Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa
File:                     3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          q6WyP+0wXnvtz8TBjO6FuJlIl6JE0dp4RvztsVXxGLQ=
Subject key identifier:   81:2A:E4:6A:F1:62:3B:5B:58:1C:A5:84:8D:35:D4:41:48:BB:FA:C8
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       2D7CE2C7B27A4A278AB81F087AF75B447DEEE83F
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 05 Feb 2026 08:16:45 +0000
ROA not before:           Thu 05 Feb 2026 08:11:45 +0000
ROA not after:            Thu 04 Feb 2027 08:16:45 +0000
asID:                     28130
IP address blocks:        186.251.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7c:e2:c7:b2:7a:4a:27:8a:b8:1f:08:7a:f7:5b:44:7d:ee:e8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Feb  5 08:11:45 2026 GMT
            Not After : Feb  4 08:16:45 2027 GMT
        Subject: CN=812AE46AF1623B5B581CA5848D35D44148BBFAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:e7:75:a1:9e:7a:9b:b4:b8:b5:09:1b:04:
                    90:c7:dc:5e:d5:79:91:5d:ca:95:17:48:f3:09:6b:
                    01:a9:97:d0:47:1c:ec:e7:a2:4f:cd:50:6b:80:a6:
                    fa:8f:85:18:70:65:19:eb:2b:3d:aa:f6:82:0f:6a:
                    b3:f4:a7:f6:ca:a5:a3:14:39:5f:57:d4:f3:d8:be:
                    0b:4a:90:d2:ab:e3:18:0d:be:73:38:d9:83:da:46:
                    26:78:08:db:6a:93:4b:bc:bb:e0:54:58:78:b3:c3:
                    94:b7:70:ef:af:0a:c6:63:72:3b:d2:8a:9f:06:fe:
                    86:20:d1:39:b3:55:bd:51:6b:3e:27:74:e9:a5:1d:
                    c6:c1:68:f0:85:ee:0c:7b:d1:84:18:f9:f1:08:c9:
                    9d:e1:54:af:04:9d:d2:66:a0:83:00:18:7c:9d:65:
                    76:26:da:73:d3:25:ca:27:12:35:c0:b4:01:80:18:
                    5c:4d:d5:f4:75:fa:b3:a2:99:01:ed:28:09:e8:cf:
                    24:49:19:42:88:ac:99:bf:23:7e:de:a2:bc:7e:ab:
                    9c:60:2d:1f:57:fe:d4:94:3f:d1:da:03:c6:ef:20:
                    40:81:30:19:e8:10:0b:f3:9c:fc:c4:e1:58:eb:7b:
                    a0:33:fd:65:f2:42:cb:57:40:56:d5:49:7f:bb:76:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2A:E4:6A:F1:62:3B:5B:58:1C:A5:84:8D:35:D4:41:48:BB:FA:C8
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138362e3235312e3134382e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:e8:f9:37:ba:18:94:63:0c:9c:0c:18:01:5b:b3:9f:0b:c4:
         e7:b6:57:52:10:bf:12:e4:58:d1:8f:81:28:99:6d:49:e3:36:
         ac:50:66:04:d9:31:33:3c:4f:4d:03:e0:97:4b:32:ce:a0:3f:
         f7:a5:0f:9f:f0:45:e5:f7:27:b4:a5:ff:39:cd:5e:4b:39:65:
         8e:fd:e5:bf:6e:ad:58:c0:a1:15:1c:ca:19:c9:57:dc:50:09:
         ba:02:33:e6:6a:f1:7f:e8:60:5a:8a:35:86:fb:5f:08:d5:d0:
         7a:59:b8:b9:22:57:f7:2b:e0:25:9b:c1:a1:e5:ec:35:e5:eb:
         24:f4:9c:b1:d0:97:6f:80:64:21:bd:d3:d1:ea:2f:44:d8:cf:
         80:ea:37:43:54:3a:13:86:61:81:5d:21:fa:ac:3e:8b:7c:c2:
         5d:46:c7:01:80:99:c2:93:43:7d:05:1b:c1:be:a5:14:1f:4b:
         c8:42:32:8c:bb:9e:b2:b6:83:a4:77:2b:61:4c:72:cb:58:4d:
         8a:27:bc:71:5d:af:b2:b9:ef:cd:24:75:dc:69:a6:08:27:d8:
         bc:75:53:c0:f7:f1:7f:27:6f:4e:81:4b:5d:e8:1c:42:71:74:
         72:b3:2e:6a:2d:d7:40:39:f2:79:fa:e9:4f:b5:27:bc:e3:a1:
         d6:cf:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:36:24 2026 by rpki-client