Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/3136302e32302e36382e302f32322d3234203d3e20323636313436.roa
File:                     3136302e32302e36382e302f32322d3234203d3e20323636313436.roa (raw, json)
Hash identifier:          TapenVNoEieVcwWd6B9r0uScHqBjYnewtVK+7i37/i0=
Subject key identifier:   5E:2E:E7:6A:4F:DC:AE:D7:84:E5:AE:05:05:BD:08:F5:EA:B8:20:87
Certificate issuer:       /CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
Certificate serial:       0AF08B7E22CEDE4E8FCB00DFEA7AAE0400C838B0
Authority key identifier: 05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/3136302e32302e36382e302f32322d3234203d3e20323636313436.roa
Signing time:             Thu 05 Feb 2026 09:05:43 +0000
ROA not before:           Thu 05 Feb 2026 09:00:43 +0000
ROA not after:            Thu 04 Feb 2027 09:05:43 +0000
asID:                     266146
IP address blocks:        160.20.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl
                          rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f0:8b:7e:22:ce:de:4e:8f:cb:00:df:ea:7a:ae:04:00:c8:38:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
        Validity
            Not Before: Feb  5 09:00:43 2026 GMT
            Not After : Feb  4 09:05:43 2027 GMT
        Subject: CN=5E2EE76A4FDCAED784E5AE0505BD08F5EAB82087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:97:0c:26:33:c1:9b:6a:bb:64:24:e8:48:
                    e8:66:16:48:e8:df:98:05:20:93:aa:4f:92:54:74:
                    04:c0:e7:2a:2d:5a:64:a5:93:3a:6c:cb:d8:39:80:
                    ad:ed:e0:49:c5:ad:f1:7c:85:21:ed:74:3d:d0:e0:
                    a7:a2:83:21:56:c8:2f:f7:ba:74:82:72:ff:ff:df:
                    23:53:5f:36:50:7a:85:01:ce:41:7c:c4:ef:72:38:
                    00:f9:57:14:a8:b9:03:29:c1:e5:0a:8a:83:97:b5:
                    90:c7:3d:41:ff:41:74:a5:32:c4:a4:dc:2b:4f:2c:
                    96:75:4d:8b:7a:c9:1b:81:5c:3d:30:87:9e:59:11:
                    48:97:5a:f8:1c:c1:3f:84:af:01:3f:4d:61:93:43:
                    6b:70:f2:fc:28:9e:3d:73:c8:05:34:cd:26:36:21:
                    36:10:96:6c:8f:65:c3:27:64:ef:62:2d:b3:e7:4c:
                    ee:b4:2d:6b:2a:fe:24:e0:15:a2:3d:f1:9f:9f:5e:
                    44:d7:f5:4c:2c:5d:b6:4e:13:ba:54:61:53:6d:70:
                    c4:59:2a:6c:6b:df:af:28:c4:a0:a6:7b:45:d2:19:
                    b9:09:8c:d0:7e:e4:c0:e4:40:f4:e6:c6:b3:59:b9:
                    47:20:91:c7:26:1c:90:1f:62:cf:07:1a:2b:f4:5d:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:E7:6A:4F:DC:AE:D7:84:E5:AE:05:05:BD:08:F5:EA:B8:20:87
            X509v3 Authority Key Identifier:
                keyid:05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/3136302e32302e36382e302f32322d3234203d3e20323636313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:ac:a8:b5:3a:1b:14:b2:22:a7:d4:5c:f3:d2:2b:b5:86:73:
         74:52:60:f0:99:4e:8c:84:35:2f:55:82:61:ba:46:88:8d:37:
         2b:28:9a:1d:55:13:82:d5:8d:f4:ac:85:90:b7:ed:ca:6a:81:
         15:8f:fc:e4:fd:10:1e:48:56:b4:0e:56:16:cc:50:bf:47:94:
         26:04:af:16:cc:e4:28:42:92:0e:84:19:78:65:24:57:4f:c7:
         d1:c8:f8:e7:85:c1:61:0a:33:51:66:7b:d6:ba:e2:6f:50:50:
         8e:df:77:e3:b8:cf:3b:0f:8d:81:26:41:a3:a9:e9:e9:6d:18:
         36:91:4d:1e:d9:9c:1e:f2:45:11:ed:b4:19:30:51:3d:9d:50:
         76:82:a2:35:78:a0:1c:8a:2c:43:69:98:98:bc:42:6e:ce:14:
         84:cc:45:f7:de:59:0c:e4:bd:bd:f6:4c:ce:77:60:79:bf:f9:
         45:a3:1e:11:72:80:e1:55:38:f0:7c:4f:bb:4b:f4:81:e9:45:
         c5:5d:0e:57:fc:74:cf:ae:61:14:4f:2c:8a:82:14:a3:01:f9:
         cf:a9:e1:07:c3:2c:7a:5e:5b:3b:5c:f2:53:f5:d1:64:de:b4:
         82:42:53:2e:87:32:d9:5a:28:de:b0:85:95:07:9d:9c:81:1a:
         ba:f5:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:40 2026 by rpki-client