Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
File:                     3139302e38392e34382e302f32322d3234203d3e20323730333535.roa (raw, json)
Hash identifier:          fXjsJodA58l04fNTe5rsKu+G7ZOcKrOR3wb8as6HWVw=
Subject key identifier:   AE:19:39:BA:8E:AF:53:69:3B:EF:F3:53:2F:22:30:5D:C1:85:74:B0
Certificate issuer:       /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
Certificate serial:       7898AF0E8891E981080E6CA6A6A9DA2F47CE1AA0
Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa
Signing time:             Fri 06 Feb 2026 00:28:55 +0000
ROA not before:           Fri 06 Feb 2026 00:23:55 +0000
ROA not after:            Fri 05 Feb 2027 00:28:55 +0000
asID:                     270355
IP address blocks:        190.89.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl
                          rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:98:af:0e:88:91:e9:81:08:0e:6c:a6:a6:a9:da:2f:47:ce:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
        Validity
            Not Before: Feb  6 00:23:55 2026 GMT
            Not After : Feb  5 00:28:55 2027 GMT
        Subject: CN=AE1939BA8EAF53693BEFF3532F22305DC18574B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:f1:b4:6d:b1:f1:f8:c0:79:c2:54:5f:d4:
                    ba:26:cb:3e:85:2a:db:71:ad:3d:c5:de:23:5d:cd:
                    5b:ed:75:7d:9a:10:4f:d9:db:8d:f8:bd:58:a8:e0:
                    08:f6:3c:0e:e7:de:1a:cb:16:85:c4:12:f0:cc:fb:
                    a2:46:82:04:ef:84:ce:40:71:ea:e3:ed:1b:83:92:
                    d9:ae:b1:d2:23:42:6a:46:48:db:6c:13:0a:05:a7:
                    e1:f6:9e:80:b5:e0:be:c7:9d:64:8a:58:7b:9a:e5:
                    c9:dd:46:cc:ba:57:df:52:6e:ff:9c:e3:ed:09:a7:
                    fe:db:9b:80:12:d9:87:31:c2:db:37:87:0c:12:77:
                    e9:42:66:b9:36:46:2d:32:56:36:c8:b9:f9:5b:9f:
                    32:ad:52:35:5e:c9:d9:24:9e:fc:1b:7d:f9:b8:48:
                    22:49:ef:2d:70:93:80:a7:2c:83:ed:1a:94:21:83:
                    41:66:c6:7c:32:b5:97:6c:83:3c:10:31:f3:37:b7:
                    83:af:96:4e:81:12:7a:9d:7e:e2:f8:7f:45:e0:c6:
                    9f:f6:2e:b3:23:ae:c3:c2:59:4e:9a:3e:5b:4f:e1:
                    b6:aa:fb:09:ed:29:bf:a3:aa:e5:b4:8f:6a:bc:c5:
                    89:cb:6c:be:30:f6:67:6f:8c:f5:d3:f4:0d:3e:31:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:39:BA:8E:AF:53:69:3B:EF:F3:53:2F:22:30:5D:C1:85:74:B0
            X509v3 Authority Key Identifier:
                keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/3139302e38392e34382e302f32322d3234203d3e20323730333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:a0:91:fe:0f:75:20:c1:0e:27:01:8b:a6:be:c2:9e:cc:
         36:80:4e:68:c7:6f:c9:86:41:78:5c:d4:6f:68:38:bc:f0:ec:
         35:dc:d8:7e:d7:18:f4:d2:c6:36:0b:a4:c2:58:49:cc:63:71:
         e7:f1:c3:aa:9f:31:30:57:57:d2:31:f6:bc:f4:9d:09:dd:87:
         b7:df:db:df:14:7d:fd:7b:ec:d2:98:a9:ac:48:d2:59:0b:57:
         1c:af:d6:36:d3:0d:a2:ba:dc:c5:bf:03:ad:71:62:02:f9:cf:
         89:9b:6b:75:70:0c:17:f8:85:22:5c:44:26:59:4e:ed:98:61:
         93:a6:e8:0f:c3:29:e3:73:dd:20:1b:c3:f9:4e:4b:90:f1:7f:
         f9:45:a6:04:44:99:46:dd:af:0f:7f:c2:8f:14:db:6c:83:65:
         85:60:a8:3b:88:37:61:9c:db:39:ba:a2:a2:a7:39:1d:e7:3b:
         da:2e:0f:ad:9d:2f:3e:4b:9c:d0:84:de:2d:81:d4:69:6c:82:
         e5:f2:67:1c:99:79:e4:2a:ba:54:66:cf:58:43:3e:24:9c:bc:
         6a:7f:77:0e:6a:d0:0b:5d:72:1a:e2:78:e9:c8:77:f3:6e:8b:
         06:83:09:85:07:cb:35:ea:5c:ba:0c:4e:15:75:65:1e:b6:a1:
         c1:37:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:09:52 2026 by rpki-client