Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa
File:                     3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (raw, json)
Hash identifier:          lEugCPIUy2Nj0zGiAm4Kgsk3MVYLaTFNqjQjvnkQppc=
Subject key identifier:   F5:AF:A5:32:EC:68:72:FF:FF:73:E1:59:D9:6F:AE:FD:F0:92:79:CF
Certificate issuer:       /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
Certificate serial:       6BF7805F2ABA13D5DE68D480DDEDA456B36458DD
Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa
Signing time:             Thu 05 Feb 2026 09:47:45 +0000
ROA not before:           Thu 05 Feb 2026 09:42:45 +0000
ROA not after:            Thu 04 Feb 2027 09:47:45 +0000
asID:                     270991
IP address blocks:        187.103.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl
                          rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f7:80:5f:2a:ba:13:d5:de:68:d4:80:dd:ed:a4:56:b3:64:58:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
        Validity
            Not Before: Feb  5 09:42:45 2026 GMT
            Not After : Feb  4 09:47:45 2027 GMT
        Subject: CN=F5AFA532EC6872FFFF73E159D96FAEFDF09279CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:bc:fc:39:cd:85:57:20:62:e7:7f:7b:e5:
                    ec:4f:e1:dd:f3:2c:88:35:8f:d2:88:cb:c1:04:5b:
                    69:3f:db:cb:d8:f1:e6:de:61:e6:02:9a:8a:51:7e:
                    9e:34:40:06:7c:0e:95:73:d8:46:6c:eb:97:de:dc:
                    e7:88:39:62:f8:53:b6:0d:89:31:47:e1:91:f7:31:
                    0d:9b:bb:e6:73:e1:4d:24:d0:0d:57:86:c3:37:67:
                    c3:25:2f:e9:17:c1:a1:76:f0:f2:be:e7:0d:71:33:
                    b9:f5:9d:bf:73:2c:e3:9d:3f:3d:8a:a9:88:5b:ba:
                    87:e3:a2:6b:dc:88:07:00:25:6e:61:6e:ec:72:49:
                    43:21:0e:aa:f8:d4:45:79:22:df:fa:89:26:4d:b3:
                    71:69:db:98:20:d7:e0:1f:12:38:48:6e:80:47:cc:
                    f4:d3:96:ef:e3:69:89:0c:9b:ad:6d:17:56:2d:3e:
                    b5:3d:14:6a:1e:2f:1f:d9:79:a4:81:c5:ab:5d:9f:
                    40:dc:24:8f:39:c1:14:70:6e:1f:dd:69:76:cb:08:
                    7e:dc:25:01:35:67:ca:45:84:aa:93:e3:2d:57:51:
                    96:77:23:55:92:f0:0c:0c:6d:8f:91:b1:de:e4:bc:
                    1d:6b:13:9c:3b:95:08:a9:04:29:7a:a9:a7:42:77:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:A5:32:EC:68:72:FF:FF:73:E1:59:D9:6F:AE:FD:F0:92:79:CF
            X509v3 Authority Key Identifier:
                keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:5b:11:d0:7b:6e:57:ef:d2:1e:7b:66:22:dc:16:1d:fa:
         7e:af:96:ec:e7:16:72:5c:af:58:75:58:80:68:bc:e9:78:dc:
         b8:79:c2:b2:c5:ab:9f:08:1c:5b:f5:92:3e:5b:e0:ec:81:a3:
         cb:bb:01:16:25:61:b8:1f:63:48:5e:82:b3:1c:0f:ed:57:cd:
         f0:67:40:7b:4b:73:9b:05:48:37:be:86:ed:4c:ff:a5:0b:3d:
         d2:3c:a8:3d:a6:e9:54:28:31:c4:d5:a9:bd:f8:6f:fe:57:10:
         02:f2:71:41:27:6a:a3:a6:e5:ab:14:7f:ec:1e:bc:8e:59:ea:
         83:b9:01:e9:fd:33:38:ba:d0:0c:10:4c:ef:fd:e5:fe:6e:b2:
         36:6e:d4:90:f6:e5:76:4f:ff:a0:38:04:ee:8d:37:95:3a:a1:
         8c:1e:ef:66:4f:3d:c2:3a:fa:dd:ad:ff:96:c1:35:e6:59:af:
         bc:d9:7e:f0:92:3b:d2:69:0e:67:b6:ad:e3:d9:f9:1d:e1:9c:
         67:05:a7:0b:11:48:41:0e:0c:eb:5d:8c:7c:2e:3a:97:fb:94:
         f5:bd:57:c5:e2:dc:80:5a:4d:1c:f9:0a:55:86:d3:f6:41:b1:
         16:7d:19:67:ad:fc:40:53:69:a3:27:74:62:25:1d:be:8e:c2:
         30:bb:a3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:44:56 2026 by rpki-client