Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          NffKAMy/TpvUA4R4ZtH+5xDDRxmfqwb6YQD46PTKXhE=
Subject key identifier:   A1:18:AC:5F:AD:C5:CD:1E:ED:2D:51:D5:DF:19:94:A7:C9:D3:94:2C
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       74799E67D110228A0BB588666A3AD7935E999A
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa
Signing time:             Thu 05 Feb 2026 22:57:19 +0000
ROA not before:           Thu 05 Feb 2026 22:52:19 +0000
ROA not after:            Thu 04 Feb 2027 22:57:19 +0000
asID:                     263143
IP address blocks:        191.242.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:79:9e:67:d1:10:22:8a:0b:b5:88:66:6a:3a:d7:93:5e:99:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Feb  5 22:52:19 2026 GMT
            Not After : Feb  4 22:57:19 2027 GMT
        Subject: CN=A118AC5FADC5CD1EED2D51D5DF1994A7C9D3942C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:7d:0a:38:b3:d7:b6:36:11:07:36:8a:7f:
                    e4:9d:d5:f0:aa:d7:d7:d9:b2:bb:b0:9c:b2:e7:71:
                    ae:26:91:cc:90:45:30:49:ef:27:50:08:95:29:0a:
                    03:6d:8b:ca:02:40:1e:31:c9:f4:76:75:90:8f:2c:
                    29:7a:df:16:a5:1e:ce:67:bb:f4:ac:64:a4:a8:7f:
                    d4:cf:20:be:47:d1:87:9d:8f:55:82:66:c9:39:c1:
                    e8:01:69:10:58:ac:10:f5:a3:c4:36:b3:e8:bc:9b:
                    e5:12:1f:30:87:69:d8:4f:96:14:5f:8c:12:94:32:
                    b2:2d:2f:65:9a:68:6c:39:ba:0e:58:ad:14:d8:51:
                    87:8c:f3:49:ac:7d:8f:35:39:ce:31:46:9c:c9:23:
                    5b:34:fc:30:4a:c0:a1:5c:dc:d4:28:2c:fe:ab:3f:
                    e2:a3:ef:f3:18:e6:b8:b6:39:71:ba:b2:b1:59:68:
                    1e:c7:3c:3e:c8:da:10:d5:31:ae:48:cd:2e:e3:71:
                    4e:91:51:1b:0e:02:4e:4d:c4:a4:0a:d2:40:85:df:
                    f6:af:ac:e4:f7:d1:09:4c:d8:a8:10:7f:1f:ad:e7:
                    f3:98:b3:58:b0:c1:ec:da:0f:08:4f:c3:9b:be:f6:
                    e5:cc:68:52:36:0e:c0:e5:e9:b4:aa:16:29:c2:74:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:AC:5F:AD:C5:CD:1E:ED:2D:51:D5:DF:19:94:A7:C9:D3:94:2C
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32342d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:56:fb:57:9c:15:10:e3:95:db:03:d9:7c:6c:ce:00:ae:
         84:cf:64:9a:b6:54:0b:9e:00:4e:7d:0d:01:2e:4a:97:fc:38:
         41:c1:7b:7f:ce:cb:27:8f:e2:28:8a:5d:8a:47:eb:ab:36:d2:
         25:a3:bb:e6:53:e0:df:85:86:e7:7e:b0:33:f2:85:a3:bb:88:
         01:d7:e7:ff:e3:54:40:67:14:a4:81:5e:55:c5:25:87:c2:99:
         3f:4c:e0:50:14:cc:fa:d5:ba:5e:f4:d8:7f:24:2c:e1:ed:89:
         85:65:41:df:eb:31:80:4c:54:b4:a9:37:3d:a7:ef:38:04:ee:
         26:95:b6:90:bc:a5:dd:1a:be:fe:48:45:3f:d9:af:dd:d7:2a:
         a9:46:ab:14:e4:b4:9b:8a:a8:df:9c:96:e6:1e:31:c4:e2:26:
         77:ca:7a:68:c2:95:45:93:f8:b1:a8:63:5c:ef:a7:98:13:84:
         db:78:c8:d9:c3:42:72:1a:b5:7b:af:19:04:4e:e5:0e:a0:54:
         f9:d2:96:d9:e0:ff:61:3b:d6:d9:da:07:3d:1b:a5:13:ad:92:
         f5:71:d3:3f:e8:a0:15:b8:84:2c:20:f4:ed:c7:50:7c:11:98:
         03:50:d3:67:04:31:3e:87:f1:c9:fe:a6:b4:97:bb:4b:44:44:
         6a:2a:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:36 2026 by rpki-client