Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa
File:                     3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa (raw, json)
Hash identifier:          wkpEngrjNmzLlixx7Lw14YeoO6cnLWTYxpAl0fFsheI=
Subject key identifier:   69:F5:1C:57:01:B2:84:98:63:81:57:FA:8C:5E:1D:F1:94:B2:BF:C8
Certificate issuer:       /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial:       49CCB2ABBA6E7EF5DEB96184935A36203AFD15CE
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa
Signing time:             Thu 05 Feb 2026 06:08:21 +0000
ROA not before:           Thu 05 Feb 2026 06:03:21 +0000
ROA not after:            Thu 04 Feb 2027 06:08:21 +0000
asID:                     264354
IP address blocks:        131.108.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
                          rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cc:b2:ab:ba:6e:7e:f5:de:b9:61:84:93:5a:36:20:3a:fd:15:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Validity
            Not Before: Feb  5 06:03:21 2026 GMT
            Not After : Feb  4 06:08:21 2027 GMT
        Subject: CN=69F51C5701B28498638157FA8C5E1DF194B2BFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:df:eb:70:e9:0d:fb:70:05:99:98:ce:74:
                    f7:1f:a2:d0:38:bd:39:e5:bd:4b:d0:d9:4d:c4:b1:
                    18:71:99:a8:68:ec:50:c8:7d:3b:37:9c:85:85:45:
                    d4:8e:0d:8a:c8:c3:4b:d0:1d:32:c7:a0:b0:bf:de:
                    c7:51:cb:9b:8a:94:23:41:0c:cd:45:db:21:b5:0a:
                    0b:30:9e:a4:fd:72:f9:d7:74:95:4e:94:56:07:f5:
                    f0:72:94:00:59:e6:e5:26:01:cf:70:ff:30:49:01:
                    84:aa:ae:22:26:af:00:d2:6d:fc:f7:f2:55:0f:ac:
                    f1:46:9a:93:c5:82:20:9d:86:f6:5f:b6:dc:78:00:
                    d0:d5:31:c8:8a:48:ff:ec:0f:ab:68:cd:4a:5e:5f:
                    da:58:08:ba:45:f5:b9:74:d0:ab:14:d0:29:04:59:
                    b0:53:83:c0:7e:19:45:89:f9:da:09:78:80:71:29:
                    4d:97:a1:c8:14:51:53:9b:be:25:19:8f:dc:ca:a4:
                    dc:34:23:ae:4e:88:22:d6:21:0d:71:c7:94:5d:55:
                    d2:16:3f:37:35:f9:5e:9a:63:9a:49:a7:b0:6c:aa:
                    06:a6:50:13:e7:c4:f0:0e:ad:10:af:58:bb:f7:88:
                    a5:6f:3d:ce:39:54:b9:8f:10:ad:37:9e:3c:04:0b:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F5:1C:57:01:B2:84:98:63:81:57:FA:8C:5E:1D:F1:94:B2:BF:C8
            X509v3 Authority Key Identifier:
                keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3133312e3130382e3132382e302f32322d3234203d3e20323634333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:8f:d2:96:16:91:da:2e:8f:6f:7a:16:44:a5:d5:b2:6b:c0:
         86:e3:d4:5b:3c:96:c1:54:2c:26:27:21:1b:98:b9:91:57:a2:
         40:8c:a2:f4:be:36:ce:57:b0:c6:b5:7f:91:ec:1a:80:6d:51:
         3d:b9:9c:e0:c3:8b:41:e5:52:6f:23:d6:6f:03:51:28:1e:93:
         a8:26:8b:10:50:ba:ae:6a:eb:2b:8d:f1:ec:dd:1c:8d:5f:7f:
         5d:0b:14:d6:12:33:b1:0f:98:92:24:a2:fc:36:13:5d:79:47:
         82:96:2e:01:b1:e2:43:12:34:3b:07:5e:38:7f:78:53:32:3a:
         8e:8c:68:04:c5:95:7b:aa:2c:d2:52:a5:c7:38:59:19:34:f1:
         b8:94:e5:20:75:d9:83:d0:5a:f6:d8:db:6b:ad:fb:7e:60:b4:
         df:c2:d0:1d:8e:58:df:2c:ac:f4:51:c7:28:11:71:00:08:2a:
         a9:5e:13:4c:3b:47:cc:a4:14:f1:c4:25:1f:b0:dd:c3:40:45:
         80:16:7e:94:ba:45:8d:2a:58:25:f9:14:64:60:07:56:31:55:
         b1:72:d4:60:96:0c:82:85:f0:9a:82:2f:95:75:23:85:5b:10:
         a1:3e:6a:a7:9e:ad:17:4d:5f:35:8e:8a:8e:ac:95:b8:96:ae:
         89:9b:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:47 2026 by rpki-client