Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa
File:                     3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa (raw, json)
Hash identifier:          7VWp8VlrH2F8795P/bWVu3nUF2cZIwVcG2dpfAxj1As=
Subject key identifier:   B9:B7:7D:E3:15:2B:55:EA:42:A4:8E:67:8D:0A:5A:68:75:23:5D:4F
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       29774170B7B807C4A3210609CCD6722F6249A6F9
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa
Signing time:             Wed 04 Feb 2026 23:57:06 +0000
ROA not before:           Wed 04 Feb 2026 23:52:06 +0000
ROA not after:            Wed 03 Feb 2027 23:57:06 +0000
asID:                     16685
IP address blocks:        200.185.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:77:41:70:b7:b8:07:c4:a3:21:06:09:cc:d6:72:2f:62:49:a6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Feb  4 23:52:06 2026 GMT
            Not After : Feb  3 23:57:06 2027 GMT
        Subject: CN=B9B77DE3152B55EA42A48E678D0A5A6875235D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:de:af:e7:99:48:5d:0a:a5:68:f1:38:97:
                    5a:56:c8:d0:e9:a9:61:03:41:90:2d:fd:a3:d9:56:
                    77:30:78:99:6c:a7:44:e4:3f:64:63:58:7a:32:eb:
                    df:b1:61:d7:7e:a2:a4:20:0d:68:f3:f0:bd:2d:0e:
                    2d:b9:1e:3d:aa:2b:91:20:8f:0a:49:9a:1e:a2:5f:
                    e2:33:6b:ba:b5:55:62:02:38:37:c8:2a:c9:ae:13:
                    e0:2c:cf:1d:4c:c6:07:7f:35:74:e1:ef:df:05:af:
                    8c:69:84:f3:b0:b4:d1:d4:65:c7:ce:28:df:fb:99:
                    5b:31:6b:68:5b:2f:45:41:a2:7c:81:32:c9:e8:27:
                    e7:16:e2:eb:46:72:c9:bb:d9:3b:8a:58:a3:c4:51:
                    89:b4:9a:0e:79:5d:40:7d:6e:08:9a:b4:ee:13:a4:
                    9c:0d:9c:32:52:dd:03:4b:bd:23:e0:66:78:c4:de:
                    25:5e:8c:a8:71:4d:d7:a3:98:59:fa:fa:04:27:4b:
                    a9:59:1e:fb:98:b3:95:45:d8:29:f2:f6:3f:39:3c:
                    70:f8:72:93:36:cd:c4:76:3f:75:3c:b3:65:f9:19:
                    88:42:2c:37:b9:91:85:c8:fc:23:40:fd:45:b3:80:
                    f3:4d:31:10:37:21:a6:5d:da:72:79:03:19:a5:5b:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:7D:E3:15:2B:55:EA:42:A4:8E:67:8D:0A:5A:68:75:23:5D:4F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:33:23:ef:8f:73:95:61:0a:e6:58:a1:18:c9:46:fb:9b:
         7f:48:13:f5:fc:5b:1f:3b:96:29:58:dd:dd:be:43:16:a8:a5:
         9e:f7:83:5b:84:13:6c:92:e4:17:ea:2a:2b:26:82:66:c0:77:
         c6:0d:ed:24:4d:0d:4d:8a:f8:44:e7:52:95:eb:67:1e:e8:32:
         6e:3e:79:40:da:1c:bc:4f:39:b1:8d:74:eb:de:df:52:c0:cd:
         7a:92:2c:b5:26:ff:03:85:f1:8f:6e:96:d4:d1:60:68:df:3b:
         b2:bc:d2:a7:8d:e4:ed:ab:3b:57:ed:ef:8a:a8:a4:e7:d8:14:
         64:83:98:b5:0a:c3:ae:22:ee:6b:ce:ed:5d:f0:32:07:83:de:
         0f:40:24:3d:5c:d3:e7:3c:ca:c2:fa:67:c4:52:df:4f:a5:5f:
         06:ee:9d:6b:01:10:a8:87:80:99:6f:00:74:39:2d:bb:93:88:
         e6:3f:1b:26:0b:7e:6d:97:4c:17:7b:42:e1:9d:45:1a:1c:cd:
         8b:88:ed:9e:ee:fa:a1:a4:92:9e:c6:b3:c8:06:dc:6e:32:fe:
         d0:85:2f:e1:63:bb:fd:be:54:41:21:e3:66:17:60:29:7f:e7:
         b7:ca:df:bb:c4:01:27:c9:cb:db:cc:31:fe:8c:89:39:0b:66:
         8d:bc:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:41:53 2026 by rpki-client