Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
File:                     3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (raw, json)
Hash identifier:          MunMWcGE4HETc/fx/wWttkjb6NqvPHceVVID/y0HOao=
Subject key identifier:   A9:0C:B1:5E:11:6F:0C:B8:28:89:5D:36:2F:A0:17:10:17:36:45:5F
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       7BAFC4A4309436ECB6D6D4C08830CC5DA318D876
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa
Signing time:             Fri 06 Feb 2026 05:00:43 +0000
ROA not before:           Fri 06 Feb 2026 04:55:43 +0000
ROA not after:            Fri 05 Feb 2027 05:00:43 +0000
asID:                     267546
IP address blocks:        191.241.88.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:af:c4:a4:30:94:36:ec:b6:d6:d4:c0:88:30:cc:5d:a3:18:d8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Feb  6 04:55:43 2026 GMT
            Not After : Feb  5 05:00:43 2027 GMT
        Subject: CN=A90CB15E116F0CB828895D362FA017101736455F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:b5:4a:6a:1e:66:02:a4:1d:0c:6a:27:89:
                    e2:cb:2c:d8:a9:34:d2:df:41:15:b1:26:e7:35:e9:
                    6b:5d:7d:bb:aa:27:c4:03:cc:79:57:e5:b8:75:e6:
                    79:d0:02:52:f2:11:72:3d:a8:4e:7f:10:1d:e4:f8:
                    5c:ee:31:3a:66:90:b7:6e:26:28:08:25:42:56:ab:
                    64:9c:d6:2d:6c:f5:36:90:e9:1e:f9:73:b8:e9:a2:
                    0a:30:17:2b:ff:e4:6c:ff:e3:fe:2f:25:4c:6a:e1:
                    2b:39:eb:ff:1c:10:90:80:fb:4b:25:ed:d2:e6:ed:
                    fc:72:0a:c1:ca:e9:b6:61:c7:1c:38:9e:70:18:22:
                    e7:5e:74:5b:c5:5a:57:9a:d7:b3:49:5e:62:3b:22:
                    1b:ff:3b:e1:fa:58:cc:d0:38:d2:33:91:2c:f9:7b:
                    49:2d:69:67:be:ce:2d:43:ea:20:e6:b4:76:f4:00:
                    2e:fb:e8:66:df:a2:70:96:9b:65:34:c4:fd:23:b6:
                    4b:2a:e4:bf:18:70:96:3a:1c:df:23:b9:77:50:9e:
                    13:54:00:44:a7:d9:6e:d4:a7:cf:ff:53:47:c6:e4:
                    ab:ac:b0:e7:c1:46:2f:8e:c3:78:95:58:fe:9a:35:
                    a8:c8:58:55:03:c4:0a:cf:35:41:c6:f8:20:d5:f4:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0C:B1:5E:11:6F:0C:B8:28:89:5D:36:2F:A0:17:10:17:36:45:5F
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:e8:65:02:aa:74:70:0d:0b:f9:fe:f2:8c:37:e3:cd:91:
         05:fe:3d:65:c3:67:0b:07:6c:55:d1:a5:99:6e:8e:02:5d:2f:
         da:93:e8:30:2b:65:9c:78:c6:35:31:94:6c:7a:66:3b:a2:a9:
         96:55:43:fd:27:70:b6:34:d5:66:c6:5b:ed:4e:a9:5f:0b:c8:
         bc:22:99:0a:08:44:bc:3e:23:8b:e4:11:44:12:66:01:66:cf:
         d9:a1:66:e4:96:69:bc:72:17:00:48:57:4f:c7:15:d8:e9:d5:
         5e:06:bf:45:28:29:aa:2b:d0:9a:c9:31:61:3f:db:55:90:6f:
         5c:34:d4:96:28:db:df:18:3e:2f:aa:2c:69:ab:65:86:0c:d7:
         82:2a:e2:17:59:9d:28:7b:af:2f:5e:03:2f:a0:eb:aa:24:d7:
         cc:e9:b3:cd:6c:b5:02:3e:c2:1a:05:e2:77:64:2e:ec:99:b9:
         0e:a5:eb:22:84:c4:f2:81:be:a7:46:5f:5f:4a:21:62:23:ac:
         8e:54:82:b6:6a:1f:bb:b7:18:b0:68:6c:49:d4:ab:df:a3:68:
         9c:bb:51:73:4c:1e:ff:da:41:6a:f4:77:c9:5f:28:29:17:e2:
         e7:51:60:fc:4e:25:72:22:a5:6a:34:69:26:d7:4c:1b:21:d3:
         9e:b6:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:30:59 2026 by rpki-client