Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e302e302e302f32302d3234203d3e203238323833.roa
File:                     3138372e302e302e302f32302d3234203d3e203238323833.roa (raw, json)
Hash identifier:          vSWLJnx4QZUxazD4A5pIPhLWywH5fomBX38YfSaVHNw=
Subject key identifier:   7E:69:0E:4B:0F:2A:4A:22:64:7A:38:47:B5:93:8B:37:D2:D9:CB:00
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       7078563A55A939D047E6297C5CD06B6ECA8ECEDC
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e302e302e302f32302d3234203d3e203238323833.roa
Signing time:             Fri 06 Feb 2026 20:00:00 +0000
ROA not before:           Fri 06 Feb 2026 19:55:00 +0000
ROA not after:            Sat 06 Feb 2027 20:00:00 +0000
asID:                     28283
IP address blocks:        187.0.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:78:56:3a:55:a9:39:d0:47:e6:29:7c:5c:d0:6b:6e:ca:8e:ce:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Feb  6 19:55:00 2026 GMT
            Not After : Feb  6 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:c1:b9:e8:15:52:61:15:82:79:ef:59:a2:
                    19:a1:ff:3c:b8:89:1b:19:87:36:05:9e:96:12:e7:
                    28:3d:b1:c5:ef:09:9f:40:b0:70:6d:39:34:21:aa:
                    a1:c8:23:20:b1:dd:35:28:8c:d4:9f:64:b7:45:9b:
                    56:1d:23:45:86:cc:73:57:e4:2a:3e:5b:bf:f9:d0:
                    3d:03:00:b4:ef:1a:ab:2c:ef:6b:55:1d:82:a4:94:
                    72:8c:60:3c:d5:b4:69:e8:06:3c:d7:4f:4a:d5:ce:
                    8f:49:81:42:51:35:22:7f:eb:0f:b3:d2:cc:be:46:
                    ac:66:7d:79:58:f6:7d:b8:d6:0d:3a:76:04:d7:01:
                    9f:f0:de:a6:3a:cc:be:f4:62:04:ad:b2:34:50:3b:
                    6c:8f:a3:de:c3:d4:ae:3e:c7:8b:99:de:a2:cf:15:
                    ce:f6:b4:93:55:ca:4f:7f:e0:07:99:d3:10:82:ce:
                    3f:52:82:29:ad:62:e8:56:3e:0b:72:34:dd:d4:ee:
                    d5:82:3c:18:c0:52:9a:98:38:34:e0:ef:2c:54:d1:
                    f3:b0:f4:d4:fb:44:d5:7a:bd:be:ef:67:5a:c7:96:
                    43:11:49:52:25:8c:a6:36:5e:52:65:1f:f4:d2:ef:
                    f7:56:e5:36:f5:7e:89:e7:5f:ee:09:4e:da:27:11:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:69:0E:4B:0F:2A:4A:22:64:7A:38:47:B5:93:8B:37:D2:D9:CB:00
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3138372e302e302e302f32302d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:05:7e:0d:b8:a9:5f:96:b3:23:38:5b:13:20:46:d9:9b:
         3a:b1:fd:69:4b:d5:0f:8a:10:92:d4:da:e2:ac:f2:c7:e3:41:
         7b:ab:02:07:5c:96:1c:77:8c:26:20:29:46:cb:65:0c:cf:56:
         46:2a:44:f0:3a:44:e8:8e:64:25:d0:e0:22:90:0f:c9:7a:f8:
         81:eb:4d:2f:7e:bf:2f:dd:ce:c4:e0:51:69:29:96:7c:de:46:
         45:bd:89:0e:2c:1e:4e:64:94:33:96:57:8e:89:23:3c:f6:4a:
         5b:6c:55:33:1b:57:b8:b9:fa:5c:67:68:35:02:62:8d:b3:8b:
         cb:15:5e:82:5f:49:45:87:c9:cd:ab:a4:92:2a:e3:c2:52:99:
         80:5e:f4:db:cb:64:16:0b:62:19:2b:73:a4:40:2a:10:69:46:
         1c:60:de:b3:3c:06:c8:47:fb:3f:e5:b6:b6:71:34:e6:9a:95:
         22:79:4a:d8:7c:e0:2a:a6:ec:bb:4f:b2:c0:60:5a:8b:8c:6b:
         e5:5d:80:9b:80:10:c9:92:45:8a:5b:20:2f:ff:03:29:69:b1:
         af:44:b8:18:e0:8c:2e:49:c9:64:7f:0d:b4:5c:c5:4c:28:d2:
         19:dd:3a:e7:ca:2c:f6:cb:83:15:95:bb:24:bb:b8:00:21:06:
         f2:08:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:51:45 2026 by rpki-client