Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          Z1jhRyE7vn4jpD7nnq0EVmfXDsIKgAsIhhzdUqzIU74=
Subject key identifier:   A4:98:A4:36:2A:5E:02:2F:A7:61:83:C6:4E:BA:F3:ED:60:A6:A8:CA
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       247D094D6AD61956D1E7BF81A82FD373C0F6B6B4
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:48 +0000
ROA not before:           Wed 18 Feb 2026 17:20:48 +0000
ROA not after:            Wed 17 Feb 2027 17:25:48 +0000
asID:                     263059
IP address blocks:        186.232.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:09:4d:6a:d6:19:56:d1:e7:bf:81:a8:2f:d3:73:c0:f6:b6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:48 2026 GMT
            Not After : Feb 17 17:25:48 2027 GMT
        Subject: CN=A498A4362A5E022FA76183C64EBAF3ED60A6A8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:fd:fd:16:be:2a:7d:19:ed:8c:93:8e:a6:
                    65:e6:ce:58:82:11:a9:33:39:1f:b3:38:41:fe:09:
                    f2:d1:cf:91:a3:f0:46:8a:fc:61:24:c1:68:f8:a5:
                    d0:ac:ca:7d:ce:c0:ed:d4:cc:39:e7:8a:27:dd:75:
                    99:6b:e5:3b:3a:18:7a:e7:c1:00:1f:29:91:39:b7:
                    aa:b7:5a:16:68:e8:43:75:84:17:99:f7:3a:50:e1:
                    73:eb:6f:f2:45:a8:0f:2a:3f:be:02:b7:01:3a:84:
                    6c:01:06:b9:21:e4:d3:c0:66:8b:82:76:12:da:ed:
                    a2:5a:28:b8:17:c5:e8:d5:38:85:3d:95:2d:c0:51:
                    38:3f:40:5c:63:5f:d0:21:19:b4:a9:6b:57:d1:bb:
                    80:45:3d:53:49:e7:da:6a:16:6c:b4:96:12:e0:47:
                    28:d9:1a:cc:3a:0f:e8:c2:b0:bd:f2:bb:1c:8e:b5:
                    9d:f8:bf:23:da:a4:84:79:bc:6e:eb:fe:23:ed:e0:
                    92:c9:8b:0d:8c:6f:49:4e:be:34:56:04:63:25:0b:
                    47:5e:b9:72:14:14:fa:8e:ed:7a:1f:a0:e1:26:5f:
                    0b:75:24:c6:fc:36:65:e6:a6:72:f3:5c:8c:46:26:
                    af:d0:bf:4b:cb:3b:af:72:aa:f2:25:8a:77:a0:2c:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:98:A4:36:2A:5E:02:2F:A7:61:83:C6:4E:BA:F3:ED:60:A6:A8:CA
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135332e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:b2:93:3f:bc:61:ed:f4:e2:6a:c1:81:fa:5d:a0:c7:5e:
         c2:04:4e:9a:04:8a:c5:58:4f:4b:5c:4d:40:db:c0:0d:76:2a:
         ee:5b:cd:cd:3c:cc:62:fc:f0:9d:b1:ed:ba:e3:9e:3c:a7:9b:
         94:8c:cd:73:af:9d:2b:34:71:09:32:00:60:40:9c:a9:25:73:
         72:a4:80:ec:cf:8f:26:be:0e:1c:d5:b7:b4:78:f5:63:cf:2e:
         3a:1b:5f:c3:99:05:84:a1:cb:53:72:7a:68:75:b5:6c:33:9f:
         0c:e9:25:eb:23:78:26:6f:9f:b4:dc:85:02:75:57:80:d4:89:
         a4:5a:ad:d2:c9:e7:d8:32:02:31:f5:f0:83:42:ee:3b:67:cb:
         49:01:43:4c:84:23:67:d6:df:cf:0c:7c:0f:1b:83:f9:95:4c:
         cd:de:99:79:56:b7:64:5c:b5:c0:ec:c2:9a:96:17:67:db:d4:
         8f:01:03:85:ad:15:cb:51:cb:e8:fc:36:43:75:a3:36:e0:6b:
         ba:24:1b:b7:25:20:a7:ba:c8:9d:ed:5c:65:68:db:60:96:a8:
         69:4e:6d:38:a0:43:7c:3e:af:0d:b7:1d:5d:8f:80:46:12:f8:
         01:ce:00:d0:4f:ec:f6:4f:8d:dd:4e:fb:93:b5:85:12:fd:63:
         c1:fd:2a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:41:40 2026 by rpki-client