Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa
File:                     3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa (raw, json)
Hash identifier:          4TnL1HzAp+CH2tbNcbnGJzhXxq2TVyVOFfnpf6Cdsew=
Subject key identifier:   D9:06:B3:5F:C2:FF:31:39:4E:76:4C:F0:E1:3A:D0:78:13:60:03:7F
Certificate issuer:       /CN=6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244
Certificate serial:       1A09A026F6B994FA80D9776670A569AB1BBB285B
Authority key identifier: 66:18:D0:FA:CC:0E:93:EF:3C:C1:C3:C3:CF:E9:B2:AA:51:3D:52:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa
Signing time:             Fri 16 Jan 2026 01:40:39 +0000
ROA not before:           Fri 16 Jan 2026 01:35:39 +0000
ROA not after:            Fri 15 Jan 2027 01:40:39 +0000
asID:                     274621
IP address blocks:        186.195.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.crl
                          rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:09:a0:26:f6:b9:94:fa:80:d9:77:66:70:a5:69:ab:1b:bb:28:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244
        Validity
            Not Before: Jan 16 01:35:39 2026 GMT
            Not After : Jan 15 01:40:39 2027 GMT
        Subject: CN=D906B35FC2FF31394E764CF0E13AD0781360037F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:cd:8e:ca:9f:14:08:66:4d:0d:f0:39:01:
                    74:33:88:63:78:70:95:8b:e4:07:20:ec:c7:5f:c3:
                    cf:30:51:11:64:a4:32:a3:ae:54:80:40:f1:3e:59:
                    2d:36:15:ab:79:34:c0:e3:c9:7f:ad:ce:e1:14:ab:
                    ef:3a:24:91:ce:72:8a:3b:d0:a7:d0:3f:03:87:db:
                    7a:f0:90:b6:f9:c4:09:8d:b2:35:23:7e:fb:d8:bf:
                    8b:94:1f:9b:0b:f9:bc:42:ec:df:ec:b8:6c:b2:50:
                    9f:26:60:60:09:93:e9:ca:bf:b2:aa:60:05:25:e6:
                    6a:75:ff:9d:ad:44:2a:42:f2:b2:27:e1:15:b4:37:
                    fc:a2:87:a7:f4:08:28:37:34:1d:53:f4:25:9c:59:
                    f2:28:04:58:8c:70:72:0b:e3:53:ec:89:ef:cd:b7:
                    48:55:e3:44:09:85:98:c1:63:a1:36:30:fc:a3:2c:
                    73:61:99:a5:b6:d9:ed:8e:44:6e:88:38:5a:06:59:
                    22:72:9e:a2:2e:15:53:28:ad:5c:74:d6:fa:d5:1e:
                    42:f3:3c:a8:1b:53:ba:6f:1d:07:dc:86:b9:24:63:
                    5b:99:96:59:7e:70:bb:f1:eb:98:39:37:b4:71:cd:
                    2a:2d:a6:24:d5:1b:c9:a0:53:ae:68:ff:84:3d:19:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:B3:5F:C2:FF:31:39:4E:76:4C:F0:E1:3A:D0:78:13:60:03:7F
            X509v3 Authority Key Identifier:
                keyid:66:18:D0:FA:CC:0E:93:EF:3C:C1:C3:C3:CF:E9:B2:AA:51:3D:52:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6618D0FACC0E93EF3CC1C3C3CFE9B2AA513D5244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwvHYZf54EzEBCVULVBkLpBZ1a5S7R8iiHndTJ8Tf8Jg/0/3138362e3139352e3136352e302f32342d3234203d3e20323734363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5e:80:fe:f7:36:3d:df:db:4b:2e:bb:e7:b1:79:ec:51:a5:
         8f:c4:df:8c:3f:55:0e:39:2c:cd:95:e1:0e:45:f7:2a:64:44:
         1a:2a:01:e8:99:dd:79:d3:5f:48:23:36:7e:9e:8d:86:b4:ec:
         58:f3:16:71:63:68:37:ab:40:09:c4:5f:27:aa:59:e4:dd:82:
         25:e7:93:26:21:2d:48:a5:be:aa:a4:ec:c7:4b:85:80:fb:5a:
         7f:89:7c:47:0a:73:dc:30:53:38:d2:75:5d:46:a1:7f:e7:e7:
         f9:87:04:20:65:2b:02:4f:b6:86:6e:80:6e:17:45:f0:64:27:
         e5:a9:47:cf:b1:c8:31:ce:2e:cb:19:25:ee:35:84:5e:a7:f3:
         b8:40:af:21:fc:43:f8:12:ec:a4:74:b5:33:57:2b:d6:eb:06:
         55:0d:20:ab:e8:fa:16:67:5e:4f:09:f9:c8:3f:42:18:c5:05:
         51:78:a1:ad:e2:65:c5:45:f6:00:3b:b8:10:7c:50:88:7b:91:
         8c:3a:c6:7a:f7:6c:10:72:4e:73:91:30:71:53:6f:c3:f9:13:
         16:47:0b:cc:7d:15:c2:1b:5c:cb:47:6c:b0:1e:ad:60:58:2c:
         7f:5f:bf:75:0f:0b:0f:83:ff:d9:56:e1:cd:30:62:6e:92:27:
         4f:ab:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:06:09 2026 by rpki-client