Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          XTS5GtebL9KNbZaNdQf9JT2hGCBQp4sMtdu8MkeHG20=
Subject key identifier:   53:70:D5:9A:56:D3:EF:A6:89:B8:E2:5D:49:6C:F4:E7:E8:4E:A0:D4
Certificate issuer:       /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
Certificate serial:       100CD4F704BD5B33B8554C00DE5B7C5CE9BA1A62
Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 06 Feb 2026 01:18:37 +0000
ROA not before:           Fri 06 Feb 2026 01:13:37 +0000
ROA not after:            Fri 05 Feb 2027 01:18:37 +0000
asID:                     262754
IP address blocks:        186.219.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl
                          rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0c:d4:f7:04:bd:5b:33:b8:55:4c:00:de:5b:7c:5c:e9:ba:1a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8
        Validity
            Not Before: Feb  6 01:13:37 2026 GMT
            Not After : Feb  5 01:18:37 2027 GMT
        Subject: CN=5370D59A56D3EFA689B8E25D496CF4E7E84EA0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:f4:58:e3:bf:37:64:52:ec:ac:ab:b0:69:
                    cc:13:19:89:ad:0f:ca:24:82:0f:9f:b5:d1:0b:6f:
                    03:b7:b7:9d:42:1a:56:54:85:38:c8:cb:1c:e6:fa:
                    c5:8f:53:85:ab:51:00:f7:bb:6f:a2:c5:18:57:cb:
                    7c:fd:9c:af:53:5d:bc:e2:b5:21:0e:93:fa:d5:00:
                    3d:50:38:2d:39:04:6e:0e:79:67:19:93:63:6e:8a:
                    b4:1e:3c:2b:ac:13:b1:7c:11:b9:ea:36:40:a5:ea:
                    07:9f:8c:e1:44:15:83:6f:43:fd:8f:a7:af:5e:0e:
                    51:14:e5:e6:67:80:be:9a:f0:64:55:81:5b:f2:b4:
                    90:46:ce:3a:20:ea:1b:bf:88:ca:8a:bb:7c:1f:bb:
                    22:b3:e6:02:47:0f:e5:46:11:96:0a:b9:1d:00:64:
                    2a:16:0b:b8:7b:37:84:25:5d:84:71:42:05:6c:a4:
                    ea:6a:3a:2d:c0:2a:a6:f4:f3:40:68:8a:55:5c:c6:
                    a1:81:3c:98:fc:4c:0c:f2:b2:7b:1a:53:f5:03:9b:
                    d0:53:90:48:42:36:8f:7f:8e:4f:92:ac:b5:fd:ec:
                    1a:f6:d2:73:7c:8e:34:1c:0f:45:bd:e5:0b:db:01:
                    4b:25:49:4b:be:8a:ef:ec:d4:85:0f:85:90:41:99:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:D5:9A:56:D3:EF:A6:89:B8:E2:5D:49:6C:F4:E7:E8:4E:A0:D4
            X509v3 Authority Key Identifier:
                keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9f:df:19:79:e0:bb:b3:74:9f:58:37:5a:7a:27:38:c3:9a:
         09:d4:e2:65:5f:b8:3a:8b:52:3d:f5:1c:b4:a9:a2:d3:0c:48:
         a2:20:09:1f:45:8c:c3:e5:30:6a:23:e3:a6:c9:f9:ca:1e:36:
         82:d4:c8:b6:93:94:41:0c:37:8d:01:ba:e9:0a:dc:51:2b:2e:
         82:f2:f5:18:fd:66:8f:64:37:3c:f4:9b:bd:51:79:94:22:59:
         b5:63:0f:e3:bf:59:cd:1a:aa:74:c9:a0:9e:c5:58:cc:41:94:
         e0:0a:66:1e:b1:a3:a4:81:82:50:c8:6f:01:6a:f8:cc:0c:72:
         a2:3b:78:49:b9:b4:94:7a:c4:4d:6e:83:52:82:a7:38:c7:c5:
         3f:ee:cc:1d:69:a9:74:bc:72:74:cd:78:9f:45:87:ce:13:da:
         b0:30:28:a2:25:3b:98:d5:70:e5:22:25:f6:85:c4:7e:75:e9:
         e3:33:64:06:82:a2:04:35:50:2f:5d:93:5c:7b:ff:53:db:28:
         f2:df:ff:07:cc:6c:64:19:e4:c3:99:9b:a3:1d:07:48:d4:03:
         b7:13:85:ea:32:a4:0d:2d:89:76:3e:79:e3:67:54:b3:93:6b:
         25:0b:5c:97:7f:3a:cc:5e:38:9b:e6:87:cb:5b:31:ab:62:63:
         88:1c:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:37:54 2026 by rpki-client