Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa
File:                     3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa (raw, json)
Hash identifier:          H6oW+Vcv51WGvH0NP1FCbXWPuLpIMcM0eHju8Hys6bg=
Subject key identifier:   DA:25:25:EC:18:C9:78:DA:70:CF:EE:56:94:B1:70:52:C0:71:FD:6E
Certificate issuer:       /CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
Certificate serial:       2B634C8B6AB46289BBCEE03E477D1042A20FA82D
Authority key identifier: E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa
Signing time:             Thu 05 Feb 2026 07:05:43 +0000
ROA not before:           Thu 05 Feb 2026 07:00:43 +0000
ROA not after:            Thu 04 Feb 2027 07:05:43 +0000
asID:                     270796
IP address blocks:        189.36.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl
                          rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:63:4c:8b:6a:b4:62:89:bb:ce:e0:3e:47:7d:10:42:a2:0f:a8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Validity
            Not Before: Feb  5 07:00:43 2026 GMT
            Not After : Feb  4 07:05:43 2027 GMT
        Subject: CN=DA2525EC18C978DA70CFEE5694B17052C071FD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:87:6e:e3:f9:2a:8a:07:15:80:c3:2a:b1:
                    92:83:4d:53:f1:91:12:f6:5d:3f:68:f3:86:59:04:
                    25:c6:97:de:e5:11:dd:6f:4b:32:ab:59:21:b1:7a:
                    80:b4:b6:a3:ad:4f:2f:01:43:12:c1:d0:80:98:6f:
                    b6:9b:0e:11:da:69:86:10:68:69:57:b9:73:fd:85:
                    02:eb:c2:ec:f7:a4:66:93:0e:20:24:72:5e:4a:08:
                    80:39:c3:b1:bd:10:6b:62:72:98:c8:0e:7f:7d:0a:
                    1e:14:eb:f4:e9:b2:29:70:d1:5b:34:d9:56:b4:42:
                    b4:1c:39:4c:38:36:04:64:b7:05:a6:8b:a8:88:1e:
                    6d:7a:4b:c2:0a:b2:d9:3e:a5:38:5b:b6:2c:39:b2:
                    9f:2b:27:88:7c:ce:a9:6b:27:e6:14:4f:e7:19:a0:
                    39:e8:31:1a:b5:33:93:e4:ad:f9:d8:5d:24:cd:fa:
                    1e:40:3f:5f:ae:41:4b:62:be:80:33:bb:8e:51:aa:
                    10:0a:b7:6f:68:88:e4:0d:d9:0d:19:53:00:43:f0:
                    fd:42:e3:d9:48:a7:7c:91:d0:7d:a2:50:0a:71:c3:
                    89:16:7b:0e:71:47:2b:4b:24:df:95:c8:3d:ea:28:
                    a1:61:14:65:28:90:62:08:d2:7a:52:ed:a4:3b:7a:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:25:25:EC:18:C9:78:DA:70:CF:EE:56:94:B1:70:52:C0:71:FD:6E
            X509v3 Authority Key Identifier:
                keyid:E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/3138392e33362e3235322e302f32322d3234203d3e20323730373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:ec:dd:d8:96:85:eb:50:c9:e0:9c:30:f2:87:91:bc:66:bc:
         0f:b5:a4:1d:9e:c0:15:14:63:c4:5c:8c:f0:9e:55:98:44:19:
         e6:1d:9d:b4:54:a9:e8:26:82:58:89:ea:1f:89:47:10:85:02:
         45:d4:0b:ad:fb:b5:44:4f:72:4e:f3:66:14:0c:ef:ad:21:1b:
         c1:81:c6:fc:85:bf:95:36:87:f9:fe:e1:2b:d0:83:23:5a:2c:
         39:c6:7d:27:89:c8:22:c3:2b:96:81:24:13:a1:5a:8d:ce:59:
         0d:84:e0:e7:36:f4:e2:0a:43:9e:f9:92:98:59:4b:78:8a:1a:
         c4:6e:e6:cc:c3:78:36:85:61:57:56:6d:ac:bb:10:08:22:a2:
         f7:c8:04:46:74:fe:43:a9:c9:d2:ab:18:a0:18:2b:1d:23:ad:
         f4:7d:60:45:1d:81:5f:fb:24:37:b7:8a:ac:bc:d8:78:8e:83:
         c8:19:0e:f8:b3:6b:6d:64:a7:83:c2:2a:85:01:e3:9c:13:8d:
         e5:f2:77:27:87:94:61:a8:1e:a2:01:f9:a9:8c:e2:77:04:dc:
         c3:bb:d1:d1:8e:c0:ef:f2:b4:a8:e5:41:ef:f5:bb:f4:85:e0:
         d1:ef:0b:57:af:9f:32:cf:4b:da:b0:ae:8e:31:4f:e7:f9:d6:
         07:b7:e8:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK2NMi2q0Yom7zuA+R30QQqIPqC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMyMEIzNDU0RUVCOEU0MUZEMzFDNzczQ0Y4M0IzQzdD
RUVBMzM1MjAeFw0yNjAyMDUwNzAwNDNaFw0yNzAyMDQwNzA1NDNaMDMxMTAvBgNV
BAMTKERBMjUyNUVDMThDOTc4REE3MENGRUU1Njk0QjE3MDUyQzA3MUZENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4Idu4/kqigcVgMMqsZKDTVPx
kRL2XT9o84ZZBCXGl97lEd1vSzKrWSGxeoC0tqOtTy8BQxLB0ICYb7abDhHaaYYQ
aGlXuXP9hQLrwuz3pGaTDiAkcl5KCIA5w7G9EGticpjIDn99Ch4U6/Tpsilw0Vs0
2Va0QrQcOUw4NgRktwWmi6iIHm16S8IKstk+pThbtiw5sp8rJ4h8zqlrJ+YUT+cZ
oDnoMRq1M5PkrfnYXSTN+h5AP1+uQUtivoAzu45RqhAKt29oiOQN2Q0ZUwBD8P1C
49lIp3yR0H2iUApxw4kWew5xRytLJN+VyD3qKKFhFGUokGII0npS7aQ7euuPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2iUl7BjJeNpwz+5WlLFwUsBx/W4wHwYDVR0j
BBgwFoAU4yCzRU7rjkH9Mcdzz4Ozx87qM1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUgydjdtTjVnN0tCTEg4UnZlNVpHbUJtSGc3TXZSQXFtcGF0OHpLanBa
Y0gvMS9FMzIwQjM0NTRFRUI4RTQxRkQzMUM3NzNDRjgzQjNDN0NFRUEzMzUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjBCMzQ1NEVFQjhFNDFG
RDMxQzc3M0NGODNCM0M3Q0VFQTMzNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVIMnY3bU41ZzdLQkxIOFJ2ZTVaR21CbUhnN012UkFxbXBhdDh6S2pwWmNILzEv
MzEzODM5MmUzMzM2MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9JPwwDQYJKoZIhvcNAQELBQADggEBALDs3diW
hetQyeCcMPKHkbxmvA+1pB2ewBUUY8RcjPCeVZhEGeYdnbRUqegmgliJ6h+JRxCF
AkXUC637tURPck7zZhQM760hG8GBxvyFv5U2h/n+4SvQgyNaLDnGfSeJyCLDK5aB
JBOhWo3OWQ2E4Oc29OIKQ575kphZS3iKGsRu5szDeDaFYVdWbay7EAgiovfIBEZ0
/kOpydKrGKAYKx0jrfR9YEUdgV/7JDe3iqy82HiOg8gZDviza21kp4PCKoUB45wT
jeXydyeHlGGoHqIB+amM4ncE3MO70dGOwO/ytKjlQe/1u/SF4NHvC1evnzLPS9qw
ro4xT+f51ge36Bo=
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:57 2026 by rpki-client