Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52900.roa
File:                     AS52900.roa (raw, json)
Hash identifier:          NqRNNl4bmKRaW0T3D6wYdAGlKZb2/tJx4LoeqhIZLy0=
Subject key identifier:   79:1B:FB:3E:FD:A8:D3:D7:CA:BC:31:68:A8:5B:15:ED:19:98:F9:37
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       29AB218C492A271E024B875CB524B3D0CE064398
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52900.roa
Signing time:             Wed 11 Feb 2026 23:36:06 +0000
ROA not before:           Wed 11 Feb 2026 23:31:06 +0000
ROA not after:            Wed 10 Feb 2027 23:36:06 +0000
asID:                     52900
IP address blocks:        131.221.252.0/22 maxlen: 24
                          138.186.52.0/22 maxlen: 24
                          186.251.156.0/22 maxlen: 24
                          2804:26c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 09:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ab:21:8c:49:2a:27:1e:02:4b:87:5c:b5:24:b3:d0:ce:06:43:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Feb 11 23:31:06 2026 GMT
            Not After : Feb 10 23:36:06 2027 GMT
        Subject: CN=791BFB3EFDA8D3D7CABC3168A85B15ED1998F937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:37:b9:35:80:c1:b9:50:52:be:23:9a:6a:98:
                    30:4a:f5:8a:70:10:74:fc:35:97:80:61:d3:48:a0:
                    8e:2f:94:62:44:be:45:55:93:bc:73:21:83:a4:b1:
                    b8:8b:f8:03:ce:2c:d6:da:0a:dd:65:39:1b:c7:eb:
                    41:9d:1e:bd:c3:e4:b0:d5:4c:dc:c2:c0:de:2a:46:
                    83:7f:a7:87:46:df:3d:67:b1:0e:2d:f9:c9:b2:43:
                    01:68:08:1a:e8:31:ee:b7:fb:b7:4f:bc:20:35:0b:
                    69:f0:d4:e9:bc:74:76:c4:c5:42:4a:40:72:3d:6a:
                    49:ef:30:7b:88:35:3e:41:29:1a:1c:66:7e:29:30:
                    e9:49:1f:9a:47:5b:5d:9b:f7:04:f0:86:d1:a2:11:
                    46:44:51:d2:e5:3c:75:11:20:22:15:d5:73:64:da:
                    65:ce:1c:a5:13:d4:79:03:21:73:93:a4:37:29:1e:
                    f2:76:7d:a7:6b:02:89:c8:b2:6c:96:a3:f5:53:cd:
                    1f:99:fd:1d:80:ab:a6:22:26:25:6f:53:7d:f0:67:
                    90:9c:9f:32:ce:10:2b:23:61:7f:3f:c9:c1:97:ca:
                    15:64:7c:48:21:bd:65:8a:e6:36:bf:34:df:c0:c4:
                    5f:df:70:1f:ac:79:6d:a8:a3:f3:a9:42:71:11:f5:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1B:FB:3E:FD:A8:D3:D7:CA:BC:31:68:A8:5B:15:ED:19:98:F9:37
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS52900.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.252.0/22
                  138.186.52.0/22
                  186.251.156.0/22
                IPv6:
                  2804:26c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:0b:2d:c1:04:27:1e:df:3c:c0:ae:8e:9d:50:5d:5d:a2:a1:
         b2:2b:d2:41:48:a7:ab:19:81:1e:11:80:37:e3:31:aa:26:b4:
         f0:d7:5a:97:a3:8c:84:41:22:27:34:6a:2c:1a:70:00:11:41:
         db:48:32:63:43:54:18:1f:26:2c:a1:7b:bf:db:6a:44:ec:7b:
         9b:55:d3:5b:d6:96:61:53:8b:ce:7e:21:59:4d:0d:a2:58:f6:
         52:4e:08:c0:c6:bd:79:38:32:df:a0:1e:56:74:3e:3e:88:61:
         b9:f5:78:78:40:15:b6:d6:d7:02:8c:07:18:34:4d:6c:b3:1a:
         ad:05:9e:9b:8a:2e:69:91:29:25:d9:2c:b0:43:b7:df:90:08:
         3b:55:b4:a7:44:ae:67:8e:78:54:5c:5e:0b:4d:61:ae:1b:cf:
         5a:c1:ae:42:6f:fa:40:e2:9d:c8:d9:ca:1d:f0:1b:77:6c:07:
         17:4e:e9:7a:8b:49:57:04:77:ef:12:0b:74:d7:12:b0:18:75:
         70:75:63:a9:d8:cc:c9:62:16:e1:ec:17:95:52:01:78:20:37:
         a4:79:9b:c0:9d:c3:ec:5b:79:8c:41:e6:44:cc:d2:d2:00:c2:
         25:53:38:9f:6b:12:42:2b:c3:67:6f:3d:e3:1e:13:52:6f:75:
         7e:f8:8b:f5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKashjEkqJx4CS4dctSSz0M4GQ5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJFOTE0NzVFQjZDODZBQTQwRjNBMTNBQTBDM0MzOERC
OTYyN0JDRDAeFw0yNjAyMTEyMzMxMDZaFw0yNzAyMTAyMzM2MDZaMDMxMTAvBgNV
BAMTKDc5MUJGQjNFRkRBOEQzRDdDQUJDMzE2OEE4NUIxNUVEMTk5OEY5MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvN7k1gMG5UFK+I5pqmDBK9Ypw
EHT8NZeAYdNIoI4vlGJEvkVVk7xzIYOksbiL+APOLNbaCt1lORvH60GdHr3D5LDV
TNzCwN4qRoN/p4dG3z1nsQ4t+cmyQwFoCBroMe63+7dPvCA1C2nw1Om8dHbExUJK
QHI9aknvMHuINT5BKRocZn4pMOlJH5pHW12b9wTwhtGiEUZEUdLlPHURICIV1XNk
2mXOHKUT1HkDIXOTpDcpHvJ2fadrAonIsmyWo/VTzR+Z/R2Aq6YiJiVvU33wZ5Cc
nzLOECsjYX8/ycGXyhVkfEghvWWK5ja/NN/AxF/fcB+seW2oo/OpQnER9RRVAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUeRv7Pv2o09fKvDFoqFsV7RmY+TcwHwYDVR0j
BBgwFoAUW+kUdetshqpA86E6oMPDjblie80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjczcVlQU0syRFdXakNCYW1XaE5DN3JncnFoQ1FQQWpkR0hTZENabjlW
Nm8vMS81QkU5MTQ3NUVCNkM4NkFBNDBGM0ExM0FBMEMzQzM4REI5NjI3QkNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCRTkxNDc1RUI2Qzg2QUE0
MEYzQTEzQUEwQzNDMzhEQjk2MjdCQ0QuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82NzNx
WVBTSzJEV1dqQ0JhbVdoTkM3cmdycWhDUVBBamRHSFNkQ1puOVY2by8xL0FTNTI5
MDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAKD3fwDBAKKujQDBAK6+5wwDQQCAAIwBwMFACgEJsgwDQYJ
KoZIhvcNAQELBQADggEBAGoLLcEEJx7fPMCujp1QXV2iobIr0kFIp6sZgR4RgDfj
MaomtPDXWpejjIRBIic0aiwacAARQdtIMmNDVBgfJiyhe7/bakTse5tV01vWlmFT
i85+IVlNDaJY9lJOCMDGvXk4Mt+gHlZ0Pj6IYbn1eHhAFbbW1wKMBxg0TWyzGq0F
npuKLmmRKSXZLLBDt9+QCDtVtKdErmeOeFRcXgtNYa4bz1rBrkJv+kDincjZyh3w
G3dsBxdO6XqLSVcEd+8SC3TXErAYdXB1Y6nYzMliFuHsF5VSAXggN6R5m8Cdw+xb
eYxB5kTM0tIAwiVTOJ9rEkIrw2dvPeMeE1JvdX74i/U=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:41 2026 by rpki-client