Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa
File:                     3138312e3138392e382e302f32322d3232203d3e20323731333830.roa (raw, json)
Hash identifier:          q2W+/lD/gGhPzjTiu5r8WcvSUOFhviokseGZu5x+9jI=
Subject key identifier:   A0:83:99:18:18:E5:9B:B0:E9:82:B4:47:BF:77:76:1B:9D:90:48:8F
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       69BE9855446DF26499ABFFC73D42A3D7A83503DC
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa
Signing time:             Thu 05 Feb 2026 14:46:23 +0000
ROA not before:           Thu 05 Feb 2026 14:41:23 +0000
ROA not after:            Thu 04 Feb 2027 14:46:23 +0000
asID:                     271380
IP address blocks:        181.189.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:98:55:44:6d:f2:64:99:ab:ff:c7:3d:42:a3:d7:a8:35:03:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Feb  5 14:41:23 2026 GMT
            Not After : Feb  4 14:46:23 2027 GMT
        Subject: CN=A083991818E59BB0E982B447BF77761B9D90488F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:7d:9d:8e:37:be:7e:bc:57:c7:0f:4b:35:
                    d0:40:3e:38:1e:76:34:70:f8:05:f5:2a:eb:96:db:
                    30:e5:3c:7b:e9:89:60:4d:66:d3:75:5f:65:3c:90:
                    e1:21:36:3e:d5:d0:a9:99:90:90:0d:5e:5d:da:3d:
                    19:a0:17:e3:8e:20:a5:63:95:b7:e8:3b:75:ff:9f:
                    2c:9e:a5:8b:87:2f:a0:a5:bc:0d:6e:62:a0:42:37:
                    bf:da:02:b2:50:d6:6c:f0:21:80:05:a9:d7:f7:7e:
                    12:a9:b3:59:4b:9b:5a:3f:69:61:01:8a:9a:34:c7:
                    ba:69:af:99:38:a8:c6:67:4a:4a:84:bb:27:bd:30:
                    c1:e9:01:fa:9f:85:0a:b0:f6:7f:aa:40:78:44:7c:
                    27:84:a6:ae:f5:a7:15:9d:2d:82:d9:bb:19:4a:7b:
                    91:3c:f2:fc:44:5a:b7:92:b7:cd:95:59:aa:ab:5d:
                    ae:bc:a5:93:c6:33:eb:b5:86:ca:91:71:7c:56:75:
                    4f:03:c6:f6:8c:d3:88:b9:d9:28:a8:5b:53:ad:25:
                    cb:2b:03:67:56:88:51:50:06:8e:94:49:18:8f:23:
                    7f:3c:fe:b9:7a:0c:c0:7b:e7:12:f3:6d:4c:bc:7b:
                    bd:59:1d:0d:1d:46:f0:3b:96:88:72:a7:4e:dc:92:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:83:99:18:18:E5:9B:B0:E9:82:B4:47:BF:77:76:1B:9D:90:48:8F
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e382e302f32322d3232203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:72:8d:69:f9:af:74:34:58:9b:a9:dd:7f:32:07:ee:8d:45:
         17:80:8b:b8:d9:cf:64:9c:3a:87:19:18:3d:15:f0:3b:cd:4e:
         48:6d:1e:14:fb:9d:51:dd:46:18:d6:fe:ab:f4:36:9d:4e:d1:
         3c:80:71:b8:2d:7e:cb:cc:5a:40:c5:5b:2d:fe:59:8f:47:d9:
         82:76:24:f7:ab:d5:71:eb:ec:f4:57:70:ce:03:aa:77:60:d4:
         8e:7a:f4:0b:99:d5:9a:4e:86:88:2a:47:bd:bf:37:56:41:2a:
         b7:dd:2d:9c:9e:7d:7d:c7:02:7a:3b:65:c1:19:1a:26:82:7d:
         6d:43:f0:ed:3c:6b:67:b8:05:ee:ae:cd:f0:2f:07:08:07:6a:
         10:26:e5:b4:92:b2:58:b1:2e:67:66:d0:e6:b1:24:d6:79:3a:
         b3:a6:e7:21:a7:24:1d:ba:b9:95:2e:ba:b1:28:0a:87:9f:7e:
         84:f0:ba:1e:fc:14:2f:dc:f2:c4:2c:e2:73:be:41:a6:c4:8f:
         49:1c:df:09:d6:a0:bb:9b:f8:10:2b:6a:5e:61:8d:b0:09:97:
         29:8e:97:3f:3d:6d:dd:14:86:9b:60:ea:9d:13:0a:b5:cc:47:
         79:51:d7:27:9c:07:9d:e4:4e:d1:ff:c0:25:bb:80:7f:a7:d3:
         bb:64:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:56 2026 by rpki-client