Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31382e302f32342d3234203d3e20323635313835.roa
File:                     3136382e3139362e31382e302f32342d3234203d3e20323635313835.roa (raw, json)
Hash identifier:          6rQQosV2hOwvQKeqsBLFfT9eEPEqZG7MSJ+b5eRmQQc=
Subject key identifier:   30:1D:BF:68:46:8F:A8:7B:D4:47:34:18:84:53:B9:B1:08:DD:45:43
Certificate issuer:       /CN=5F3B18ACB6D17DB71656252E569070817AC536BF
Certificate serial:       2CDB3E0DCBF44D29C036120D2EFD8BEF6997D55A
Authority key identifier: 5F:3B:18:AC:B6:D1:7D:B7:16:56:25:2E:56:90:70:81:7A:C5:36:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31382e302f32342d3234203d3e20323635313835.roa
Signing time:             Tue 10 Feb 2026 16:22:40 +0000
ROA not before:           Tue 10 Feb 2026 16:17:40 +0000
ROA not after:            Tue 09 Feb 2027 16:22:40 +0000
asID:                     265185
IP address blocks:        168.196.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.crl
                          rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:db:3e:0d:cb:f4:4d:29:c0:36:12:0d:2e:fd:8b:ef:69:97:d5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3B18ACB6D17DB71656252E569070817AC536BF
        Validity
            Not Before: Feb 10 16:17:40 2026 GMT
            Not After : Feb  9 16:22:40 2027 GMT
        Subject: CN=301DBF68468FA87BD44734188453B9B108DD4543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:3a:d2:a4:c2:6d:37:96:83:6d:7a:70:ee:
                    1d:69:00:44:9b:1f:cf:96:be:d1:26:6a:3a:66:7e:
                    d4:e4:70:ef:2d:d2:53:85:aa:b7:85:e5:35:32:1e:
                    f9:77:9b:e9:6a:72:8a:9f:b6:bf:96:66:b7:07:4e:
                    9b:e7:70:ef:a0:df:4e:6e:a6:7e:b6:9d:4a:c5:90:
                    89:6b:f6:8e:e1:b5:71:8e:bf:a4:65:0c:73:88:b4:
                    29:41:36:b6:34:d8:47:ac:7d:ab:1e:31:71:ab:e6:
                    20:f8:85:ac:ca:e7:bd:61:c6:56:dc:34:7c:ab:91:
                    93:d5:f8:1a:72:c9:5b:2b:b6:2d:64:52:22:f5:12:
                    cb:77:49:e8:3b:43:d1:f3:17:c6:3c:4f:7a:c1:b5:
                    56:8a:97:79:e6:e2:7d:8a:8b:54:8a:e7:27:e5:f0:
                    03:63:b5:0f:9a:db:ff:bf:46:ca:a2:f7:2d:93:e2:
                    aa:eb:ed:64:f7:77:65:d4:18:a1:33:ee:1f:5c:ae:
                    cb:85:f4:22:79:bc:61:c9:95:20:13:86:33:5c:df:
                    0f:e5:b2:54:e1:db:7d:11:30:67:a6:f7:70:fd:a3:
                    8e:42:57:b0:e8:90:22:3c:a8:f4:14:03:54:e7:95:
                    16:b3:78:98:b0:d3:84:48:b6:2e:37:8e:a7:f8:60:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1D:BF:68:46:8F:A8:7B:D4:47:34:18:84:53:B9:B1:08:DD:45:43
            X509v3 Authority Key Identifier:
                keyid:5F:3B:18:AC:B6:D1:7D:B7:16:56:25:2E:56:90:70:81:7A:C5:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/5F3B18ACB6D17DB71656252E569070817AC536BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F3B18ACB6D17DB71656252E569070817AC536BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMkef79xrRYP6v6UgPUqQ8j9CBMkamiEYB6JkwRPZdNQ/0/3136382e3139362e31382e302f32342d3234203d3e20323635313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:83:43:0b:b9:ba:a7:4f:cb:c9:56:e7:98:9b:9c:c9:71:
         92:60:67:24:7a:6f:52:5b:ab:e0:92:c9:15:47:96:24:44:02:
         28:d6:4c:f0:63:29:50:d5:6f:9f:41:f3:a0:dd:17:ef:e7:e1:
         b1:fa:21:03:ec:1f:89:f4:42:8b:9c:32:06:65:51:61:39:84:
         fc:04:17:5d:84:8a:2e:b9:fb:67:53:7e:f7:d1:06:c5:be:e2:
         36:2a:60:c5:16:92:7e:07:73:bd:da:80:b2:37:eb:1b:a7:76:
         f5:be:62:49:a2:7c:ce:95:9b:0c:53:97:3a:42:9d:be:df:40:
         25:97:b1:43:95:78:07:80:8a:1d:bf:f2:99:24:04:90:13:20:
         fc:f9:c3:cb:69:03:a1:ab:50:7e:73:da:fb:b1:be:cb:24:89:
         78:74:c9:56:64:21:ad:02:68:0d:be:8e:07:1d:51:84:0c:0c:
         a1:53:7b:af:c3:3d:b3:f8:16:ff:77:b8:87:cb:81:28:3f:cf:
         a0:49:1a:17:b2:0d:83:5c:f5:73:3c:c7:58:85:b5:e6:20:c6:
         90:ea:dd:e1:8b:72:99:08:14:5c:11:68:8c:a1:aa:82:3a:23:
         be:f0:6a:d7:2a:c7:01:45:78:39:53:b4:6b:30:19:5b:be:63:
         9d:86:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:47:44 2026 by rpki-client