Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136362e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136362e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          fKirZTiUB1DB5Ik0wNgxGQ67BYH7D7rgoXe+xp9uo8A=
Subject key identifier:   1B:88:55:5B:0A:45:D3:15:6D:B3:F7:26:C5:24:CE:CE:5C:C8:81:96
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       6D38770DD1378E07709F0962A7672C7E4082E669
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136362e302f32342d3234203d3e20323633353038.roa
Signing time:             Wed 28 Jan 2026 13:18:12 +0000
ROA not before:           Wed 28 Jan 2026 13:13:12 +0000
ROA not after:            Wed 27 Jan 2027 13:18:12 +0000
asID:                     263508
IP address blocks:        191.243.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:38:77:0d:d1:37:8e:07:70:9f:09:62:a7:67:2c:7e:40:82:e6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 28 13:13:12 2026 GMT
            Not After : Jan 27 13:18:12 2027 GMT
        Subject: CN=1B88555B0A45D3156DB3F726C524CECE5CC88196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:25:d4:6f:b1:47:fa:a3:c9:3d:65:40:84:
                    0b:a8:1d:11:49:29:43:36:e2:f5:e6:77:eb:f8:de:
                    01:6d:4f:ee:82:fb:09:c8:2b:6d:c0:8d:eb:fb:52:
                    5a:5b:bc:1b:00:9a:17:d3:03:5d:cc:b0:30:a7:db:
                    12:fd:c7:77:a0:04:1a:fa:45:5c:a2:59:c9:88:de:
                    ff:bb:80:fe:6d:4b:1a:13:30:ea:30:56:27:83:67:
                    bb:20:81:f1:96:73:7d:cd:e0:dd:07:61:9b:e5:3f:
                    8d:cf:f5:ce:43:89:61:d0:5c:4c:a0:2a:a2:89:c0:
                    c1:c5:5e:da:11:9e:b5:8f:c0:8c:88:e4:5a:49:2a:
                    7f:60:16:58:e6:99:49:3f:9b:ef:96:88:c0:8a:a9:
                    e7:81:56:4b:0c:cb:2d:69:4b:9d:55:cd:3f:9f:33:
                    4d:37:89:a1:ea:6e:8f:8d:90:d6:9c:56:8e:d6:cb:
                    a7:1e:3f:f1:71:4d:98:69:1f:8e:3e:53:01:d2:68:
                    32:90:38:c5:40:6b:a6:7c:d5:9e:34:d7:cc:fe:50:
                    df:5d:97:f4:99:8b:90:17:c1:fb:01:df:f7:7a:ca:
                    d8:6a:f4:59:f6:5e:0f:1f:54:65:ac:c7:9a:68:11:
                    d7:72:b9:75:26:47:ec:cf:ae:f5:bb:7c:5b:d0:79:
                    e4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:55:5B:0A:45:D3:15:6D:B3:F7:26:C5:24:CE:CE:5C:C8:81:96
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136362e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:97:8a:73:6e:89:08:46:09:d1:b9:29:af:c9:15:25:06:
         cf:70:e1:c3:91:81:f7:f2:7c:11:ff:43:d0:36:85:f6:b0:06:
         15:6f:30:79:75:94:b6:2d:b0:83:e2:f5:4f:d6:cf:7b:0d:9e:
         03:50:8e:f0:1d:6f:d0:84:69:44:b6:42:bb:8d:cc:9c:41:37:
         8f:43:87:7c:2b:f8:45:54:76:78:b2:bc:13:be:1e:86:38:8e:
         30:4c:29:e7:0f:86:42:bf:bd:54:8a:7d:7f:cb:d6:ff:72:b2:
         51:03:45:0e:21:5f:96:52:35:a1:8d:45:81:96:b2:ae:9e:0f:
         91:19:d7:23:2c:0a:df:d5:13:47:e7:22:37:a4:49:53:b5:db:
         c9:f8:58:bd:50:83:79:88:0c:f5:70:42:b6:c1:ef:fb:85:e9:
         dd:da:b6:1b:86:0b:87:33:aa:36:c5:86:98:1c:5c:af:01:0a:
         92:c9:f9:ec:b9:61:e8:93:b4:69:2b:b6:f1:d6:3a:bd:2c:e7:
         d4:73:5d:65:b6:a4:41:08:f8:4a:d8:9d:8d:b9:f8:6b:11:35:
         4e:c9:27:13:2c:a8:75:78:4f:c0:4f:7e:7e:84:33:4d:4d:7d:
         5e:0c:50:6c:78:af:87:23:df:eb:d3:2b:64:73:cf:5d:2b:04:
         0d:64:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:48:35 2026 by rpki-client