Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
File:                     3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          uy5+Ub0+wbd3yZfZJgQXFp+3E71SDlBX3bZO2L6OdKk=
Subject key identifier:   31:09:B8:31:F3:87:85:F5:F0:CC:08:42:3E:86:1D:E6:05:34:01:EE
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       32DBF96CE6D27FBFD911D3528F8055748EBE6282
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa
Signing time:             Fri 06 Feb 2026 00:26:30 +0000
ROA not before:           Fri 06 Feb 2026 00:21:30 +0000
ROA not after:            Fri 05 Feb 2027 00:26:30 +0000
asID:                     28279
IP address blocks:        186.208.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:f9:6c:e6:d2:7f:bf:d9:11:d3:52:8f:80:55:74:8e:be:62:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Feb  6 00:21:30 2026 GMT
            Not After : Feb  5 00:26:30 2027 GMT
        Subject: CN=3109B831F38785F5F0CC08423E861DE6053401EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:97:0f:55:41:6b:3c:52:76:7a:a1:8e:16:c9:
                    bf:5a:10:30:14:7f:44:be:42:d0:b3:0d:6c:b2:91:
                    ec:91:e6:04:af:65:43:50:6b:6a:98:bb:94:aa:52:
                    2f:43:6e:f5:56:1b:de:53:39:ca:24:7e:30:1f:6a:
                    06:7a:8b:f0:d4:e9:e1:5d:6b:4c:ab:6e:cb:34:89:
                    b6:52:39:91:e8:80:0a:b8:fe:da:7a:04:ce:3d:8d:
                    d7:b4:08:2e:9f:57:b3:f5:ad:0f:a0:f8:fc:5a:37:
                    65:61:56:d9:ba:ff:84:bf:ff:5e:6b:77:59:1b:9e:
                    07:d1:ad:fc:9b:55:c6:48:ec:64:04:51:ba:8a:94:
                    e0:d8:fe:09:b1:8f:09:74:25:1f:31:4f:6f:38:8c:
                    e3:b7:54:8e:28:09:5a:cd:5f:42:5e:b8:d5:74:1a:
                    b8:1e:23:a1:ef:46:88:0a:d7:a2:27:64:5c:af:ce:
                    ed:14:31:fc:42:21:30:bf:44:62:cb:06:b3:94:58:
                    ea:44:17:21:46:46:8c:6a:95:42:38:39:5a:14:47:
                    65:e2:c8:7a:a2:c0:2d:4e:56:a4:9a:bc:48:3f:0d:
                    c4:84:be:51:03:6a:51:32:fa:80:8a:38:c9:aa:37:
                    6a:5b:e9:fa:5a:24:80:1b:96:8c:47:93:b1:29:78:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:B8:31:F3:87:85:F5:F0:CC:08:42:3E:86:1D:E6:05:34:01:EE
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138362e3230382e3139322e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:1c:44:79:50:e5:81:4b:34:a4:61:74:04:b9:41:0d:98:
         94:5f:2b:83:4c:76:e8:7c:12:21:10:b9:bd:09:36:6d:2f:b4:
         0d:ce:fb:29:3a:53:34:79:27:be:7f:35:14:97:b6:ee:18:de:
         78:c7:dd:5c:15:55:23:5b:20:a3:fc:b5:be:26:d1:d4:05:e5:
         75:86:dc:e5:fd:fa:9f:57:78:d6:6f:e7:24:8f:c0:e9:1c:72:
         de:94:66:72:bf:6a:bf:da:9e:23:58:37:95:5b:3b:75:a5:15:
         77:47:78:52:94:0e:ba:7f:9d:5b:10:35:e9:71:57:3b:f9:02:
         7f:c4:b4:3e:77:33:fd:73:6b:82:7f:c5:7b:19:69:6e:13:b4:
         93:10:ac:c3:53:c5:77:1c:a7:41:08:f3:a4:c8:57:77:6a:78:
         22:e8:53:bc:a5:e8:78:56:b4:67:40:fe:6c:16:3f:c8:5e:c6:
         b3:8e:34:a6:53:0c:cc:35:df:83:3f:52:e2:f5:9a:31:8e:bb:
         b0:dc:f4:25:10:5e:e8:cc:d0:f3:a1:f0:d3:f2:5a:d9:46:29:
         e0:cd:7b:c5:b6:a0:05:6f:a3:b9:19:fc:9d:46:cb:7a:b0:fc:
         53:21:3d:c4:be:3d:5f:03:27:ab:37:dc:25:8a:3a:c7:c1:a3:
         07:ee:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:55:29 2026 by rpki-client