Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3138362e3235312e37352e302f32342d3234203d3e203631383737.roa
File:                     3138362e3235312e37352e302f32342d3234203d3e203631383737.roa (raw, json)
Hash identifier:          1rfp7WmxC6zhLlvIXA0cootzIa1SN6PmpAiwf90O050=
Subject key identifier:   53:37:1E:28:C9:3C:F2:46:59:21:BA:FE:5B:10:8D:ED:DF:6C:75:A0
Certificate issuer:       /CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
Certificate serial:       2E7AE51DB487F3E57ABA0F7EB34A882324B72FAA
Authority key identifier: 2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3138362e3235312e37352e302f32342d3234203d3e203631383737.roa
Signing time:             Fri 06 Feb 2026 15:46:40 +0000
ROA not before:           Fri 06 Feb 2026 15:41:40 +0000
ROA not after:            Fri 05 Feb 2027 15:46:40 +0000
asID:                     61877
IP address blocks:        186.251.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl
                          rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7a:e5:1d:b4:87:f3:e5:7a:ba:0f:7e:b3:4a:88:23:24:b7:2f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
        Validity
            Not Before: Feb  6 15:41:40 2026 GMT
            Not After : Feb  5 15:46:40 2027 GMT
        Subject: CN=53371E28C93CF2465921BAFE5B108DEDDF6C75A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:b9:ca:f2:07:7d:16:42:14:91:01:7e:ef:
                    5e:32:c9:83:2b:39:f1:31:98:ce:ae:07:f8:9c:56:
                    93:85:87:b1:d3:23:dc:7d:49:7a:60:94:5f:2e:34:
                    a9:b2:9f:1f:38:19:3d:72:b5:32:e4:d8:a4:d8:3e:
                    07:ff:db:10:30:2c:b1:73:c0:c1:2b:e0:74:06:be:
                    0e:39:e5:c1:ff:2c:fb:0d:cd:10:77:a0:36:3b:d1:
                    5d:67:4d:f5:dc:3f:d4:f9:c4:29:d8:78:91:f2:81:
                    ef:de:cc:56:b1:3f:24:ed:ce:45:e8:84:14:97:9c:
                    5c:47:1a:54:c8:e2:cf:c3:e3:56:81:66:2d:86:8e:
                    3c:8b:2e:bd:69:22:af:fd:27:35:c4:5a:e0:d6:96:
                    fc:bc:68:9a:c3:97:3c:14:d2:22:76:06:d8:8b:27:
                    c2:db:ad:10:96:d7:92:c2:cd:0b:c9:11:6a:37:93:
                    e5:22:da:21:85:dd:cd:d7:0b:3d:45:25:dd:4b:eb:
                    0c:ad:18:e4:2a:26:01:dd:37:0d:ba:3f:f9:70:56:
                    3d:d7:b6:3e:f6:c1:33:64:37:b2:d2:b5:08:2d:83:
                    5d:b9:5e:68:63:d7:92:5e:37:fe:00:39:28:03:8a:
                    eb:85:54:a3:c6:3c:ac:fd:cd:4c:fa:ab:30:5b:fc:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:1E:28:C9:3C:F2:46:59:21:BA:FE:5B:10:8D:ED:DF:6C:75:A0
            X509v3 Authority Key Identifier:
                keyid:2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3138362e3235312e37352e302f32342d3234203d3e203631383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:a6:cc:74:a8:be:af:17:a8:0f:c0:fc:36:49:4c:9a:73:
         8d:41:6c:88:84:27:8d:43:c3:51:c1:ae:a8:7c:f4:2a:3a:60:
         d1:d4:35:83:d0:bb:9e:68:84:b2:5c:cf:d5:b1:21:3b:44:0e:
         58:cf:9c:eb:7f:2c:96:47:95:cb:ed:21:ca:a5:20:4c:b3:fe:
         03:61:95:22:8b:1b:4e:28:0b:62:4f:4e:62:72:0c:32:9d:12:
         fb:63:38:13:d9:95:35:69:59:5d:7e:85:34:ba:b9:cb:2c:a7:
         aa:64:70:60:e6:c7:13:80:87:03:ad:ea:c2:aa:bd:12:97:a1:
         7b:1f:87:0c:df:4c:b4:30:fa:47:79:61:26:28:9f:27:5e:e4:
         43:f2:94:b4:42:44:ac:32:8d:f0:e4:5e:05:1a:b5:9f:35:9e:
         04:4c:42:79:29:8b:be:36:b2:34:9d:ba:fc:70:8a:6a:61:30:
         ae:d4:67:86:3a:9e:fd:b7:d7:d0:5b:1c:a9:bf:cf:fc:eb:7f:
         30:76:68:f4:dc:81:e0:86:5e:39:8c:d6:3b:2d:26:dd:36:77:
         2d:f6:ba:31:41:15:89:9b:a1:dd:a2:61:1b:cc:27:8d:eb:b7:
         70:29:ab:2d:25:b1:91:b8:3f:21:f5:40:6f:4e:48:66:9a:a3:
         89:55:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:46 2026 by rpki-client