Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3132382e302f32322d3232203d3e20323633333332.roa
File:                     3139312e33362e3132382e302f32322d3232203d3e20323633333332.roa (raw, json)
Hash identifier:          oAe5ZI8x+PhHUCpmf3KsFAIICYlp5HwcyegHfksmdjk=
Subject key identifier:   84:0D:E6:1E:BE:92:89:C3:6B:E7:9F:B1:DD:55:77:17:D1:02:06:D4
Certificate issuer:       /CN=576E306418DEE08969A5316F2AE7499BED09EEC7
Certificate serial:       3CCEAA2BB69AE0AAC95DDC76588900FB854D5557
Authority key identifier: 57:6E:30:64:18:DE:E0:89:69:A5:31:6F:2A:E7:49:9B:ED:09:EE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576E306418DEE08969A5316F2AE7499BED09EEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3132382e302f32322d3232203d3e20323633333332.roa
Signing time:             Wed 18 Feb 2026 18:35:40 +0000
ROA not before:           Wed 18 Feb 2026 18:30:40 +0000
ROA not after:            Wed 17 Feb 2027 18:35:40 +0000
asID:                     263332
IP address blocks:        191.36.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/576E306418DEE08969A5316F2AE7499BED09EEC7.crl
                          rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/576E306418DEE08969A5316F2AE7499BED09EEC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576E306418DEE08969A5316F2AE7499BED09EEC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ce:aa:2b:b6:9a:e0:aa:c9:5d:dc:76:58:89:00:fb:85:4d:55:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576E306418DEE08969A5316F2AE7499BED09EEC7
        Validity
            Not Before: Feb 18 18:30:40 2026 GMT
            Not After : Feb 17 18:35:40 2027 GMT
        Subject: CN=840DE61EBE9289C36BE79FB1DD557717D10206D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:f7:30:41:ce:ac:21:72:90:1a:6f:20:61:
                    c1:7e:97:fa:7e:cf:46:e9:f3:51:97:ed:50:a8:3e:
                    bd:9d:08:0c:d1:8b:23:52:91:f0:4c:b8:4b:85:55:
                    48:24:57:46:94:ac:9e:76:bc:63:db:8c:af:6c:a9:
                    bd:76:15:64:c2:a4:fc:5c:fd:92:6c:fb:69:2f:8a:
                    cd:4d:a4:8b:d9:3e:b9:cb:2f:d3:4c:58:d1:5b:86:
                    07:ac:71:55:dc:2c:08:57:36:54:94:b9:3c:24:7e:
                    5a:ef:6c:14:36:31:8a:ab:a2:ba:50:3f:11:e3:8a:
                    33:4f:58:7b:a8:ce:dc:86:07:1b:0c:0e:19:0a:f6:
                    7c:56:b6:9c:9f:de:d7:e2:84:7f:35:cd:2a:fb:39:
                    cc:a6:22:a2:53:c9:61:88:71:ed:72:e0:0d:f2:5f:
                    a7:f6:89:14:d6:fc:17:d9:31:36:f3:e5:78:b0:a4:
                    1e:1a:c3:4b:f5:e2:7e:ed:fe:6a:f1:a6:20:27:2d:
                    ba:b1:be:13:1e:f5:eb:b8:a7:a4:84:17:f2:dd:d8:
                    9b:31:e5:2b:23:7f:a8:b1:7b:22:5b:ae:5a:a9:78:
                    01:0c:7d:91:45:bb:72:ca:b9:2b:c5:43:f0:9b:f5:
                    42:d9:7e:d4:06:a9:c4:a6:bb:06:0f:31:aa:8b:24:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0D:E6:1E:BE:92:89:C3:6B:E7:9F:B1:DD:55:77:17:D1:02:06:D4
            X509v3 Authority Key Identifier:
                keyid:57:6E:30:64:18:DE:E0:89:69:A5:31:6F:2A:E7:49:9B:ED:09:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/576E306418DEE08969A5316F2AE7499BED09EEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576E306418DEE08969A5316F2AE7499BED09EEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3132382e302f32322d3232203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:af:df:ae:3d:d5:38:cf:a3:12:2a:c0:c6:6b:2f:66:1f:eb:
         ca:1d:d4:9c:09:3d:44:b7:6e:34:e3:69:12:2b:f4:87:9f:b5:
         aa:34:fb:c0:78:47:65:49:c0:01:0f:de:e8:72:1d:e7:57:59:
         76:6e:9a:58:7b:6a:00:85:1a:ce:d3:9a:c7:d6:43:69:ea:7e:
         54:c6:fc:c5:ac:2a:64:10:27:30:40:48:3a:a9:d0:e3:5f:04:
         80:fe:35:87:23:25:b1:32:c5:18:e0:26:44:16:d7:8c:91:ca:
         1f:94:fd:5f:42:0c:f2:93:a9:3f:8b:56:f3:1c:23:dc:5a:5a:
         e7:bf:9e:b1:0c:d9:66:7c:69:c4:36:c0:0d:3c:1e:3b:ff:50:
         77:2a:61:8e:26:c0:7a:74:83:ee:cf:44:36:f4:31:e0:9c:96:
         7a:90:c4:e6:dd:e9:91:49:ba:0d:59:ae:c5:ae:43:c4:f8:a5:
         68:da:25:af:ff:8a:2c:e9:82:ff:bc:06:4a:96:44:f0:63:a5:
         f7:ae:27:d9:e7:c0:84:8e:4b:fe:d4:af:6c:49:5d:a6:39:08:
         d9:d0:cc:7e:a7:88:f3:f5:c7:ea:1f:bb:8a:62:fe:c4:68:1a:
         25:fa:d1:6b:eb:97:4a:5b:26:6c:ca:f5:b7:70:a6:2f:d1:a5:
         7a:95:45:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:44 2026 by rpki-client