Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa
File:                     3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          L2T3+2fhF7uljsxKVARV/F1BnnpIk/WrwQBocyIiEmg=
Subject key identifier:   09:39:DB:22:8F:63:D2:10:3B:84:E6:69:F4:58:84:26:96:0E:C5:CE
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       261C5DAA1ACDAB699D822E2404105185B59A0F34
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 04 Feb 2026 22:00:29 +0000
ROA not before:           Wed 04 Feb 2026 21:55:29 +0000
ROA not after:            Wed 03 Feb 2027 22:00:29 +0000
asID:                     263649
IP address blocks:        170.82.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1c:5d:aa:1a:cd:ab:69:9d:82:2e:24:04:10:51:85:b5:9a:0f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Feb  4 21:55:29 2026 GMT
            Not After : Feb  3 22:00:29 2027 GMT
        Subject: CN=0939DB228F63D2103B84E669F4588426960EC5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:f4:93:45:c5:e1:49:41:f0:d9:ac:59:88:
                    f6:60:4a:3d:90:cc:2d:80:a2:aa:e9:70:2e:7d:17:
                    42:e5:5b:ac:41:25:0d:0d:c0:bf:e5:42:ed:2a:61:
                    c1:5b:8e:cf:9a:53:a6:e7:6e:69:f9:90:ce:34:6a:
                    d2:c0:8a:ad:e8:07:9b:c1:35:28:89:9d:2e:87:ff:
                    e6:56:40:09:de:e8:0e:59:cd:d5:5f:cd:44:aa:c7:
                    74:af:d8:c1:1f:f6:c6:6c:1d:eb:d0:78:1e:c3:92:
                    40:91:31:43:33:c3:39:71:ae:16:21:82:33:a0:d7:
                    e5:22:e4:e9:19:5d:29:ff:1f:46:b3:1f:47:bb:5f:
                    ac:8e:e7:d2:03:85:40:b7:f6:b9:bc:c7:c7:de:d1:
                    bc:e9:06:72:a5:a0:7c:c4:56:a8:89:61:a4:e4:03:
                    5c:f2:86:dc:dc:b2:e3:fc:ff:d8:1d:7d:31:27:d2:
                    43:ae:01:df:3c:d3:f4:fa:2d:23:23:45:74:65:0f:
                    07:7f:82:12:76:90:4d:5e:a0:95:22:80:8f:03:9f:
                    e7:42:ad:f8:95:99:4e:05:30:50:40:95:ec:18:43:
                    a3:60:08:ee:d9:78:40:77:ce:a2:83:89:d0:ef:73:
                    59:7d:61:88:f1:cd:3d:05:a8:21:a6:1d:57:1b:25:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:39:DB:22:8F:63:D2:10:3B:84:E6:69:F4:58:84:26:96:0E:C5:CE
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e38322e3134382e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:86:46:1a:2b:04:24:8f:57:e8:da:83:72:85:1a:d0:e2:a5:
         3f:c0:c2:ed:eb:2b:e9:be:21:c4:2b:bf:15:58:ec:44:0b:c2:
         a6:ee:57:e9:48:da:7a:0c:1b:40:79:39:f3:a8:7b:a7:5f:01:
         83:b0:55:5e:d0:d9:84:e6:ae:78:07:f7:a9:df:68:17:ef:49:
         42:56:33:02:27:e7:f5:9f:6d:de:20:d4:d7:1c:f9:35:82:9f:
         34:8d:a8:18:4a:42:72:52:3c:b2:9a:7e:a9:1a:82:4a:18:e0:
         ce:30:9d:eb:22:ca:b7:d5:ca:40:0b:e3:61:ff:b3:7b:eb:22:
         fe:d3:fb:00:c1:3a:f1:94:5e:cd:af:d8:1d:48:66:b4:42:21:
         fc:32:67:fd:d3:16:7b:c6:78:a6:2d:22:99:d4:5a:f9:22:a3:
         89:f0:a1:41:15:f1:8c:55:db:c7:97:b9:6b:cf:c8:d9:56:e0:
         f2:bc:d1:9a:19:e7:ba:f5:a7:52:5f:79:f1:09:62:6f:89:ec:
         51:81:f4:d4:e8:26:07:ee:91:df:20:c3:87:3f:8f:31:f4:bb:
         5a:ba:66:e8:6f:91:0e:87:cb:ac:a5:67:ea:b0:e1:67:9a:64:
         4d:bd:34:05:b5:21:6d:74:09:b1:e1:e2:24:3d:91:10:af:bf:
         bc:26:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:49:37 2026 by rpki-client