Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
File:                     3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa (raw, json)
Hash identifier:          NR55+MVZHBjF2fKdMj4tH/R8SdrvlyVDzAQupBQ13ws=
Subject key identifier:   5F:2F:CA:D4:5C:C9:16:D5:66:BA:DA:92:A8:E9:ED:86:05:25:84:68
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       6EC70F8F3164D2010079428AE1BE2E24C6DA2B26
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa
Signing time:             Thu 05 Feb 2026 19:48:07 +0000
ROA not before:           Thu 05 Feb 2026 19:43:07 +0000
ROA not after:            Thu 04 Feb 2027 19:48:07 +0000
asID:                     265421
IP address blocks:        168.195.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c7:0f:8f:31:64:d2:01:00:79:42:8a:e1:be:2e:24:c6:da:2b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Feb  5 19:43:07 2026 GMT
            Not After : Feb  4 19:48:07 2027 GMT
        Subject: CN=5F2FCAD45CC916D566BADA92A8E9ED8605258468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:2d:61:d7:ec:3c:44:d7:c0:19:ef:45:94:
                    f9:f5:dd:12:31:c5:74:16:5c:10:0f:9a:42:01:0e:
                    ea:f3:ba:d5:c1:1d:54:44:0d:3a:f1:77:06:16:af:
                    5c:91:a4:af:09:ed:51:ad:0a:a5:97:6a:b0:c5:bb:
                    9a:fe:f3:0f:3e:9d:4e:1c:c1:3f:f8:70:f6:43:ac:
                    d4:03:ca:17:83:ce:aa:bc:4a:5e:94:57:2c:51:ad:
                    fb:9c:f4:d0:4f:86:25:6e:11:dd:99:8f:5d:71:32:
                    95:a3:0d:22:49:54:fb:6c:00:28:64:36:b8:d3:67:
                    94:1d:65:02:0d:ad:83:a1:ab:20:0f:9f:b2:04:67:
                    08:3b:f3:a3:67:56:1c:8e:74:55:b1:1a:6d:23:32:
                    af:89:ec:23:02:0d:d5:10:09:25:10:ab:5b:cb:d2:
                    d3:f4:2e:f9:4d:fc:44:8a:34:91:e7:1f:6a:e7:c2:
                    b9:8d:5b:98:09:d4:95:bb:e3:ed:74:df:04:24:e1:
                    27:40:2f:4b:d1:91:99:40:d6:54:52:d7:b3:df:66:
                    df:86:fb:04:d9:46:c0:14:d1:fc:c1:9b:a9:1e:64:
                    b8:48:fd:fa:71:c7:6e:af:5c:bd:b3:58:3f:af:d8:
                    1c:d1:24:17:88:17:16:68:06:15:9d:b9:3e:fa:77:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:CA:D4:5C:C9:16:D5:66:BA:DA:92:A8:E9:ED:86:05:25:84:68
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/3136382e3139352e3133362e302f32322d3234203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:d6:05:b1:86:0b:13:f9:c8:00:b1:77:ee:54:40:14:8a:
         84:16:11:67:dd:41:37:6a:3f:20:50:a8:a9:15:e9:79:fb:c0:
         e1:96:cd:c4:6a:fa:2a:b3:0f:e3:ba:89:f4:92:42:7f:2e:c4:
         1e:fe:1c:18:e4:05:5f:79:ff:d3:b0:b8:90:07:b1:a8:a7:3d:
         f9:4a:ce:18:43:26:5e:b4:c2:2f:13:9e:3c:0c:17:35:0a:0a:
         23:49:d8:eb:55:be:db:c0:68:59:ad:da:5f:5b:e1:1c:e1:8f:
         00:30:95:2a:cf:0f:05:e9:ad:cb:15:e4:e0:52:db:0b:a9:13:
         43:7f:bf:15:66:6d:46:ab:3a:f2:28:8b:20:9f:00:05:f0:75:
         c2:5b:87:87:a8:e3:20:af:46:ab:61:0b:f9:97:33:ee:65:58:
         08:01:7d:e1:c5:6c:a2:d6:cb:9b:64:19:99:2c:06:42:30:41:
         83:67:e2:26:8d:a5:73:f9:16:1d:30:67:8d:8a:0a:5f:da:02:
         25:a9:d2:f8:30:2e:ea:7a:48:c5:f4:89:04:c1:bc:b6:4b:d8:
         60:f8:73:bf:bf:08:a8:a6:74:8f:0e:50:2a:9e:ed:da:aa:ec:
         24:da:00:ed:f1:4f:48:02:a5:3f:0f:50:c1:e6:11:7d:6d:ed:
         5b:ed:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:55 2026 by rpki-client