Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32342d3234203d3e20323730393830.roa
File:                     3136382e3139362e3139382e302f32342d3234203d3e20323730393830.roa (raw, json)
Hash identifier:          6bUis9BcnAFa3mkORE3JxwZXsZt0zDpOXqiLBLHJHTg=
Subject key identifier:   9A:F2:9C:37:5F:F2:DC:64:B3:53:6B:DA:A7:30:9E:09:00:38:29:0E
Certificate issuer:       /CN=0999EEBD16ACF640EA6ECD54D32D89799668A6E2
Certificate serial:       3CE124C7611CE4AAA3BB614583D253B2BC1A4071
Authority key identifier: 09:99:EE:BD:16:AC:F6:40:EA:6E:CD:54:D3:2D:89:79:96:68:A6:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32342d3234203d3e20323730393830.roa
Signing time:             Fri 30 Jan 2026 18:00:57 +0000
ROA not before:           Fri 30 Jan 2026 17:55:57 +0000
ROA not after:            Fri 29 Jan 2027 18:00:57 +0000
asID:                     270980
IP address blocks:        168.196.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:24:c7:61:1c:e4:aa:a3:bb:61:45:83:d2:53:b2:bc:1a:40:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0999EEBD16ACF640EA6ECD54D32D89799668A6E2
        Validity
            Not Before: Jan 30 17:55:57 2026 GMT
            Not After : Jan 29 18:00:57 2027 GMT
        Subject: CN=9AF29C375FF2DC64B3536BDAA7309E090038290E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:f3:56:74:ef:21:eb:6f:3b:71:51:7c:b3:
                    68:15:2f:86:b0:f6:66:ba:17:a7:cf:04:be:b8:a0:
                    4d:6c:68:6b:b6:a8:b0:25:88:00:24:88:d9:16:84:
                    2b:3b:21:e9:b0:3d:31:ec:42:ce:ef:81:7b:9e:fc:
                    2b:db:94:1e:c2:a6:61:3c:22:61:bb:bb:de:59:33:
                    a8:49:9d:61:ac:f8:3f:b3:f2:df:2d:95:0c:51:6d:
                    ee:49:56:d6:e1:5e:64:e5:1a:cf:50:83:bd:4c:fb:
                    57:38:a2:67:0a:77:b0:33:4c:2c:6d:6e:34:b2:fe:
                    d0:6d:d6:c7:53:e4:e9:35:79:36:ae:e5:b2:e1:b5:
                    09:cd:79:e2:03:fa:fa:84:c3:ee:98:52:b8:9f:07:
                    87:c3:90:16:32:ad:b9:ef:50:af:63:df:d9:40:9e:
                    0c:79:61:5b:ec:96:61:68:b9:75:cb:0d:1f:c2:51:
                    09:78:33:59:6b:b2:22:ae:b6:3f:43:bc:78:8b:00:
                    57:81:22:4a:a0:83:50:69:69:9a:6a:5b:5e:3c:96:
                    df:38:6c:39:a8:0d:81:98:1b:0c:61:34:eb:90:c0:
                    fb:87:d8:49:b9:ce:6f:8d:cb:7a:dd:b3:97:df:6c:
                    bc:3d:fc:53:74:d0:a7:47:50:9f:f9:f3:47:1b:81:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:9C:37:5F:F2:DC:64:B3:53:6B:DA:A7:30:9E:09:00:38:29:0E
            X509v3 Authority Key Identifier:
                keyid:09:99:EE:BD:16:AC:F6:40:EA:6E:CD:54:D3:2D:89:79:96:68:A6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139382e302f32342d3234203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:4e:ab:f8:11:aa:4e:98:85:d1:10:39:6c:a5:b6:8b:2f:
         64:9f:a1:5b:da:76:29:63:18:d4:31:6f:69:55:2d:e2:e3:a0:
         8a:d6:a1:6f:2f:01:ca:6e:1c:12:2e:e4:d6:d9:89:d8:a8:34:
         33:68:ab:95:02:0d:ea:d2:9d:d4:67:f2:0a:cd:9f:c2:9c:3b:
         9f:58:29:f1:7d:0a:98:f5:46:91:b6:1e:50:93:ed:17:2d:77:
         f5:46:08:69:74:9d:59:fc:66:49:96:19:fb:2d:ed:3c:93:ed:
         8a:3e:96:0a:c6:4c:df:55:57:ce:2f:63:0f:dc:69:1d:4a:f0:
         2f:19:41:2e:7f:05:71:7d:53:4c:fa:d9:04:ed:67:45:a1:88:
         3d:5c:8f:c4:a7:e5:0d:7d:0e:62:dd:56:41:fe:33:56:7d:40:
         e9:5f:e2:11:cc:28:e4:0e:62:15:14:bc:79:53:dc:aa:45:48:
         d6:20:98:b4:5a:58:35:4b:a1:05:7a:e2:c2:db:d7:07:d1:34:
         a2:a3:50:5b:e7:29:3f:47:f7:7d:ca:4e:41:36:90:76:fd:56:
         1b:b5:45:a5:54:54:12:cd:bd:ec:73:12:8f:64:af:43:7b:d3:
         bf:ef:08:67:22:18:f8:24:82:92:79:d8:2f:a8:ad:72:5a:c7:
         e6:ca:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:57:48 2026 by rpki-client