Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
File:                     3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa (raw, json)
Hash identifier:          44dxEZ1Zxdgt3NPnD/LJJAtQMffT0UufNKgss74SzR0=
Subject key identifier:   CC:1F:40:A9:47:FE:6A:52:B9:2B:25:1C:A7:5D:69:3E:14:55:5C:23
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       44EA4957FDBBC84ABC568A2FE76B0DC20579A27A
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa
Signing time:             Thu 05 Feb 2026 22:57:19 +0000
ROA not before:           Thu 05 Feb 2026 22:52:19 +0000
ROA not after:            Thu 04 Feb 2027 22:57:19 +0000
asID:                     263143
IP address blocks:        191.242.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ea:49:57:fd:bb:c8:4a:bc:56:8a:2f:e7:6b:0d:c2:05:79:a2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Feb  5 22:52:19 2026 GMT
            Not After : Feb  4 22:57:19 2027 GMT
        Subject: CN=CC1F40A947FE6A52B92B251CA75D693E14555C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:67:2c:dd:61:30:d3:69:fd:c6:de:4f:74:
                    fe:a6:9d:e9:c6:45:a0:58:62:8d:65:e0:14:0b:6a:
                    66:e0:11:4d:a4:4e:a0:90:60:80:69:4b:1d:67:11:
                    03:e8:6a:25:1e:af:5c:17:f9:d1:44:46:d7:81:98:
                    34:8e:c8:03:c2:67:ed:39:32:dc:20:fb:d8:42:86:
                    83:54:eb:47:55:cf:79:17:7d:2f:c9:f1:a6:f2:28:
                    8c:ca:ae:4b:f6:99:ff:6c:37:da:41:14:79:cc:53:
                    85:2a:f1:1a:33:1c:b2:77:c8:32:f5:0c:b5:f4:71:
                    de:e7:db:2c:23:78:c1:b6:ea:15:df:d1:0c:7e:ea:
                    48:e5:f6:b3:0e:c9:ea:96:fc:16:90:c0:91:90:da:
                    bd:57:6f:36:57:33:25:a6:94:e9:66:d8:ba:c8:8e:
                    fd:15:17:a0:64:f4:d9:9f:89:0a:6e:1d:c4:c5:ff:
                    6b:f5:5d:2b:80:17:74:c4:81:44:96:2f:d6:4c:b3:
                    5e:9b:2d:be:dc:4c:a7:af:04:78:c1:76:54:54:c3:
                    47:00:ab:ff:9c:b7:8c:fe:8b:97:a9:6b:9f:44:ed:
                    f5:8a:69:80:9b:fe:a8:93:ba:29:b4:44:d0:dc:e7:
                    a3:d4:5a:9c:27:77:67:2b:4d:7b:07:e0:65:4d:8c:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1F:40:A9:47:FE:6A:52:B9:2B:25:1C:A7:5D:69:3E:14:55:5C:23
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139372e302f32342d3234203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:0c:1a:c5:4e:a5:25:33:1d:c6:3b:73:f5:b2:e7:0a:c2:cd:
         01:80:85:d2:8d:80:33:6b:8c:7e:b7:06:93:aa:70:48:ae:e2:
         9c:44:da:e3:55:68:8a:9e:b3:a3:4e:1f:9a:8c:9f:47:4b:bb:
         32:66:67:29:51:4c:f6:78:b5:3c:3d:38:24:cd:7e:32:c2:45:
         6f:25:8f:5c:b3:c4:91:7b:43:a9:ba:03:de:2e:b0:e9:0f:3b:
         19:1c:2c:b2:df:e6:f6:f7:90:b1:e5:19:42:2e:a6:5b:6b:38:
         68:16:5e:62:a3:65:f3:23:66:e4:60:6c:4f:b8:49:3a:e4:13:
         61:4d:3b:58:c5:a5:17:09:6d:a5:a3:92:a2:20:c4:39:74:38:
         97:ff:24:b5:44:79:7a:33:aa:e1:f3:77:ca:63:85:b6:18:60:
         e7:99:da:e5:dc:85:00:5f:16:1e:d1:ab:d6:a5:be:9b:38:23:
         e1:7d:ed:c7:33:4a:9b:75:9f:2d:dc:92:8e:15:a5:41:82:dd:
         85:86:5f:b2:0c:3e:ad:ea:42:cf:6c:f9:8c:77:c3:db:e2:36:
         ec:47:1a:b8:3a:dd:dc:c7:fa:0a:96:1e:4a:fe:1c:cf:fa:28:
         85:e4:dc:72:2b:e5:45:00:8f:ad:8f:77:96:99:4d:3d:66:2d:
         50:1d:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:45 2026 by rpki-client