Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
File:                     3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          bJNYzdZRQO3W+8pXD/AhXGlYjw3ihA+UJ5PrLFttN2c=
Subject key identifier:   FF:B0:24:6A:2C:74:9F:CB:0F:D3:32:50:94:76:97:66:86:EF:5E:66
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       57CE431754BC3695ED6FB7DBA5E4B89261D7A173
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
Signing time:             Thu 05 Feb 2026 05:46:14 +0000
ROA not before:           Thu 05 Feb 2026 05:41:14 +0000
ROA not after:            Thu 04 Feb 2027 05:46:14 +0000
asID:                     264886
IP address blocks:        168.227.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ce:43:17:54:bc:36:95:ed:6f:b7:db:a5:e4:b8:92:61:d7:a1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Feb  5 05:41:14 2026 GMT
            Not After : Feb  4 05:46:14 2027 GMT
        Subject: CN=FFB0246A2C749FCB0FD332509476976686EF5E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:c4:cf:33:10:fd:99:4f:38:dd:75:67:ff:
                    56:b6:9b:3b:64:62:a8:b1:8a:7c:81:5f:36:e0:0a:
                    a9:20:f7:b3:71:93:e5:f9:b9:7a:56:9f:b6:c1:bd:
                    8a:a1:f6:01:12:60:42:5c:be:e1:b3:97:7e:f8:ab:
                    1e:8e:e5:c1:59:aa:7d:1e:c8:0b:b0:44:58:22:ac:
                    34:25:74:56:e4:8b:68:50:26:f1:cb:1d:18:ba:7c:
                    6d:6e:b1:29:4b:bb:b1:05:ba:fe:f8:0b:81:25:55:
                    81:08:7c:f6:6c:92:e5:74:3b:43:84:d2:bf:91:9c:
                    55:3c:ea:8c:54:f3:9d:24:05:49:cf:1f:a5:9e:dd:
                    6a:09:cc:4e:6a:e0:df:f3:66:09:3c:40:1c:46:19:
                    1d:00:b1:b7:9e:a4:0d:9a:26:c1:4d:12:e2:7f:ef:
                    85:cd:38:de:58:b5:7e:22:c6:38:e6:1d:39:85:89:
                    46:cc:52:97:32:11:1f:6c:a2:b1:e9:ea:1a:98:b2:
                    29:24:39:9c:cb:c0:03:f4:dc:d7:f4:1e:e8:d9:7c:
                    65:2c:7c:5a:0c:f4:81:e8:d4:01:32:73:47:a7:58:
                    4c:d2:0a:23:81:ce:8a:23:cb:29:94:db:e1:72:8d:
                    54:6e:eb:8f:e9:dd:7e:90:46:c9:48:44:24:5a:92:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B0:24:6A:2C:74:9F:CB:0F:D3:32:50:94:76:97:66:86:EF:5E:66
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:d2:19:ec:2e:49:6d:aa:f9:26:3b:94:ef:f7:e9:6e:67:c8:
         2d:a3:16:17:93:4a:b9:68:c8:80:8b:a9:9d:ba:06:2c:2e:0f:
         36:95:9b:13:e5:be:cd:44:de:10:27:9b:08:25:4b:d8:53:c8:
         44:2a:50:53:38:cc:5b:48:e1:03:95:58:3c:e8:e3:e2:c3:a2:
         1d:74:80:b6:31:3e:25:30:6b:fd:41:b3:a9:1b:93:54:af:35:
         88:20:ac:ca:31:00:87:04:66:8c:37:c7:dd:3b:cb:f5:b8:d3:
         cd:f1:68:81:a5:a3:77:b0:e1:1b:e4:40:f9:f7:9c:a2:56:db:
         82:87:8a:4b:73:00:79:fd:f0:03:67:de:45:cf:0d:dc:c6:a4:
         57:44:f6:32:aa:0a:4c:5a:bd:ab:67:50:ac:1a:55:ac:58:9c:
         2e:91:a5:5a:31:da:77:14:6f:e4:f1:8f:87:ab:db:8f:f7:32:
         61:ed:72:7d:62:42:c9:5a:13:dd:60:fe:e7:69:bf:12:01:a0:
         2a:0e:e2:5d:83:5b:53:c0:f7:8c:37:9c:c9:d3:92:a3:40:27:
         5d:a3:93:47:05:d4:37:ba:7d:ed:d8:e7:e7:88:65:aa:4f:4a:
         7c:5e:00:de:13:fc:1a:76:f1:b9:5e:70:1c:a9:57:9b:56:f8:
         ca:a5:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:22 2026 by rpki-client