Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa
File:                     3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          R6t8YbiP8J37NnxvaxKEg79IkDOrQdULYzS2P2PHxF4=
Subject key identifier:   81:01:43:A2:8C:31:0E:86:39:66:FC:8D:78:8A:5A:DD:66:DF:E8:DD
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       756182168F5D7615E3A59EDE3A464A1189A8C80A
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa
Signing time:             Mon 09 Feb 2026 15:37:40 +0000
ROA not before:           Mon 09 Feb 2026 15:32:40 +0000
ROA not after:            Mon 08 Feb 2027 15:37:40 +0000
asID:                     263151
IP address blocks:        168.205.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
                          rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:61:82:16:8f:5d:76:15:e3:a5:9e:de:3a:46:4a:11:89:a8:c8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Feb  9 15:32:40 2026 GMT
            Not After : Feb  8 15:37:40 2027 GMT
        Subject: CN=810143A28C310E863966FC8D788A5ADD66DFE8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cf:7c:15:71:71:0f:b5:a8:c2:d0:6b:d7:11:
                    8b:0c:5e:fa:5c:79:70:d0:15:d0:48:53:4f:32:26:
                    42:8e:4d:be:c1:a2:4c:6f:33:fd:64:b5:55:3d:55:
                    11:00:19:d1:99:1b:a2:da:44:54:fc:08:56:56:b9:
                    b9:f0:8d:90:e2:60:09:c4:fa:dd:05:9b:74:5c:d5:
                    65:11:46:23:0f:64:42:70:6c:08:1f:be:2b:7e:63:
                    7d:ac:54:fe:fa:69:90:47:f8:62:7d:dc:a4:ec:ac:
                    82:6e:e9:de:5b:95:44:c6:48:b6:fb:ae:7b:81:86:
                    06:ab:a3:04:aa:fb:5e:9f:05:9e:61:6f:c7:12:f6:
                    d6:83:7c:f8:9e:9e:cf:c1:6d:a3:a6:2a:ba:4d:62:
                    45:3f:8e:49:4a:ea:bb:54:55:fb:4d:de:ac:7d:51:
                    27:c6:d1:2e:82:aa:14:77:5a:17:31:b1:b3:d2:1d:
                    b3:c1:c1:b6:b8:cf:e7:f6:da:94:22:24:47:1b:01:
                    72:59:54:e5:cd:c0:fd:d2:0f:af:45:ea:46:d3:5a:
                    1f:d1:c8:f2:c2:29:c7:73:08:f5:32:89:95:a7:ca:
                    74:f1:c1:35:bd:5a:aa:5b:2d:8e:74:c4:77:83:8d:
                    c6:2e:5e:e2:a2:85:18:93:54:a9:75:81:d6:d5:6f:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:01:43:A2:8C:31:0E:86:39:66:FC:8D:78:8A:5A:DD:66:DF:E8:DD
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:83:51:c7:1e:6c:de:f8:57:10:e7:f0:0a:14:8c:a1:19:0e:
         a3:45:fb:04:7c:5b:0c:ef:10:dc:02:a8:78:3e:22:57:f0:40:
         8a:d0:b6:ff:19:ae:0f:74:0b:7e:c7:0f:0d:79:13:67:36:dc:
         95:73:92:3f:6c:97:cf:c6:a1:f2:91:e1:8d:43:2b:a2:80:46:
         ca:d8:a7:b2:6b:75:03:d6:f1:54:48:3a:e4:c3:99:9d:ec:18:
         2b:bc:ac:c4:01:37:14:9a:0e:3f:ba:79:d8:5e:56:8f:f9:12:
         1d:26:3f:39:5c:99:a7:01:60:31:1b:77:07:4c:a8:54:77:7d:
         7f:d1:05:af:07:47:f5:86:fe:f6:cf:ef:80:2f:be:4b:dc:d3:
         d7:e8:91:db:92:a0:73:43:a9:9a:72:a0:2d:d3:f1:b3:ef:db:
         8f:b9:b7:cd:1b:b3:7d:7e:7b:20:c7:8b:66:74:23:a2:d5:72:
         73:ff:71:f4:22:d5:6d:08:f0:a1:10:88:1e:bb:15:62:25:4f:
         ce:8e:fb:6e:e8:f3:15:2e:93:b8:12:b8:36:9d:1d:c4:46:bb:
         3a:07:3e:37:bd:31:da:bb:6f:1f:a8:0f:08:52:23:e4:e8:f4:
         8e:e0:7d:90:85:00:b7:0e:2b:3f:02:8e:59:67:d9:e7:c2:d1:
         8d:73:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:47 2026 by rpki-client