Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
File:                     3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa (raw, json)
Hash identifier:          Gc3PnI6V6zGfPCOf5In+vIM9JK9/Ae4TcwFleteVdkc=
Subject key identifier:   24:47:7F:F7:C2:BF:F7:A0:4C:EA:F0:70:56:53:50:A9:D1:5D:8E:13
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       649422504DF8C23D384F672E62A03D3E702867A0
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:50 +0000
ROA not before:           Wed 18 Feb 2026 17:20:50 +0000
ROA not after:            Wed 17 Feb 2027 17:25:50 +0000
asID:                     263059
IP address blocks:        186.232.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:22:50:4d:f8:c2:3d:38:4f:67:2e:62:a0:3d:3e:70:28:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:50 2026 GMT
            Not After : Feb 17 17:25:50 2027 GMT
        Subject: CN=24477FF7C2BFF7A04CEAF070565350A9D15D8E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:48:8c:4d:63:d2:89:b6:77:34:f2:2c:8d:f9:
                    f4:fb:cb:e4:69:1d:b1:15:ae:29:f7:69:2c:fc:f3:
                    4e:72:dd:a1:0d:06:cd:85:5f:d1:ab:48:60:cb:91:
                    7d:db:29:00:14:ce:9a:bc:95:7e:39:f9:65:5d:d5:
                    d5:41:3c:a2:f7:99:81:6a:3e:17:78:da:ca:d8:f5:
                    89:a0:98:5c:b6:5a:ed:c2:25:67:8e:fb:3b:50:df:
                    db:60:96:ff:13:fb:ce:48:f9:d9:15:ca:79:a2:4e:
                    f2:db:a4:17:02:99:5e:fe:90:f7:be:26:e9:14:f9:
                    e3:b1:21:48:73:ad:e3:25:9a:c2:27:4a:06:da:a2:
                    30:29:da:4a:85:34:dd:39:6b:23:f0:6c:d2:36:05:
                    09:14:ad:0b:e9:c1:8f:37:36:9f:1d:29:2e:bb:e5:
                    75:a2:38:2d:49:43:a5:16:a4:1a:7a:db:32:ad:40:
                    00:e4:8d:e7:59:9f:1b:27:f8:1a:ee:a8:41:d0:4f:
                    4b:2e:b5:cc:e0:c3:f9:b4:ea:6b:fa:9f:b4:6d:16:
                    a0:72:c4:02:fe:70:72:31:fb:41:33:48:5f:75:11:
                    17:52:4b:35:a3:f1:97:0f:d5:04:cb:e1:ea:d8:2b:
                    54:5d:7d:55:73:d9:8d:6b:65:b4:ee:e7:4d:89:5c:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:47:7F:F7:C2:BF:F7:A0:4C:EA:F0:70:56:53:50:A9:D1:5D:8E:13
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32312d3231203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:87:94:20:43:59:39:0f:32:54:91:ca:0a:25:0a:a6:68:53:
         e0:be:2f:7a:31:67:af:f2:f0:dd:1b:2a:09:31:7a:fd:61:09:
         d9:66:fd:73:fd:6d:f4:5f:c2:77:49:d7:b5:0e:72:99:c9:60:
         58:f4:87:71:62:1b:3e:4f:2e:a0:f5:84:ff:1f:cc:a7:e1:f1:
         2d:17:3d:b9:f1:b0:53:35:2d:4d:5a:22:f6:65:1f:57:7c:c6:
         ac:e8:4f:7a:58:68:d5:74:09:ac:14:d8:c8:e6:13:70:c9:b8:
         d0:33:99:85:99:23:17:95:19:f4:52:cc:c9:b0:2f:4c:31:e5:
         6e:1a:ae:2a:04:c3:0c:6d:c7:65:0b:e7:fc:45:38:d3:41:fa:
         31:ea:f4:66:bd:bc:d4:14:98:d1:16:31:03:54:e4:d6:85:f1:
         eb:3c:8f:86:b3:34:44:89:51:02:d6:2b:15:72:46:e1:a1:84:
         ae:9b:4a:33:5f:27:a2:76:c8:de:97:97:ea:1f:b7:17:cb:0a:
         0a:5d:18:fd:fd:e0:0d:ca:4b:c8:48:4e:00:83:16:c2:42:30:
         3f:b6:75:96:a6:d8:9d:12:f7:f4:77:54:3b:52:98:2d:ec:d8:
         40:2c:1e:2f:6d:e0:ae:8f:cd:0b:35:e1:ba:de:c1:f6:3d:38:
         0d:24:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:49:43 2026 by rpki-client