Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa
File:                     3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa (raw, json)
Hash identifier:          uViSpDpqVvXAQNIGqlwfyrwZ26gKnpguQnkBJ3/OXwk=
Subject key identifier:   88:06:B6:C5:30:00:AD:5A:0B:44:3A:AB:1A:D9:D6:BA:73:F4:79:B5
Certificate issuer:       /CN=51A41F1275FF94CC496816F994B49E1F6B638B92
Certificate serial:       0D93864DFA5B298F332CED7611E2C109CC786736
Authority key identifier: 51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa
Signing time:             Wed 31 Dec 2025 21:10:16 +0000
ROA not before:           Wed 31 Dec 2025 21:05:16 +0000
ROA not after:            Wed 30 Dec 2026 21:10:16 +0000
asID:                     265174
IP address blocks:        167.249.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl
                          rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:93:86:4d:fa:5b:29:8f:33:2c:ed:76:11:e2:c1:09:cc:78:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A41F1275FF94CC496816F994B49E1F6B638B92
        Validity
            Not Before: Dec 31 21:05:16 2025 GMT
            Not After : Dec 30 21:10:16 2026 GMT
        Subject: CN=8806B6C53000AD5A0B443AAB1AD9D6BA73F479B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:97:81:04:08:5e:b8:77:f6:b0:6e:5d:0b:
                    23:c9:31:75:53:9d:7d:8e:3f:ee:a4:5b:7e:cb:25:
                    c7:f1:9e:b9:90:e3:15:33:94:d8:40:65:25:a1:b4:
                    60:07:24:7a:7a:47:ba:dc:b9:01:9c:16:48:67:80:
                    d1:0a:20:8a:94:64:bf:91:72:07:4a:c8:c5:9d:5d:
                    c8:f6:d4:d7:9f:36:56:ed:22:07:5c:21:4a:14:69:
                    c3:88:cc:4b:45:ad:76:a5:3e:89:7f:3d:6c:1a:ca:
                    db:ba:55:08:26:2f:1e:28:ef:a5:4b:c1:bf:f2:a0:
                    83:c3:3a:4c:38:c3:4d:1c:94:02:8a:e9:59:8c:4f:
                    60:6b:ad:d5:27:d6:cb:ea:90:d7:be:50:17:3b:c8:
                    c0:65:01:9f:91:f0:36:53:80:1f:5f:62:c6:c1:b4:
                    15:a3:1c:5d:29:22:f9:17:45:fd:a8:71:09:bb:28:
                    d7:31:54:c9:86:5f:66:d9:44:52:12:08:a8:f6:95:
                    68:0a:bc:06:c3:98:dc:36:ca:fd:09:7e:71:a4:50:
                    45:6b:96:24:c6:e9:a7:8f:ff:57:94:c2:d4:80:20:
                    d5:fd:9c:98:83:93:6d:53:5b:28:51:3d:20:3a:a0:
                    45:7a:44:59:12:a5:46:04:b9:5a:09:39:b6:2f:3f:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:B6:C5:30:00:AD:5A:0B:44:3A:AB:1A:D9:D6:BA:73:F4:79:B5
            X509v3 Authority Key Identifier:
                keyid:51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:31:51:e1:52:f8:d8:e7:d4:7d:4c:e2:eb:1c:ab:54:72:7d:
         90:27:32:76:98:0a:9c:b0:fa:c2:32:9f:56:94:da:f1:87:1a:
         6c:5b:d9:69:f7:7c:a5:cc:77:99:2f:f2:84:70:af:e0:c1:19:
         2e:d0:ce:9b:fe:fe:f9:ff:fa:7f:b8:46:15:e5:7d:33:ef:87:
         23:a7:3b:65:08:e8:18:7e:27:10:e2:40:c4:ca:bb:22:93:18:
         64:32:5c:ca:25:8c:e6:81:4e:b6:d3:40:b1:cf:83:77:3f:a3:
         b4:26:51:d0:9a:6f:72:a4:f5:85:7a:24:5d:cf:71:c0:61:62:
         24:84:b7:23:8e:a0:1d:96:ce:26:31:1e:6b:76:be:fb:85:02:
         ac:a5:8a:8c:9d:f5:61:60:fe:10:00:a4:c3:db:e0:5d:f7:c9:
         61:02:d8:e3:fc:98:ad:c4:c6:91:ca:3e:a7:38:41:31:b5:3c:
         e2:ad:8f:15:f3:b9:8f:00:84:b0:38:77:5e:f0:e5:92:28:6b:
         ac:bc:8b:34:55:d6:25:d2:4d:85:5d:87:47:85:15:71:72:67:
         3c:2d:30:b2:42:9e:2d:bb:6f:7a:b4:83:be:c8:63:06:62:0d:
         b1:0f:04:02:37:f9:e3:31:f0:45:c2:2d:13:ee:4d:be:5c:65:
         61:93:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:22:46 2026 by rpki-client