Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa
File:                     3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa (raw, json)
Hash identifier:          B8WpVxFEnHt5uoIO7E42tS5s8cIDuz12nAL1MpfR9ec=
Subject key identifier:   0D:47:EF:8B:7F:80:5D:01:FC:A0:DE:83:20:3C:3A:C8:C8:35:3D:41
Certificate issuer:       /CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
Certificate serial:       24EDB73E19E6DCB1A07ACD3CA75974F77F397B18
Authority key identifier: D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa
Signing time:             Sat 07 Feb 2026 15:31:49 +0000
ROA not before:           Sat 07 Feb 2026 15:26:49 +0000
ROA not after:            Sat 06 Feb 2027 15:31:49 +0000
asID:                     271246
IP address blocks:        192.231.118.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl
                          rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ed:b7:3e:19:e6:dc:b1:a0:7a:cd:3c:a7:59:74:f7:7f:39:7b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D9739B5280D82829AFAD531E39D5FA86E04AD0
        Validity
            Not Before: Feb  7 15:26:49 2026 GMT
            Not After : Feb  6 15:31:49 2027 GMT
        Subject: CN=0D47EF8B7F805D01FCA0DE83203C3AC8C8353D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:65:e2:04:a9:51:1f:ac:51:34:6b:3a:02:
                    fb:53:78:b4:b2:2d:9e:05:1c:8d:82:fa:22:b1:dc:
                    ae:3b:53:d1:9f:cd:05:5a:3b:a0:62:01:ed:dd:87:
                    06:2f:04:28:77:5e:11:cd:9d:7e:52:1f:7f:fa:d0:
                    b2:b0:75:a2:f5:82:90:0c:94:61:8b:81:06:2f:a9:
                    2f:b1:6d:be:79:90:ed:7e:bb:1a:ed:2f:cc:b4:83:
                    d5:42:36:e8:f5:79:ab:2f:b3:4f:ba:51:1f:e7:75:
                    1f:61:c9:8a:6c:a8:3a:f6:2f:d2:b9:fe:48:06:b2:
                    37:1b:5e:c7:f0:c5:cf:35:18:7b:de:22:ea:f4:54:
                    40:f4:81:65:a5:40:04:83:ce:7b:16:a1:15:41:9c:
                    4f:a3:8c:0b:e5:51:e4:d4:d8:12:c7:19:c0:22:9d:
                    08:d4:f3:57:9d:7f:43:c9:cd:4c:cf:26:e1:7e:57:
                    fc:55:c2:8b:19:12:d2:d7:4a:92:16:75:02:19:ce:
                    f8:ca:05:85:43:05:82:47:0f:c4:8a:8e:83:7d:31:
                    66:64:c4:41:b6:fb:ca:62:b2:c9:0a:a4:9f:67:86:
                    56:31:b7:92:5a:c7:10:bd:8c:3f:bf:4a:e4:5f:a0:
                    8c:51:60:f7:e3:68:de:8b:ce:35:14:14:2a:e9:a6:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:EF:8B:7F:80:5D:01:FC:A0:DE:83:20:3C:3A:C8:C8:35:3D:41
            X509v3 Authority Key Identifier:
                keyid:D6:D9:73:9B:52:80:D8:28:29:AF:AD:53:1E:39:D5:FA:86:E0:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6D9739B5280D82829AFAD531E39D5FA86E04AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/0/3139322e3233312e3131382e302f32332d3332203d3e20323731323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:91:29:50:98:4d:5f:82:ac:c2:18:24:73:76:f9:75:b8:46:
         ad:a5:b9:e1:71:8d:08:f5:93:d9:17:56:fd:0b:08:b1:15:75:
         88:ad:09:4f:d8:8a:86:c3:42:7c:70:ec:cb:8b:9f:38:2a:64:
         06:a7:32:e9:1e:87:49:78:25:9d:58:a3:ab:d6:4b:b4:e6:2f:
         35:95:a6:3e:85:f8:e7:ec:1f:11:2f:4b:45:33:56:0c:d4:c5:
         bb:95:44:45:1d:84:8c:89:3a:f6:d5:9b:25:a6:53:6d:0a:1e:
         ea:6d:6c:8a:70:60:73:33:39:54:96:8d:9e:f2:af:df:f5:93:
         17:78:8c:d7:36:56:b4:64:bc:2e:4f:b2:85:16:f7:c2:63:14:
         9c:45:1e:00:20:9e:2b:34:ef:9b:72:53:97:6a:5b:3a:86:fe:
         d4:bf:69:ba:8e:42:87:2a:e2:28:34:80:ab:7d:b2:4e:3a:bd:
         91:b1:69:7c:b9:cd:67:76:66:db:cf:01:2e:af:9d:54:50:d9:
         73:a0:fe:08:1b:db:23:b8:34:44:90:29:44:46:d5:76:dc:f5:
         b3:2a:cc:26:70:06:4d:08:e4:38:71:d5:d2:d7:da:67:c4:82:
         46:bd:dd:00:d5:b7:ea:ce:19:72:a2:83:22:3a:d7:fc:7e:17:
         b8:a5:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:30:01 2026 by rpki-client