Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3232372e39362e302f32302d3234203d3e203238313330.roa
File:                     3138362e3232372e39362e302f32302d3234203d3e203238313330.roa (raw, json)
Hash identifier:          5SPcMRkHPjy1RvcG/dN0d8mdz4GS720G0SsAuaz4x1E=
Subject key identifier:   21:D7:1F:A8:CB:6D:FA:02:01:E9:59:5D:57:D0:18:AA:0D:65:6F:5E
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       5630C6244B01E36B1FA6B071E611EE4DA22F2A61
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3232372e39362e302f32302d3234203d3e203238313330.roa
Signing time:             Thu 05 Feb 2026 08:16:45 +0000
ROA not before:           Thu 05 Feb 2026 08:11:45 +0000
ROA not after:            Thu 04 Feb 2027 08:16:45 +0000
asID:                     28130
IP address blocks:        186.227.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:30:c6:24:4b:01:e3:6b:1f:a6:b0:71:e6:11:ee:4d:a2:2f:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Feb  5 08:11:45 2026 GMT
            Not After : Feb  4 08:16:45 2027 GMT
        Subject: CN=21D71FA8CB6DFA0201E9595D57D018AA0D656F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:4a:dd:2d:64:96:d5:41:ca:3b:2c:4e:6f:
                    d1:d2:f0:30:ee:1a:ae:ff:df:5a:ab:d3:30:fa:90:
                    a7:05:3a:1f:cc:7c:f9:70:a7:69:59:7c:46:fc:a5:
                    d4:e5:f2:4a:77:a8:d3:a0:bb:c5:68:c8:b4:f2:c1:
                    b9:1e:a7:fe:30:23:af:71:f9:04:50:0f:06:3d:20:
                    11:07:bf:28:1f:34:9b:b1:2a:c0:45:d3:e9:45:b9:
                    28:4c:e4:c4:e6:d8:87:bd:93:8e:2f:97:a0:7d:b5:
                    c3:ec:e0:f6:3e:9b:a6:82:ff:32:95:74:fb:47:b2:
                    55:7b:21:7f:bd:c1:05:e8:d5:51:55:01:82:c1:c1:
                    a4:98:01:16:cb:b1:4c:bd:c4:e8:e5:59:24:36:eb:
                    5d:15:fa:b7:4e:12:3e:02:5d:32:18:0e:07:0b:ee:
                    ff:d9:5e:86:ed:03:1c:14:37:9a:c4:e0:75:30:dd:
                    95:4c:8a:12:6d:dc:15:9a:0c:53:a5:17:98:59:d3:
                    18:b0:00:48:36:5e:07:0f:03:61:45:5c:54:f5:54:
                    79:91:aa:bd:cc:fe:08:ec:47:ff:75:d9:90:9b:52:
                    52:1e:1a:04:5a:55:5d:83:64:0a:76:c4:53:21:25:
                    02:29:af:70:8c:81:43:6d:5e:f7:0f:86:19:ea:11:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:1F:A8:CB:6D:FA:02:01:E9:59:5D:57:D0:18:AA:0D:65:6F:5E
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3232372e39362e302f32302d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:9a:62:1a:fd:68:79:a1:13:e9:e2:8d:55:dc:ba:d7:76:
         4a:4d:ab:46:50:8a:cf:bd:df:51:c6:71:26:f4:0f:9a:2f:03:
         12:78:5e:5a:8a:9f:6e:fc:47:87:d0:a0:14:7d:d6:cf:32:34:
         11:78:72:6d:27:69:37:b8:56:6c:73:48:8c:7f:7a:00:71:c9:
         83:78:73:17:a2:9f:38:9b:98:1f:f6:2a:c2:d6:f9:25:5c:61:
         ef:4d:a1:c0:e6:7a:66:c6:2f:78:03:49:38:96:bb:f3:2d:52:
         10:14:3b:12:80:35:7b:98:3a:3f:34:dc:d4:9f:d4:7b:ca:42:
         00:4c:28:8a:04:48:ff:79:63:6d:e7:8b:f8:29:b4:dd:87:0e:
         3f:f0:f3:49:da:4b:32:89:83:8b:2b:cb:f4:bc:66:83:b9:12:
         50:2f:7c:d9:ec:95:d8:54:45:49:d8:7c:d8:00:50:86:94:66:
         98:84:d6:28:58:13:40:39:3a:25:34:bd:59:70:e3:98:c6:93:
         91:fe:77:ad:c9:13:90:46:4b:49:fb:39:3d:89:b3:e9:f5:37:
         df:9b:a7:a2:62:e3:92:a2:4c:43:1b:1d:04:de:5c:95:be:4d:
         a0:ac:5e:9f:73:a9:00:26:c8:bd:69:17:ed:63:ac:92:28:3e:
         47:8d:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:29 2026 by rpki-client