Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa
File:                     3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa (raw, json)
Hash identifier:          Ms6q71FgHyV6cKM7CqMhlx7mYZDItYR/IsK7KBpXQjY=
Subject key identifier:   EB:0D:C7:60:38:D9:22:91:CC:5B:D3:1B:FF:3F:BD:BA:32:8A:98:27
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       4E7770B08F36CA8104738100BBD9F7729AF00DE2
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa
Signing time:             Thu 05 Feb 2026 10:56:29 +0000
ROA not before:           Thu 05 Feb 2026 10:51:29 +0000
ROA not after:            Thu 04 Feb 2027 10:56:29 +0000
asID:                     270370
IP address blocks:        190.89.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:77:70:b0:8f:36:ca:81:04:73:81:00:bb:d9:f7:72:9a:f0:0d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Feb  5 10:51:29 2026 GMT
            Not After : Feb  4 10:56:29 2027 GMT
        Subject: CN=EB0DC76038D92291CC5BD31BFF3FBDBA328A9827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:d0:3a:13:f6:19:cf:eb:e9:a4:e4:95:8c:
                    56:6e:06:df:31:33:5f:8e:24:1b:8a:56:8f:05:60:
                    2a:e1:65:bc:e5:7a:92:34:7b:16:c0:ce:56:72:b6:
                    19:3f:81:a3:8f:20:b3:a0:a1:7a:a4:dc:d3:ca:53:
                    fd:bc:1e:5e:3a:a0:43:ac:2e:60:59:6c:cd:5b:4f:
                    3d:c3:e6:bf:01:ce:d3:9f:ee:f0:1c:33:2a:30:be:
                    3b:fb:ef:2d:5e:c7:52:1c:f5:98:c0:19:80:71:9c:
                    48:53:a5:9b:cb:71:fa:d9:98:21:ab:20:49:d2:bc:
                    04:82:5a:e0:a0:7a:86:ef:eb:56:b2:cd:29:a9:fd:
                    4d:8b:5c:24:fe:9d:a5:76:e6:23:65:43:ef:83:6c:
                    7d:75:c4:ed:18:05:a6:5c:51:52:50:a7:ff:dd:ba:
                    92:76:21:f4:1a:41:3a:d9:b4:52:1f:c4:74:e1:cd:
                    6c:73:4c:27:fb:1d:6a:33:54:6d:89:d2:40:d8:79:
                    68:e7:83:e3:46:2c:3d:3c:d7:3b:54:c9:32:0d:d4:
                    d2:dc:b0:ea:cd:cd:32:cc:6b:08:76:fe:16:cc:27:
                    15:f3:c2:b2:82:dc:21:d9:01:6a:c2:22:37:fb:b8:
                    66:1f:50:d1:b8:be:7d:9c:a2:a4:3f:56:1d:e0:52:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:C7:60:38:D9:22:91:CC:5B:D3:1B:FF:3F:BD:BA:32:8A:98:27
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/3139302e38392e3134392e302f32342d3234203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:69:7d:c0:e1:e7:74:ee:11:72:f7:9a:73:ca:24:bd:6f:c0:
         e3:13:4f:ce:f9:16:d6:6c:49:8f:e5:d1:0f:e0:55:7b:52:7a:
         4c:bc:ef:e0:3d:8d:c8:48:9b:b1:ee:22:e9:2d:09:8e:60:6f:
         7d:7a:ad:bf:fc:f2:2f:ea:37:b2:d8:e1:57:48:99:a2:e4:fa:
         88:16:12:e5:3f:ea:61:6f:9a:12:cf:4d:48:2d:a3:3c:16:8c:
         75:99:c7:d6:92:23:ae:a7:d0:1a:e2:ca:27:8f:86:97:b2:3a:
         a4:ec:b4:9b:d1:4a:78:f8:bb:64:9d:33:ea:e0:9a:7d:33:48:
         61:11:38:a2:c3:73:bf:c8:20:fc:e5:81:86:6c:58:ca:78:0f:
         2a:cb:88:23:4a:b1:a6:38:69:f2:01:4e:c9:76:55:44:85:84:
         57:ed:5c:32:ed:e5:05:7a:39:9e:a6:fc:e7:95:4e:ec:32:e1:
         82:87:6a:ec:55:67:ad:83:c7:33:4b:40:e2:c5:19:16:5d:83:
         bb:65:c0:d1:f7:f3:8a:a4:b2:28:b6:ce:88:5c:69:03:af:dd:
         96:32:f8:5f:a1:be:35:8a:33:d3:59:38:10:e8:66:70:2d:fc:
         da:20:d0:77:76:e3:de:b0:c9:37:b6:ac:61:3d:1f:07:e4:0a:
         8d:0a:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:13:34 2026 by rpki-client