Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
File:                     3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          dujJnEMWFxs9mPtcl21Q5X4VQPWPN2cPyShzi4EGMh8=
Subject key identifier:   D2:CD:6C:EC:20:CE:39:AA:65:15:D5:EC:0B:60:5A:27:EE:0B:B1:E1
Certificate issuer:       /CN=9A705AE47CA3B06117A7D60A5C1DF68C898AA415
Certificate serial:       2983F17DECF72565BEF471BF47E645424F0FE9E5
Authority key identifier: 9A:70:5A:E4:7C:A3:B0:61:17:A7:D6:0A:5C:1D:F6:8C:89:8A:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa
Signing time:             Sun 18 Jan 2026 06:00:23 +0000
ROA not before:           Sun 18 Jan 2026 05:55:23 +0000
ROA not after:            Sun 17 Jan 2027 06:00:23 +0000
asID:                     263631
IP address blocks:        168.205.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:83:f1:7d:ec:f7:25:65:be:f4:71:bf:47:e6:45:42:4f:0f:e9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A705AE47CA3B06117A7D60A5C1DF68C898AA415
        Validity
            Not Before: Jan 18 05:55:23 2026 GMT
            Not After : Jan 17 06:00:23 2027 GMT
        Subject: CN=D2CD6CEC20CE39AA6515D5EC0B605A27EE0BB1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a5:cd:a8:bf:99:19:5a:9d:42:fc:90:8b:ac:
                    21:02:dc:7b:5b:dc:c4:8a:bf:20:73:34:12:0d:79:
                    ff:63:2a:2b:ce:64:c6:57:6a:31:e1:66:d9:5f:23:
                    a0:44:0a:3c:86:97:bf:b9:e7:58:7b:1c:ee:f9:0e:
                    e7:b6:16:8f:7a:43:f7:59:90:1d:94:40:44:cf:31:
                    9b:f9:0c:c2:74:ae:28:b9:3e:11:7c:33:e1:ee:32:
                    46:82:6d:40:17:30:b0:08:c1:aa:53:0d:9f:77:04:
                    0c:0d:13:ce:af:d5:dc:49:c8:d3:30:f8:f9:6f:17:
                    06:b7:71:b9:4c:1c:21:44:a1:bf:80:b9:10:5f:d1:
                    8e:71:05:7a:04:32:b6:81:61:85:c3:ec:4a:4c:69:
                    b8:91:28:da:13:63:63:19:c3:74:59:33:da:4c:a6:
                    e1:90:57:a4:1e:61:68:74:44:47:6b:96:83:c5:06:
                    a2:15:94:ab:25:92:28:64:f3:95:5a:8c:dc:f2:19:
                    13:d1:90:d0:76:d2:5b:94:6d:f7:4a:fe:01:28:11:
                    7e:66:47:ef:56:d8:77:50:fd:51:84:68:9b:9c:7b:
                    82:93:15:2f:dc:9f:68:34:82:30:c0:f6:0a:67:18:
                    0c:7e:89:9d:74:17:8d:32:07:2a:5b:09:42:bf:87:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CD:6C:EC:20:CE:39:AA:65:15:D5:EC:0B:60:5A:27:EE:0B:B1:E1
            X509v3 Authority Key Identifier:
                keyid:9A:70:5A:E4:7C:A3:B0:61:17:A7:D6:0A:5C:1D:F6:8C:89:8A:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3136382e3230352e38302e302f32322d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:72:c7:03:d5:0c:5e:ee:a4:b4:8c:62:84:b9:e6:5a:3a:44:
         8b:e4:69:29:68:cf:2e:6b:78:98:ee:0e:15:53:d4:3b:c3:2b:
         8e:ea:36:23:69:45:03:0c:3f:ef:d2:ba:ef:ef:d8:da:12:97:
         d0:25:94:91:4e:33:b1:57:8b:1a:66:45:22:b5:18:e4:cc:03:
         87:3e:e6:96:9d:c4:a9:3c:e5:9d:ed:43:0d:41:23:2c:79:7d:
         b8:93:7c:b5:b5:09:41:fa:78:1d:c5:8a:9d:91:05:19:f3:86:
         d1:69:07:7d:1a:0f:21:ca:b4:e4:02:05:4e:d1:a0:0e:f8:ad:
         c2:22:ad:5a:42:a6:02:7d:68:cf:37:c0:ae:80:a3:8f:bf:c9:
         f7:a1:48:c3:f0:85:f1:e3:86:13:57:65:c6:21:d2:6a:b4:5b:
         ce:97:a8:0d:11:81:cb:21:3c:d6:2e:bf:6d:74:d2:55:0b:4d:
         de:2f:e4:c9:21:4d:54:24:8c:0a:39:b8:f4:14:8d:91:d5:42:
         3a:5f:73:82:1d:2e:4e:6d:68:da:08:b5:85:d0:48:9c:49:d6:
         41:cc:4e:6c:f3:29:7f:37:82:e7:19:94:cf:08:9a:22:89:ac:
         4c:00:56:60:88:04:88:a5:c2:9c:27:9c:9f:61:a5:51:6d:ed:
         a1:54:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:41:19 2026 by rpki-client