Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa
File:                     3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa (raw, json)
Hash identifier:          52u++O5tmFxwL90yhYKyAiKmOLGDADcNUL5anpethYY=
Subject key identifier:   05:B1:74:E2:3F:8C:6F:4B:E1:23:E6:A1:AB:A9:A1:6E:1B:CD:B3:7B
Certificate issuer:       /CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
Certificate serial:       7E20A2F839A65BB2FD6A740E70B37D753A21E419
Authority key identifier: BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa
Signing time:             Wed 18 Feb 2026 17:02:35 +0000
ROA not before:           Wed 18 Feb 2026 16:57:35 +0000
ROA not after:            Wed 17 Feb 2027 17:02:35 +0000
asID:                     270244
IP address blocks:        187.62.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl
                          rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:20:a2:f8:39:a6:5b:b2:fd:6a:74:0e:70:b3:7d:75:3a:21:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD23F2E871C9F5E6138D254501FBE2AC35AA7326
        Validity
            Not Before: Feb 18 16:57:35 2026 GMT
            Not After : Feb 17 17:02:35 2027 GMT
        Subject: CN=05B174E23F8C6F4BE123E6A1ABA9A16E1BCDB37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:3c:60:11:16:e7:64:f1:49:47:21:29:11:
                    fe:bf:9a:a3:6e:90:3a:53:88:e0:bd:17:e0:02:4f:
                    81:08:56:1b:5f:22:f7:27:2f:83:ef:0c:52:93:d8:
                    ac:90:13:d4:fb:2f:55:f8:d2:b4:45:79:2d:df:a7:
                    be:f8:e4:5d:63:1b:64:62:78:2e:b9:37:ff:93:1b:
                    76:4e:de:aa:6d:3e:81:ab:36:64:64:ed:2f:0d:d4:
                    f6:32:a5:c9:22:1d:91:e5:cf:51:53:90:e1:f3:ed:
                    9f:89:fc:49:96:66:2f:2b:05:6e:0f:1b:62:6d:ba:
                    fb:10:11:6d:f8:ce:ec:7d:cc:ab:73:ed:ba:bd:68:
                    05:56:67:ba:7e:a1:15:f7:16:13:9b:62:11:6e:7d:
                    92:08:c1:8c:23:a1:f6:27:db:71:62:d4:03:65:df:
                    08:17:a8:20:8a:d0:0a:0c:29:58:10:dc:04:f6:dd:
                    3b:e8:9d:8d:c9:57:2f:45:86:30:ef:4d:6b:56:d2:
                    7c:ef:43:b9:b3:68:f2:c1:15:0e:8e:90:34:47:dd:
                    d1:1e:89:0f:c2:39:c5:a0:71:b7:52:93:d5:1e:17:
                    57:2c:42:bf:92:1f:25:6b:af:c0:62:75:d0:82:fe:
                    ff:da:df:9a:b1:b9:ac:f8:a6:b8:4a:80:30:b0:16:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B1:74:E2:3F:8C:6F:4B:E1:23:E6:A1:AB:A9:A1:6E:1B:CD:B3:7B
            X509v3 Authority Key Identifier:
                keyid:BD:23:F2:E8:71:C9:F5:E6:13:8D:25:45:01:FB:E2:AC:35:AA:73:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD23F2E871C9F5E6138D254501FBE2AC35AA7326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FyDE2ADhf8PyAyCDoAUL5EUzxrU1dc8JXJeVYQ96NRyA/0/3138372e36322e3130302e302f32322d3234203d3e20323730323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:af:2d:33:04:4c:0b:e6:20:f8:1f:a8:33:f2:fd:16:87:
         0e:b1:50:92:ec:0f:4d:3e:1a:26:b9:e6:74:a8:71:64:36:d8:
         ef:e3:99:1b:18:93:e7:21:4f:2d:22:2e:d1:a3:61:eb:e0:33:
         6f:db:16:bc:a5:e4:72:b3:77:8b:d3:11:d8:81:d7:c9:29:bd:
         7a:51:ce:9e:92:fb:c6:d1:0b:2c:69:e0:e2:ed:31:e3:4a:4f:
         fa:25:b3:c1:95:f3:78:d8:a4:aa:4a:24:c8:82:4b:db:09:60:
         39:ab:31:b1:f8:9e:6b:e9:d9:ae:28:3c:69:36:b8:3d:8f:1b:
         11:5b:28:8e:b7:f1:63:92:34:08:cc:0f:47:62:34:e7:c4:f2:
         d4:40:db:e8:e9:44:9f:ae:46:7f:95:c0:6f:19:87:0a:fe:c7:
         3b:78:e2:0d:b6:00:35:11:6f:d9:46:dc:42:04:bd:32:04:07:
         28:93:46:9a:25:65:39:c1:44:f3:3d:29:ee:a1:e6:32:28:54:
         a6:44:05:bb:5c:4c:6f:7a:4a:03:7b:b3:53:7d:97:e1:47:c6:
         97:20:68:fa:db:4e:93:33:ad:54:41:b7:a7:63:4e:e4:c9:3e:
         be:b8:af:60:23:2a:87:e5:62:68:ae:c8:e8:83:81:d4:d6:c6:
         fe:dc:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:01:40 2026 by rpki-client