Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
File:                     3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa (raw, json)
Hash identifier:          ezTLl0NaJ4XSzajvgGlJt7CN9D9vcht5sCQtfwuE2a4=
Subject key identifier:   1F:9B:A5:03:40:8B:32:7D:10:55:43:4B:4C:5B:14:CF:63:48:D0:19
Certificate issuer:       /CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
Certificate serial:       4E58991E88926F1A21D1020C6EA9AF3E0A239AB1
Authority key identifier: 04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa
Signing time:             Wed 18 Feb 2026 17:25:52 +0000
ROA not before:           Wed 18 Feb 2026 17:20:52 +0000
ROA not after:            Wed 17 Feb 2027 17:25:52 +0000
asID:                     263059
IP address blocks:        186.232.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 15:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:58:99:1e:88:92:6f:1a:21:d1:02:0c:6e:a9:af:3e:0a:23:9a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD
        Validity
            Not Before: Feb 18 17:20:52 2026 GMT
            Not After : Feb 17 17:25:52 2027 GMT
        Subject: CN=1F9BA503408B327D1055434B4C5B14CF6348D019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:4f:3f:63:b2:9a:99:fb:59:1d:e9:b8:d5:
                    57:1a:c6:53:55:e9:b1:fb:a1:ee:3f:3f:d7:36:29:
                    57:ce:37:54:a8:4d:f4:d6:e1:90:b9:55:b2:33:8b:
                    e1:da:e0:62:3a:e9:e2:ea:8d:8d:e6:70:cc:23:db:
                    e7:30:f5:ff:06:d8:52:8d:7a:c9:0d:e0:62:8c:f7:
                    3b:10:71:88:05:90:cc:92:73:24:73:1f:bf:b8:01:
                    87:91:de:6b:d9:d2:a9:5b:8f:73:1a:47:a6:93:e7:
                    0b:b3:a6:4d:5e:60:78:97:b5:f0:e4:a4:a9:1e:85:
                    f4:32:c7:5a:90:34:13:18:a0:d5:c7:20:f7:94:dd:
                    ff:f6:c7:87:5f:c8:d7:85:12:68:2f:a5:6e:0c:56:
                    5a:9f:74:91:70:c6:42:57:7f:72:65:70:b5:32:d3:
                    f1:1b:f5:1e:f3:b0:90:d3:28:51:43:4a:17:ed:6a:
                    c8:b2:6c:83:0f:ce:e7:97:f0:23:04:f3:ff:55:f0:
                    30:2f:3a:a8:c5:11:81:52:47:b8:e9:98:67:c1:4b:
                    a4:7b:2a:cc:8a:dd:97:a5:1c:f6:22:3a:7b:4a:e8:
                    6c:1a:d7:7a:55:57:d9:78:34:15:f3:38:ed:43:1c:
                    a0:40:cb:99:fc:bf:e8:fe:98:1f:2a:3a:4c:66:b1:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:A5:03:40:8B:32:7D:10:55:43:4B:4C:5B:14:CF:63:48:D0:19
            X509v3 Authority Key Identifier:
                keyid:04:24:92:F0:B4:CC:22:CB:A1:5B:4D:62:B9:2C:2C:54:8B:DE:BC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/042492F0B4CC22CBA15B4D62B92C2C548BDEBCBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135372e302f32342d3234203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:22:13:71:96:5e:9c:6c:5a:05:42:92:f2:46:1a:c7:02:
         7d:48:24:14:9c:12:26:f1:5f:ba:d7:bf:22:bc:bd:26:cf:f2:
         28:0e:f7:ef:e3:9f:12:27:a2:da:18:90:78:94:aa:eb:dd:df:
         8d:16:8c:94:84:c5:1b:d1:ac:7a:e5:0d:cf:3d:65:53:b6:ca:
         09:c4:99:0a:6a:cf:ab:2b:18:f6:1e:44:6b:aa:cc:03:08:ce:
         81:52:25:ff:a7:5b:00:a4:5c:e3:2f:cc:a7:7e:88:3a:5a:ee:
         69:3c:e4:43:cb:de:dc:e9:83:47:14:73:84:72:f2:f1:98:17:
         e1:c0:f7:e6:52:2f:9d:5b:ae:87:63:d8:f2:45:db:ce:3a:7c:
         d0:b7:cd:ca:81:76:01:a6:ae:c7:b0:49:74:f7:28:92:02:95:
         8c:3b:ba:34:a3:d6:f2:6b:f1:e2:da:a2:fd:01:62:ec:ee:ab:
         25:16:7b:65:8b:2d:a1:f9:35:68:fc:4c:ae:3d:33:3b:b4:d9:
         98:66:a3:f7:d1:58:30:64:e8:56:34:71:59:19:65:fb:ed:68:
         8a:15:dd:9c:b7:80:b6:56:2c:0c:90:ef:33:74:27:3d:ad:6d:
         b2:6f:be:8f:91:2d:7a:c2:dc:2a:ae:47:1d:3d:da:33:b1:51:
         b8:9d:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:50:00 2026 by rpki-client