Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/3136382e3139342e38342e302f32322d3234203d3e20323635333836.roa
File:                     3136382e3139342e38342e302f32322d3234203d3e20323635333836.roa (raw, json)
Hash identifier:          uJChLg7urF6KsQErasiWp5JfPtjwJe3R6ThTkDkxSTU=
Subject key identifier:   5E:7D:A6:C2:14:FB:6A:D5:8D:7E:34:A0:54:82:DC:F7:1C:84:26:2B
Certificate issuer:       /CN=5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A
Certificate serial:       7EB6AD08556F2EC105DB5B44338B04F98EF64EA1
Authority key identifier: 5E:6D:0E:75:4E:37:EE:DC:CF:1F:7E:CA:2A:37:E9:3C:FD:E4:38:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/3136382e3139342e38342e302f32322d3234203d3e20323635333836.roa
Signing time:             Tue 03 Feb 2026 20:36:06 +0000
ROA not before:           Tue 03 Feb 2026 20:31:06 +0000
ROA not after:            Tue 02 Feb 2027 20:36:06 +0000
asID:                     265386
IP address blocks:        168.194.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.crl
                          rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 11:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b6:ad:08:55:6f:2e:c1:05:db:5b:44:33:8b:04:f9:8e:f6:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A
        Validity
            Not Before: Feb  3 20:31:06 2026 GMT
            Not After : Feb  2 20:36:06 2027 GMT
        Subject: CN=5E7DA6C214FB6AD58D7E34A05482DCF71C84262B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:c6:22:0a:05:12:8a:49:2f:80:3e:19:72:
                    86:ad:37:88:ca:2e:b9:ba:2d:61:35:c0:39:c6:a8:
                    ba:54:ce:af:eb:fd:cf:0f:8d:63:95:6d:51:9d:e6:
                    a1:9e:70:6c:23:79:ae:a2:83:a2:08:c9:be:70:96:
                    a2:56:f9:e9:5a:91:24:a9:9a:40:f0:1c:55:ed:00:
                    0e:62:71:7d:90:30:9b:60:0a:44:9a:8d:f3:92:8e:
                    25:64:4e:b2:41:a2:0b:84:f2:76:5e:d9:a5:15:a6:
                    c7:00:24:93:51:9e:5d:95:96:c5:54:f9:18:a6:25:
                    36:a8:69:f5:7f:fd:28:a5:28:f4:f1:8d:8b:cd:df:
                    19:99:cb:57:94:a1:ab:a4:4e:ab:74:ad:61:60:5c:
                    2a:d2:8d:fa:09:e8:ce:83:21:e1:5d:65:dd:5c:18:
                    56:ba:4d:49:eb:83:17:7a:86:60:6e:e1:95:28:aa:
                    17:07:56:5f:14:7c:bb:fe:53:cd:90:9f:32:56:06:
                    ad:a8:ae:48:a5:d9:ca:c4:18:4e:8e:c2:b8:84:a2:
                    26:1c:40:d8:c5:68:ab:34:7c:15:60:7b:13:cd:16:
                    5b:03:34:2c:d3:e6:84:9f:26:27:91:7f:db:82:86:
                    f0:09:8f:c7:b5:ed:78:5f:c8:aa:a6:ff:0e:e8:83:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7D:A6:C2:14:FB:6A:D5:8D:7E:34:A0:54:82:DC:F7:1C:84:26:2B
            X509v3 Authority Key Identifier:
                keyid:5E:6D:0E:75:4E:37:EE:DC:CF:1F:7E:CA:2A:37:E9:3C:FD:E4:38:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E6D0E754E37EEDCCF1F7ECA2A37E93CFDE4387A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bb5fQn357dTVzpvZez21A1upNcYx7TzcZcmhZtGAnRx/0/3136382e3139342e38342e302f32322d3234203d3e20323635333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:da:e8:35:6b:ee:88:19:c1:42:db:be:57:09:dd:64:ac:
         74:49:42:9f:da:e5:b1:94:a1:44:bc:ab:28:82:91:30:23:9e:
         44:4e:e9:a7:37:cd:de:02:c6:1b:b2:80:c4:90:cf:00:1c:5f:
         df:5b:27:37:6d:49:9b:39:11:9b:d6:e5:16:28:0a:ea:71:e2:
         85:c1:44:43:2d:aa:62:f9:64:ec:e4:c5:93:34:33:b9:43:c0:
         ac:ac:10:ad:1d:73:c0:71:7d:a2:cd:e3:18:f8:4e:42:92:ed:
         d0:1a:c1:45:ea:de:d5:02:53:d7:cd:54:ad:f8:ed:0a:8f:81:
         1d:7b:ed:7f:78:15:8a:04:4c:b4:c1:15:df:2b:e2:22:b2:56:
         0b:5e:28:9e:73:40:3b:d5:1e:0b:f3:ce:63:c3:70:e1:58:8c:
         8b:ca:c3:9c:da:80:d3:88:e1:6c:b4:da:04:ee:27:3b:59:cb:
         b8:4b:ab:16:3c:b5:ff:f5:90:30:70:4b:ec:21:42:a2:e6:0d:
         b6:62:03:4d:e8:d4:58:46:4e:a4:6e:39:50:6f:f3:6e:1e:de:
         b2:4f:65:69:f4:cf:1a:37:a3:56:7a:ef:81:ce:f8:8a:7a:ab:
         d4:10:44:d1:5d:bd:a4:78:02:0c:a8:05:5f:09:c9:7d:ca:32:
         32:db:15:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:35 2026 by rpki-client