Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa
File:                     3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa (raw, json)
Hash identifier:          BK9bi/JjehoQ8hQPyxguj+4rbtqbWK4zrk8QFWc4UKs=
Subject key identifier:   26:C4:E0:BE:F8:CE:58:32:D3:4C:B2:48:A6:0C:27:78:AD:2E:0B:1D
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       5DF4C16AE4B19BD1FF0DE74B55577DB7918C32E5
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:51 +0000
ROA not before:           Wed 18 Feb 2026 17:20:51 +0000
ROA not after:            Wed 17 Feb 2027 17:25:51 +0000
asID:                     263059
IP address blocks:        186.232.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f4:c1:6a:e4:b1:9b:d1:ff:0d:e7:4b:55:57:7d:b7:91:8c:32:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:51 2026 GMT
            Not After : Feb 17 17:25:51 2027 GMT
        Subject: CN=26C4E0BEF8CE5832D34CB248A60C2778AD2E0B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1c:1c:49:0b:86:af:f4:3c:52:b7:0d:87:13:
                    07:70:87:a2:17:02:97:8a:c1:91:f4:67:68:ce:80:
                    b3:41:b5:f2:15:11:92:a4:a4:fa:0a:17:c1:e9:b0:
                    dc:6c:5a:59:24:71:51:44:00:49:88:c1:9f:a1:a8:
                    60:8e:4e:3b:18:30:1c:5c:61:50:c7:33:0e:ba:ec:
                    41:d3:19:08:e9:cc:08:da:7a:44:75:2e:37:a8:54:
                    c1:e9:00:fe:7e:30:4f:f7:1a:eb:38:05:85:d3:60:
                    0d:1d:bc:ed:66:bc:8e:fd:d6:e7:73:fb:4b:d3:b7:
                    1e:ff:2f:72:8d:67:d4:e9:e3:c2:18:b8:f4:b7:77:
                    33:b2:4f:c8:34:24:64:25:da:07:e1:27:2d:5e:47:
                    5a:08:14:65:54:f6:c9:04:98:1b:5a:f0:e4:e7:ec:
                    60:cb:7c:1e:6a:50:18:59:e8:bf:98:5f:79:95:fe:
                    46:a8:f7:6c:13:33:d9:8b:90:b8:fc:f3:93:ca:e2:
                    cf:a6:28:87:a9:c8:c5:f6:62:69:7b:34:3e:8b:1b:
                    77:fa:dc:bb:fb:ac:38:66:94:2e:0d:09:bf:02:3d:
                    29:42:85:5c:af:98:f8:80:d2:c2:28:95:d6:83:f3:
                    46:e6:8d:aa:9f:e1:0b:f7:1c:b6:f2:37:78:7c:8f:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C4:E0:BE:F8:CE:58:32:D3:4C:B2:48:A6:0C:27:78:AD:2E:0B:1D
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135322e302f32322d3232203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:a3:3b:27:53:18:b8:00:a0:9f:05:89:77:25:0f:b3:96:
         db:d0:7a:c5:9b:e0:83:0f:3a:b0:03:32:f6:9b:1b:c2:81:49:
         68:22:69:25:5f:b9:04:08:13:02:8c:de:94:fe:57:14:f8:b2:
         46:80:c6:21:25:9a:22:82:16:7d:63:f5:84:75:7a:02:01:73:
         d2:c4:90:32:b3:bc:8c:72:dc:f1:14:2b:0a:1e:7d:0c:94:e3:
         d7:78:e8:3d:f3:00:3b:f0:d1:d2:bc:3c:89:19:17:f5:57:67:
         9e:f1:20:b2:66:81:d5:ae:bd:63:ad:6d:0b:6b:e3:c9:0d:55:
         e8:4e:ec:e3:81:56:01:13:03:71:6a:b5:3e:e0:7f:df:bb:2d:
         6f:e4:64:31:5d:e3:a7:b2:e9:56:c3:4f:b5:c0:ae:f2:38:99:
         30:83:c2:0f:83:19:ef:ab:7d:0d:06:cc:77:3e:78:cf:ef:9c:
         f1:c8:58:df:22:c5:28:24:4c:65:e9:e4:70:96:0a:55:d8:cb:
         1f:38:50:b5:c1:f2:d9:d4:87:7c:2f:ab:0a:6b:37:9d:d3:0d:
         e8:87:36:95:15:3a:64:2f:63:cd:9a:c8:c1:fc:1a:dc:ef:9c:
         db:1d:75:01:19:83:34:84:c2:ff:53:ed:5e:d1:d5:b8:ec:51:
         ad:8f:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:47 2026 by rpki-client