Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (raw, json)
Hash identifier:          sEQcH/MmUdhj4qZeg8tTfa6ACp7O9srZS6WMnAT4oeQ=
Subject key identifier:   0A:F3:EF:3F:F8:C0:31:E5:A5:82:34:07:52:9D:50:BB:22:3E:3D:2D
Certificate issuer:       /CN=642D27C2B88FC1E644188313B8DE644A2705C863
Certificate serial:       238354777CAC79E14F05FB8A54F16A05E69CA9ED
Authority key identifier: 64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa
Signing time:             Wed 04 Feb 2026 20:29:56 +0000
ROA not before:           Wed 04 Feb 2026 20:24:56 +0000
ROA not after:            Wed 03 Feb 2027 20:29:56 +0000
asID:                     53172
IP address blocks:        186.225.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl
                          rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:83:54:77:7c:ac:79:e1:4f:05:fb:8a:54:f1:6a:05:e6:9c:a9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642D27C2B88FC1E644188313B8DE644A2705C863
        Validity
            Not Before: Feb  4 20:24:56 2026 GMT
            Not After : Feb  3 20:29:56 2027 GMT
        Subject: CN=0AF3EF3FF8C031E5A5823407529D50BB223E3D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:78:c4:a1:7b:fd:0c:27:19:9d:47:08:7b:
                    a7:81:80:93:0a:1c:94:36:de:48:7a:b5:cd:83:f5:
                    d4:d6:c0:7a:02:b6:a3:7e:ca:12:b1:c3:c0:fc:ee:
                    35:3a:71:62:30:ad:29:ea:b5:8b:80:66:2c:0f:80:
                    ce:f3:f9:f9:0b:62:17:60:17:5b:e5:ef:0a:90:aa:
                    74:73:38:fb:2a:7d:69:5d:a6:1f:f6:ff:97:46:ab:
                    06:51:30:a8:d2:51:e9:8a:90:ac:5c:d6:b0:b1:ec:
                    1d:14:b6:6c:43:5c:30:c1:c8:63:31:5e:e9:0e:8c:
                    b2:1a:a9:e0:4e:cb:c3:7d:61:98:87:75:3a:23:a6:
                    03:16:2b:71:1a:a7:b8:46:90:e3:f8:a6:9b:76:96:
                    80:29:4b:dd:be:f1:e2:fb:e8:c9:15:f7:7e:53:e1:
                    bd:66:8b:37:5c:9b:78:55:67:52:aa:50:b2:71:3e:
                    dd:3d:15:9a:1b:bf:96:65:58:ca:87:5a:6e:62:a7:
                    55:52:5c:4f:91:dc:d7:8c:17:bd:db:2d:73:67:93:
                    d0:a3:ee:23:c0:db:5e:7e:9b:ef:fe:f3:7c:63:ab:
                    bc:aa:1b:b4:9e:a6:a2:20:a3:38:fa:f6:de:61:cc:
                    d0:5c:d6:0a:a4:46:4e:27:ff:2b:f5:83:49:12:19:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:EF:3F:F8:C0:31:E5:A5:82:34:07:52:9D:50:BB:22:3E:3D:2D
            X509v3 Authority Key Identifier:
                keyid:64:2D:27:C2:B8:8F:C1:E6:44:18:83:13:B8:DE:64:4A:27:05:C8:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/642D27C2B88FC1E644188313B8DE644A2705C863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642D27C2B88FC1E644188313B8DE644A2705C863.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/1/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:42:bd:ab:7d:d3:3e:03:5d:ea:21:4b:3f:3b:1d:aa:c2:60:
         1a:9a:b0:1e:83:93:64:cf:a1:22:e3:1c:1e:dc:32:4c:35:1b:
         9f:a3:db:53:33:45:8c:03:c4:f2:47:81:18:40:04:87:0d:18:
         7c:bf:75:ec:cd:a0:7b:bb:cf:0b:d2:2b:69:79:31:ba:83:b1:
         80:68:c4:a3:43:84:91:9f:0d:ff:2f:f4:53:bc:8d:a5:27:22:
         89:a3:6d:af:69:fd:a1:0a:2b:8d:cc:89:5b:4c:97:94:91:7e:
         04:42:e8:a7:04:0c:2c:54:d7:4d:e9:df:3a:9e:2a:ef:df:c9:
         66:f1:73:35:b2:98:f4:4f:75:69:c3:bb:13:3f:03:95:3c:11:
         6d:4d:94:a0:6a:14:58:b6:41:4f:97:0d:65:0e:1f:51:61:b3:
         ab:7b:9f:02:34:ea:cd:5f:f6:5d:97:72:67:06:48:7a:31:b4:
         96:ca:4f:de:62:7c:ae:4f:40:a2:06:d7:b2:7f:ba:68:6d:1c:
         70:6f:3e:1d:5b:12:5e:55:ce:e8:8c:5b:7e:cc:f6:d3:65:94:
         f0:e7:63:7c:21:a6:45:ba:31:99:9e:38:d8:e1:90:02:13:4e:
         6c:f0:4d:fc:1e:02:78:d9:59:49:6f:30:19:06:b6:91:96:b3:
         29:4e:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:49 2026 by rpki-client