Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
File:                     3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa (raw, json)
Hash identifier:          HKS9FgPsBRDh2Z+rrIOpEPhO3ayX0n6PETwFESkqAfA=
Subject key identifier:   19:EA:1C:24:09:C8:B0:8C:C7:CF:C2:E0:FC:B6:6B:D3:FC:58:F1:5B
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       4DA122B77B34801AB29BC929F1337C0C66F5BA5C
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:48 +0000
ROA not before:           Wed 18 Feb 2026 17:20:48 +0000
ROA not after:            Wed 17 Feb 2027 17:25:48 +0000
asID:                     263059
IP address blocks:        186.232.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a1:22:b7:7b:34:80:1a:b2:9b:c9:29:f1:33:7c:0c:66:f5:ba:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:48 2026 GMT
            Not After : Feb 17 17:25:48 2027 GMT
        Subject: CN=19EA1C2409C8B08CC7CFC2E0FCB66BD3FC58F15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:23:36:72:6d:39:e2:18:61:10:70:fc:49:
                    03:74:b4:a3:bc:a0:ad:df:cf:28:2d:1d:ac:42:b6:
                    53:1f:ae:96:98:ff:75:73:dd:7f:c1:ae:8f:e1:1d:
                    49:14:c8:ac:82:74:42:c4:6a:d2:4e:3c:8f:cb:dd:
                    67:61:11:c3:ce:27:26:73:0e:31:b5:29:93:53:79:
                    67:e6:d5:1d:d1:13:64:18:d7:05:0b:d1:b6:74:90:
                    e2:2c:cb:33:65:a5:1e:0b:20:98:42:48:57:8b:04:
                    cb:42:f4:fa:81:b3:e5:46:94:c7:c3:c5:4a:06:0c:
                    5b:62:c9:d6:c3:55:c7:8e:39:b3:0c:3c:e1:ab:01:
                    b7:d2:81:41:20:87:dc:02:36:90:e6:4d:00:00:f0:
                    a6:58:b4:a4:90:d7:02:8c:8e:6e:59:81:8e:df:98:
                    1f:1c:ad:76:53:13:2c:f1:f8:37:72:63:ab:34:ce:
                    39:b2:08:39:72:c7:78:1b:89:02:fe:8d:be:dc:1c:
                    c9:e2:28:fd:b7:ed:b8:40:b2:e6:11:46:ac:ec:8c:
                    a0:7d:3f:73:15:f7:36:ef:b3:63:4c:86:f3:28:b8:
                    0d:08:0f:f7:d4:3f:86:fe:f9:96:68:b9:94:cf:63:
                    0f:2a:cd:80:f2:07:5f:b2:e1:85:85:73:0e:01:84:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EA:1C:24:09:C8:B0:8C:C7:CF:C2:E0:FC:B6:6B:D3:FC:58:F1:5B
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:b1:26:36:4b:7c:e8:4c:2b:2e:a1:ad:d9:85:8d:a8:59:ec:
         c8:60:24:8c:55:ed:9c:f4:6b:4f:9f:7b:d4:55:7f:aa:d5:58:
         31:7f:ec:94:bf:19:2e:ad:98:fd:5c:16:5a:a4:22:a8:e7:14:
         12:9d:e7:9a:46:38:71:d6:e8:6b:30:76:4a:a3:2d:7b:bf:e8:
         24:c0:06:49:51:b9:84:77:98:37:e4:50:fc:2f:7f:f5:c7:06:
         15:3a:c7:38:f6:b5:ce:2f:0d:c9:e6:55:70:02:5e:f7:fd:27:
         a3:4d:ea:c2:c1:ac:d3:c4:86:5c:35:65:fa:6c:78:f0:87:36:
         4a:ba:1a:4b:61:d8:c4:12:f0:0b:40:b0:a1:4c:96:74:e7:50:
         3d:fa:7f:1e:55:78:f9:ca:86:fa:91:8e:4e:44:9e:c4:ec:e5:
         a5:5e:51:d7:63:60:e9:4a:d5:ec:bd:30:81:80:ed:71:31:a4:
         12:f7:73:a0:2a:ff:a9:07:59:3a:c7:01:87:db:af:0e:a7:61:
         d5:21:db:7e:7f:33:05:be:3a:23:eb:40:46:4d:58:53:46:48:
         9b:9f:37:b8:b6:25:3a:24:f1:69:bf:d4:a6:61:c9:d6:c5:34:
         22:fc:41:d9:a7:42:b9:db:6f:aa:99:3c:b2:69:88:b5:06:13:
         a7:23:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:50:05 2026 by rpki-client