6A:32:44:98:60:36:E5:3F:2E:4C:90:A5:BB:1A:0E:EC:44:1E
            X509v3 Authority Key Identifier:
                keyid:73:6C:C7:BD:00:E4:44:B3:C5:07:A4:A1:65:D0:77:45:13:CF:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/736CC7BD00E444B3C507A4A165D0774513CFB15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/1/3139302e38332e35362e302f32322d3332203d3e20323730333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:60:b8:0a:6c:db:1e:8d:2e:76:76:46:26:f3:73:3c:75:2a:
         93:d7:ab:80:6d:0f:7f:52:16:32:2e:ac:d3:4f:f6:05:d1:0a:
         d6:4b:81:6d:8f:8c:5a:fa:61:ea:59:3a:be:d7:1e:4f:61:d5:
         f5:29:07:8b:cf:3a:83:05:c1:7b:a7:89:af:97:d7:85:9b:22:
         ec:3b:58:ed:48:6c:5c:f1:94:0a:54:77:f3:e7:2b:53:2c:7b:
         f1:7d:06:39:85:1c:7d:32:eb:c5:45:e8:ba:3a:83:ea:cb:9f:
         c4:8c:6c:6a:f6:7e:be:e8:1a:a1:24:cf:64:3f:d5:bb:1f:65:
         a7:00:9d:a0:5e:08:63:93:98:b7:d3:eb:b7:07:79:ea:30:ac:
         d6:bc:8f:0c:16:04:d8:a6:be:33:61:ac:c9:98:5b:07:55:f7:
         19:fe:f5:b7:ed:f6:92:88:99:18:33:7e:e8:d6:92:11:04:f1:
         4c:ed:dd:ec:fa:02:31:6b:bd:eb:f6:4e:5d:ef:3a:27:9f:f9:
         f1:8d:c5:46:53:70:4c:f2:95:49:26:9e:e7:c8:ac:85:cc:67:
         69:55:f5:19:3e:d6:63:1b:9a:e4:2d:bb:92:9f:6d:d2:82:af:
         b3:ea:ab:01:cf:89:ed:3e:88:ac:f5:6b:2a:36:a8:11:38:3d:
         28:35:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:56:49 2026 by rpki-client