Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e203232313438.roa
File:                     3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (raw, json)
Hash identifier:          KPlhLJbghxOmXZ2W20EjHWYz82kbpIFeaDPM63shLTs=
Subject key identifier:   3F:0A:BF:1F:BC:75:11:D3:B0:0E:37:B0:68:35:80:10:B8:5D:98:24
Certificate issuer:       /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
Certificate serial:       049F13CC440B9C0E7577471ED4D70520451071E6
Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e203232313438.roa
Signing time:             Wed 04 Feb 2026 23:55:45 +0000
ROA not before:           Wed 04 Feb 2026 23:50:45 +0000
ROA not after:            Wed 03 Feb 2027 23:55:45 +0000
asID:                     22148
IP address blocks:        200.160.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl
                          rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9f:13:cc:44:0b:9c:0e:75:77:47:1e:d4:d7:05:20:45:10:71:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
        Validity
            Not Before: Feb  4 23:50:45 2026 GMT
            Not After : Feb  3 23:55:45 2027 GMT
        Subject: CN=3F0ABF1FBC7511D3B00E37B068358010B85D9824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:f4:7e:9d:43:c3:bd:19:52:cc:1f:c1:f7:
                    74:f2:2a:10:f6:09:43:e3:d9:3b:82:87:eb:9c:6b:
                    66:b2:92:80:f4:c1:61:d4:61:15:e2:e6:bd:f4:da:
                    8c:c1:3c:f9:d9:64:75:4c:79:b4:f5:ab:b8:4c:bc:
                    d0:aa:42:86:4c:d4:61:52:4d:84:09:47:cc:db:cc:
                    fa:0e:04:58:fe:74:26:70:a6:c1:83:5d:5e:0b:94:
                    f3:21:d4:2c:33:3f:90:a1:ec:e5:5d:7b:a1:f3:cf:
                    0f:74:42:72:83:ab:61:19:63:71:0b:31:55:42:fe:
                    2b:2a:5e:95:16:91:0c:15:af:44:f4:5e:eb:64:da:
                    67:37:78:a6:45:3f:2b:98:0b:f9:92:10:12:07:ed:
                    9d:be:da:2b:a6:54:98:43:88:79:74:31:c3:cb:ab:
                    02:4d:22:8a:d5:ad:09:cb:ba:34:4a:96:db:94:fe:
                    fc:27:cc:f0:6b:87:93:12:97:76:2a:34:fc:7e:a7:
                    47:97:1a:6e:8f:51:bf:00:ba:d9:73:22:4a:ab:8c:
                    34:37:d7:a2:f0:43:ee:55:23:4c:47:96:77:6f:b4:
                    ad:05:ec:04:67:a1:10:58:7a:74:a9:a1:ec:32:3e:
                    ce:21:44:f2:91:b8:be:8d:0f:48:c5:20:26:87:17:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:BF:1F:BC:75:11:D3:B0:0E:37:B0:68:35:80:10:B8:5D:98:24
            X509v3 Authority Key Identifier:
                keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e203232313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:43:01:37:f8:d9:39:1a:57:93:30:70:89:57:53:26:9c:
         93:b5:7d:32:29:40:26:c2:9c:66:26:18:63:d9:d8:e0:d2:d4:
         e5:32:3a:6a:dc:ce:da:a3:39:97:c2:5b:2b:0b:84:0c:62:23:
         a8:08:07:a9:6b:0c:ab:77:09:70:ed:53:19:2b:df:00:7a:12:
         3f:4f:d7:af:d5:12:07:e5:49:be:b9:1d:11:74:5f:0e:b5:9f:
         20:6c:c3:4b:63:25:77:bf:d8:50:83:75:93:92:94:41:ae:d8:
         c2:38:81:23:a2:60:69:da:a9:dd:74:b6:2d:c9:0f:0d:d6:2b:
         43:c6:ca:c5:cb:a9:62:e0:40:80:fc:3e:c9:fb:42:af:ce:b5:
         13:a2:8a:29:f7:03:4c:59:70:e9:0f:46:5b:91:12:f2:13:32:
         72:c1:b4:b9:b8:21:e7:f1:d4:97:6f:15:ea:9a:d3:21:5f:b2:
         06:0d:ed:cd:d9:56:ed:47:84:d2:51:37:0b:03:56:0a:b5:8e:
         16:42:7c:b8:08:4c:66:f2:68:9e:8d:53:dd:62:32:d1:4f:56:
         93:fc:2c:bc:2d:17:5a:fc:46:55:1e:4c:5f:38:76:35:64:cb:
         0e:65:28:96:ae:24:02:92:c3:9a:fc:83:cb:49:bf:dd:1b:05:
         0d:8a:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:54:34 2026 by rpki-client