Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa
File:                     3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa (raw, json)
Hash identifier:          9kChXPRPrijv8NyR5UYvKAcPPV40yicE2NdUfEjoPYU=
Subject key identifier:   7E:F5:7F:6F:C6:DD:08:C2:59:E3:13:17:AC:7F:83:F2:6A:A0:E6:E9
Certificate issuer:       /CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
Certificate serial:       281B09DEA075F27EC5A2DFE1A16A1A7022C37244
Authority key identifier: 84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa
Signing time:             Thu 08 Jan 2026 01:56:22 +0000
ROA not before:           Thu 08 Jan 2026 01:51:22 +0000
ROA not after:            Thu 07 Jan 2027 01:56:22 +0000
asID:                     270992
IP address blocks:        187.86.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl
                          rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1b:09:de:a0:75:f2:7e:c5:a2:df:e1:a1:6a:1a:70:22:c3:72:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84BE8DAC97679B597EE7D16D314BEA427BB99664
        Validity
            Not Before: Jan  8 01:51:22 2026 GMT
            Not After : Jan  7 01:56:22 2027 GMT
        Subject: CN=7EF57F6FC6DD08C259E31317AC7F83F26AA0E6E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:99:d7:71:d9:16:56:58:9c:7c:19:7f:6d:9f:
                    7a:54:33:f8:0e:98:be:28:f5:01:a7:39:7c:c1:15:
                    0f:7b:30:33:0e:62:21:11:5a:60:fa:3c:85:40:80:
                    41:b6:2d:12:2a:df:26:99:ee:53:d0:9d:a0:c3:5e:
                    4d:9a:ad:08:46:d6:5d:0b:6d:9d:79:85:e1:b6:60:
                    32:b5:a1:70:12:14:4a:6c:e9:c7:ca:33:b5:b5:05:
                    b6:54:5e:a5:b7:7d:42:1e:d0:f1:1f:2e:68:dc:a1:
                    47:bb:fa:b7:8b:b1:f9:94:58:ea:4c:b7:b6:08:22:
                    92:ce:fa:2e:81:dc:aa:0a:4c:60:e6:d7:71:e5:dc:
                    fa:e6:42:de:2b:4d:c5:90:b1:8c:96:3f:f0:8e:6e:
                    ef:f2:11:69:e1:96:e7:9f:11:a4:c0:32:b3:31:8f:
                    5c:fe:69:af:43:98:9f:39:04:25:45:7d:9f:df:40:
                    5b:a2:8e:a0:4a:33:ee:3e:75:80:d2:72:d5:e3:e4:
                    9b:2e:7f:52:7e:70:87:ef:dd:56:74:70:10:b6:bd:
                    6c:c0:bc:96:6c:c9:6e:3b:2b:d9:d2:ed:46:83:23:
                    4b:58:0d:ba:34:9f:c2:d1:c1:cb:e7:b7:5f:e7:32:
                    d6:e1:22:58:29:75:a9:c8:dc:f5:fc:67:bd:16:eb:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F5:7F:6F:C6:DD:08:C2:59:E3:13:17:AC:7F:83:F2:6A:A0:E6:E9
            X509v3 Authority Key Identifier:
                keyid:84:BE:8D:AC:97:67:9B:59:7E:E7:D1:6D:31:4B:EA:42:7B:B9:96:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/84BE8DAC97679B597EE7D16D314BEA427BB99664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84BE8DAC97679B597EE7D16D314BEA427BB99664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6RwpKYqZE3MCSjEo9cmuhiCj1geUYuiHYfXrLKHyTbJ/0/3138372e38362e3136302e302f32342d3234203d3e20323730393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:a4:65:18:07:f3:4d:60:c2:3f:af:cf:53:9b:87:16:0c:
         86:3b:00:73:09:b0:ba:da:4d:6f:0b:1e:2b:9e:96:13:9c:7e:
         78:9a:e0:8c:bc:f0:1d:ae:2f:44:cb:c5:e4:9e:88:8e:b9:bf:
         71:85:84:c2:cf:a8:8f:49:e8:ca:b3:92:11:9b:12:cb:04:84:
         af:ac:67:5f:16:e8:42:c1:8e:49:77:d8:0c:63:a0:f6:4a:7a:
         78:f4:53:32:09:f0:61:04:21:98:49:83:0e:50:8b:9f:86:91:
         8a:3b:74:f8:07:ab:45:dd:d7:86:96:e2:31:ff:27:51:57:52:
         b8:78:c0:55:bd:53:d4:5f:0f:56:48:0c:da:31:48:03:fa:a9:
         85:20:8f:a2:50:f7:e6:53:4f:fb:2b:67:dc:2e:fa:94:b6:f5:
         ef:b4:19:31:c1:be:43:6d:18:31:fb:b4:cf:d1:a1:54:38:0e:
         53:fe:49:e2:4b:37:80:f3:3e:ed:d8:82:cc:71:92:06:a7:fe:
         db:2e:55:9c:b5:c7:a7:6d:23:b5:a3:ab:01:2f:ed:76:25:cf:
         de:f8:35:1b:f2:12:0e:20:f1:ca:fe:f5:49:10:e7:68:5c:85:
         0f:d3:96:c0:9c:4c:45:d7:10:93:0b:6e:2d:00:2b:29:30:27:
         87:54:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:45:34 2026 by rpki-client