Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa
File:                     3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          FkxC3YHrwgn8HBYd19hsDHEzYblvhpikcpydMnB7tL8=
Subject key identifier:   2B:48:0C:2E:53:E1:C0:1F:30:4F:F1:F7:D5:52:77:1A:0E:A5:2E:F6
Certificate issuer:       /CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
Certificate serial:       378D7FC2F0C80EF975AEDE4A294F65C0425D532B
Authority key identifier: 88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa
Signing time:             Mon 09 Feb 2026 15:37:40 +0000
ROA not before:           Mon 09 Feb 2026 15:32:40 +0000
ROA not after:            Mon 08 Feb 2027 15:37:40 +0000
asID:                     263151
IP address blocks:        191.242.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl
                          rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8d:7f:c2:f0:c8:0e:f9:75:ae:de:4a:29:4f:65:c0:42:5d:53:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AD87611FDDC9C99B2157FBC503430DE8745DBD
        Validity
            Not Before: Feb  9 15:32:40 2026 GMT
            Not After : Feb  8 15:37:40 2027 GMT
        Subject: CN=2B480C2E53E1C01F304FF1F7D552771A0EA52EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:15:28:aa:03:2c:41:a9:66:08:42:44:7f:
                    1b:9d:29:82:f4:99:36:3a:6c:55:e0:48:3f:a3:d3:
                    fa:0e:bd:8d:2e:40:a2:41:67:a3:72:05:80:e9:55:
                    87:1e:a0:5d:a1:13:1c:7b:ff:21:ce:a7:6a:63:1c:
                    09:3a:24:fe:89:cd:a0:de:cc:e2:a2:d2:18:4f:5a:
                    ba:d3:0a:d4:e7:e4:2f:cc:16:b7:8b:56:92:d8:6f:
                    4e:79:c3:de:a2:e8:40:8c:51:34:99:b2:d6:41:5f:
                    56:36:22:cf:0d:29:76:68:ba:d7:3d:70:e5:7d:e8:
                    29:22:51:7e:d4:54:c9:13:5d:90:47:af:8b:be:8b:
                    69:40:c3:0c:8d:fe:3f:b5:05:1b:18:b9:00:4d:af:
                    6d:95:6a:32:62:60:95:f7:e1:9d:31:52:62:79:c6:
                    7b:d0:3a:69:3e:ae:1a:3a:c3:8b:b3:73:78:c9:32:
                    51:81:a1:ed:56:f5:cb:80:58:20:2d:07:8e:e3:4e:
                    a0:d8:94:fa:2c:03:99:b9:7a:05:45:67:50:94:c6:
                    e3:16:eb:5f:6f:25:ab:0a:07:b1:ec:34:ed:d5:09:
                    1b:aa:04:66:3b:af:48:11:5a:9d:b9:92:19:86:e4:
                    bb:70:42:e1:57:09:20:ba:6b:9f:b0:50:4c:b9:7e:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:0C:2E:53:E1:C0:1F:30:4F:F1:F7:D5:52:77:1A:0E:A5:2E:F6
            X509v3 Authority Key Identifier:
                keyid:88:AD:87:61:1F:DD:C9:C9:9B:21:57:FB:C5:03:43:0D:E8:74:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/88AD87611FDDC9C99B2157FBC503430DE8745DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AD87611FDDC9C99B2157FBC503430DE8745DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3139312e3234322e3137362e302f32302d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:b7:75:61:f9:82:a4:87:40:67:85:1e:58:ab:f2:59:87:
         a1:2a:aa:b4:97:5f:9b:76:8a:2f:f2:06:3a:31:a3:94:2a:c4:
         98:69:94:a2:9a:da:7c:72:bb:4e:09:5f:d9:af:d9:dd:e7:f6:
         23:d9:ec:4e:3c:30:90:8a:c7:84:62:26:87:1b:d8:b6:12:fd:
         62:91:20:c1:8b:75:ea:f2:f1:ab:5d:52:3e:14:78:36:bb:7d:
         30:4f:e2:2e:aa:d5:7f:9c:58:0d:db:89:6e:3c:c5:80:d3:bd:
         65:56:f4:66:05:13:4d:e4:61:11:7c:4e:3f:fe:fb:ee:28:ad:
         e6:fc:99:31:e6:de:44:56:4c:2a:08:77:b5:90:59:14:55:89:
         45:87:ea:ef:31:2e:0f:c6:1b:92:85:c1:54:74:b0:95:7d:a3:
         97:a7:aa:db:44:2a:ba:50:f6:2a:6e:e2:7d:00:e9:fb:af:58:
         0c:f7:93:ba:77:43:8e:9d:79:d2:e5:c9:4c:1a:51:0f:7f:8b:
         a3:47:02:60:88:37:64:92:af:69:da:fb:31:6a:55:b1:56:74:
         f2:fe:84:86:f5:59:73:5b:ac:ef:a8:4f:cd:ed:ae:81:80:75:
         46:a5:e9:0f:5e:9e:83:66:7e:38:71:9e:7a:0c:e0:b0:5b:2c:
         5c:26:7e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:12 2026 by rpki-client