Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
File:                     3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa (raw, json)
Hash identifier:          kEifPC38y99NlyuPmuMAZtO26w9QNS1yLlcapuvkybM=
Subject key identifier:   A1:9F:CB:A0:44:4C:16:45:FB:F8:B0:EA:D4:4B:A6:EA:3E:EC:4A:90
Certificate issuer:       /CN=D4DA9F477593CD447FEE14D83B87CF3109732518
Certificate serial:       61CB03B628592D6982F5E048DF649B7B87956019
Authority key identifier: D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa
Signing time:             Mon 09 Feb 2026 20:26:37 +0000
ROA not before:           Mon 09 Feb 2026 20:21:37 +0000
ROA not after:            Mon 08 Feb 2027 20:26:37 +0000
asID:                     265440
IP address blocks:        168.194.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl
                          rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:03:b6:28:59:2d:69:82:f5:e0:48:df:64:9b:7b:87:95:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4DA9F477593CD447FEE14D83B87CF3109732518
        Validity
            Not Before: Feb  9 20:21:37 2026 GMT
            Not After : Feb  8 20:26:37 2027 GMT
        Subject: CN=A19FCBA0444C1645FBF8B0EAD44BA6EA3EEC4A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:c2:c5:df:ee:60:86:5a:5c:69:ac:af:8d:
                    46:7c:a2:2c:0e:38:01:3c:3f:00:61:5c:f1:ab:e4:
                    88:ba:7e:0f:a5:a6:b7:b4:d5:86:3a:6a:24:c0:21:
                    fe:ed:5e:f6:04:62:e5:95:8d:c9:78:48:fe:8f:00:
                    67:28:d3:12:81:a3:52:9b:72:0f:05:6b:49:c6:bf:
                    2a:11:4b:92:85:45:6c:60:e6:3b:93:53:ae:06:8e:
                    45:c8:33:b7:72:68:d8:3b:18:29:95:d1:a2:61:c0:
                    52:9a:e3:08:42:0f:76:bd:b9:0d:84:d7:65:bb:71:
                    ab:63:89:c5:05:75:23:41:f6:e6:a9:11:0c:06:b4:
                    27:60:6a:a0:f2:bb:49:34:8f:95:d0:d7:38:80:aa:
                    63:ec:e0:42:91:6c:61:79:d8:ed:7f:70:68:4c:fd:
                    ff:b3:73:47:86:25:3b:89:ac:f2:bd:d7:ea:72:2f:
                    1b:a2:37:c7:10:57:c6:70:9b:dc:87:ce:fb:cd:2a:
                    75:81:c1:69:5c:72:3a:30:73:91:a5:77:5f:14:ee:
                    b1:a0:16:69:14:8e:30:95:a5:ed:c9:8c:f1:2b:22:
                    0e:81:75:2a:d3:e0:43:15:76:88:41:de:1c:a9:b4:
                    66:10:a6:06:6c:4e:2c:b8:37:25:11:c4:6b:b2:d8:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9F:CB:A0:44:4C:16:45:FB:F8:B0:EA:D4:4B:A6:EA:3E:EC:4A:90
            X509v3 Authority Key Identifier:
                keyid:D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3136382e3139342e3230302e302f32322d3234203d3e20323635343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:5d:b7:1b:e4:bb:76:da:8e:db:85:d2:ab:96:bc:6f:09:
         d4:66:41:53:45:57:af:51:f5:cb:73:29:e8:93:0f:0d:8f:d8:
         00:da:af:10:35:06:71:08:aa:fb:19:53:37:3b:ac:eb:51:6b:
         73:59:1b:50:79:15:f7:d2:41:76:54:af:2c:0c:6d:4a:78:1b:
         e7:b3:cf:37:0b:38:5c:9c:73:c3:d4:e9:98:64:be:a7:b3:26:
         29:6e:f4:82:2f:a9:10:dd:77:99:fe:57:2a:4c:79:73:d8:0b:
         15:e7:f3:17:91:84:38:b4:28:cc:41:60:92:0e:9e:63:5e:3c:
         c6:b0:1d:d4:3f:e1:6d:37:01:62:50:9f:2d:ea:83:f9:7e:5b:
         2c:61:5c:e1:a9:ec:ce:d5:5c:37:0a:12:78:35:92:d2:6a:a1:
         44:b9:7a:c7:6f:7e:f0:f6:ef:2a:3b:48:df:f2:c3:db:69:e0:
         80:af:d3:48:46:8d:0d:e1:c6:e8:65:f0:14:4c:72:6c:77:ea:
         69:17:3b:af:d5:3a:e2:14:b6:9a:38:ed:9f:14:2c:25:bb:cf:
         ad:82:e3:57:d2:2c:b1:89:11:c8:00:cc:e1:d9:22:02:f3:90:
         35:5d:ba:8e:ea:fa:27:8b:3b:49:91:92:36:dc:b2:86:45:af:
         08:44:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:59 2026 by rpki-client