Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23EAjPBZnYSx3RwndDdxHVyKZouQETbHiE7at8sCvJkk/0/3138362e3233372e3130342e302f32322d3332203d3e20323730363235.roa
File:                     3138362e3233372e3130342e302f32322d3332203d3e20323730363235.roa (raw, json)
Hash identifier:          iGJAfgOzv8KvBYXi6q9XxDm2Olsy34aXywukhcI0x8U=
Subject key identifier:   17:69:CF:B6:04:71:AE:0A:45:7D:CA:DA:55:36:9A:0C:9F:A6:F6:EF
Certificate issuer:       /CN=193935BE556E324EB0E6819AC6C9E698FBC1E0F6
Certificate serial:       483509E05FE0B3BC041AA10E775566120EF4082D
Authority key identifier: 19:39:35:BE:55:6E:32:4E:B0:E6:81:9A:C6:C9:E6:98:FB:C1:E0:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193935BE556E324EB0E6819AC6C9E698FBC1E0F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23EAjPBZnYSx3RwndDdxHVyKZouQETbHiE7at8sCvJkk/0/3138362e3233372e3130342e302f32322d3332203d3e20323730363235.roa
Signing time:             Fri 13 Feb 2026 19:29:41 +0000
ROA not before:           Fri 13 Feb 2026 19:24:41 +0000
ROA not after:            Fri 12 Feb 2027 19:29:41 +0000
asID:                     270625
IP address blocks:        186.237.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23EAjPBZnYSx3RwndDdxHVyKZouQETbHiE7at8sCvJkk/0/193935BE556E324EB0E6819AC6C9E698FBC1E0F6.crl
                          rsync://rpki-repo.registro.br/repo/23EAjPBZnYSx3RwndDdxHVyKZouQETbHiE7at8sCvJkk/0/193935BE556E324EB0E6819AC6C9E698FBC1E0F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193935BE556E324EB0E6819AC6C9E698FBC1E0F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:35:09:e0:5f:e0:b3:bc:04:1a:a1:0e:77:55:66:12:0e:f4:08:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193935BE556E324EB0E6819AC6C9E698FBC1E0F6
        Validity
            Not Before: Feb 13 19:24:41 2026 GMT
            Not After : Feb 12 19:29:41 2027 GMT
        Subject: CN=1769CFB60471AE0A457DCADA55369A0C9FA6F6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a2:33:89:82:4c:b0:37:14:a0:e9:6a:2c:ab:
                    8c:cd:fa:64:65:44:be:d9:c6:e5:e3:2f:f4:94:a5:
                    87:e5:fe:eb:49:d1:a4:77:0a:f9:6b:bd:44:ae:8a:
                    5e:60:8c:17:e4:fc:bd:a6:9a:0a:dc:b5:38:0f:77:
                    a1:37:c4:09:a7:7b:85:4f:f6:72:c5:e6:84:19:a6:
                    52:d9:f9:54:3f:53:06:73:4a:dd:00:f3:cb:71:a5:
                    2b:5a:a4:51:6d:70:dc:db:b6:58:8a:18:bb:c3:0b:
                    98:e2:3a:b4:bb:8b:7f:57:78:ca:8f:dd:03:c9:f5:
                    7c:28:c4:e9:3d:d0:2f:c7:7b:51:51:9e:31:62:f2:
                    19:31:1a:36:b5:1a:e1:44:a9:37:6e:95:35:61:8f:
                    ac:63:e3:41:8d:f5:0f:3f:54:3f:bd:b8:f1:1c:7e:
                    7d:bd:51:2b:ff:7e:c0:05:9b:ab:70:7e:49:9a:2f:
                    12:ff:14:7c:8d:b9:9d:90:89:8e:3a:f7:79:d1:98:
                    bf:35:26:66:8a:31:03:6d:1f:29:1f:01:17:9b:e1:
                    57:22:93:39:04:99:79:79:96:38:02:68:c2:e1:31:
                    39:9d:35:a3:4b:c7:4a:88:5a:23:93:06:11:fa:45:
                    1c:b4:07:72:db:3f:56:74:80:09:a8:58:49:bd:76:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:69:CF:B6:04:71:AE:0A:45:7D:CA:DA:55:36:9A:0C:9F:A6:F6:EF
            X509v3 Authority Key Identifier:
                keyid:19:39:35:BE:55:6E:32:4E:B0:E6:81:9A:C6:C9:E6:98:FB:C1:E0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23EAjPBZnYSx3RwndDdxHVyKZouQETbHiE7at8sCvJkk/0/193935BE556E324EB0E6819AC6C9E698FBC1E0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/193935BE556E324EB0E6819AC6C9E698FBC1E0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23EAjPBZnYSx3RwndDdxHVyKZouQETbHiE7at8sCvJkk/0/3138362e3233372e3130342e302f32322d3332203d3e20323730363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:9a:d2:ef:7b:97:ab:fb:82:b6:1e:e4:74:1a:c3:b5:6b:
         ea:bd:67:87:ae:68:31:76:55:fe:9d:10:47:20:0d:31:17:74:
         34:e4:40:d6:c1:96:e2:df:dc:0d:7e:10:9a:e7:40:ab:93:54:
         3c:36:b3:6e:75:04:06:85:94:0f:fd:97:cb:d0:bd:69:f9:1c:
         23:e6:c4:94:ce:0e:a9:38:e1:73:b3:ae:b0:c3:65:87:c2:5a:
         7d:92:67:4d:3a:4e:df:99:c6:34:dd:9f:0c:0e:45:af:ca:6c:
         d6:4e:c9:8a:c6:53:f0:47:ba:16:0d:88:35:2f:f5:03:a9:4b:
         69:56:96:0a:9e:22:82:be:de:8d:45:26:03:d3:7f:b1:6d:0f:
         e4:a6:9d:90:99:c6:b9:df:3d:f2:3a:d5:dd:31:bc:72:1b:cc:
         f2:8e:21:69:a7:88:c5:49:e9:2c:7d:e5:5d:f6:e6:0e:34:b5:
         c6:c3:b3:70:33:37:7d:ed:fa:a0:e7:eb:98:f6:bd:b5:08:8c:
         07:64:98:19:e1:4a:4c:67:b3:bb:c0:33:bd:e2:42:f2:55:4a:
         89:ec:30:cf:02:50:d8:e3:b2:f4:29:b7:10:30:99:1b:4a:79:
         1d:2f:d4:f2:42:60:f4:5a:73:1d:6e:cc:cd:72:ac:86:5e:1c:
         11:5c:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:04 2026 by rpki-client