Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa
File:                     3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa (raw, json)
Hash identifier:          0paann11qOGqUQraPbF4UwVKwhLryWuIZXc7mz75XVg=
Subject key identifier:   9D:CC:28:61:E8:21:21:D9:4A:C4:E0:59:68:62:0F:0D:C8:C4:AF:0A
Certificate issuer:       /CN=6689F5CF61182A36307EEB7C011D8636B6340149
Certificate serial:       088DDDB875A6F6A35B1162215CE99EEFA99F20F4
Authority key identifier: 66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa
Signing time:             Thu 05 Feb 2026 07:05:43 +0000
ROA not before:           Thu 05 Feb 2026 07:00:43 +0000
ROA not after:            Thu 04 Feb 2027 07:05:43 +0000
asID:                     271286
IP address blocks:        190.109.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl
                          rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8d:dd:b8:75:a6:f6:a3:5b:11:62:21:5c:e9:9e:ef:a9:9f:20:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689F5CF61182A36307EEB7C011D8636B6340149
        Validity
            Not Before: Feb  5 07:00:43 2026 GMT
            Not After : Feb  4 07:05:43 2027 GMT
        Subject: CN=9DCC2861E82121D94AC4E05968620F0DC8C4AF0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:d9:2d:ec:17:c3:16:72:2e:cc:d4:5f:89:
                    92:4f:af:f8:0d:51:c5:40:ee:c7:5e:59:cf:82:ca:
                    7f:3a:8b:35:66:f1:5a:81:e7:ba:f3:ad:b2:a1:a5:
                    58:08:6b:01:9e:cf:75:aa:62:58:8a:95:b7:61:68:
                    81:62:47:83:31:61:0c:03:87:ba:ee:f0:f3:74:a2:
                    34:cc:2b:3d:f7:d4:53:dc:a0:91:2d:09:dd:4d:79:
                    28:02:37:6a:50:14:41:a9:19:d2:c6:b4:b0:3b:88:
                    8b:67:6d:ba:c3:08:16:51:42:41:6b:aa:42:4d:0d:
                    76:da:4c:41:fe:85:c0:8e:70:be:7d:e8:bb:82:f0:
                    37:ab:21:90:b9:58:5a:e2:9c:e2:e3:f8:24:5d:4b:
                    3d:03:d7:6e:18:20:d9:fc:fc:ae:11:6d:09:28:d2:
                    da:51:14:51:92:38:7c:ed:69:0a:6e:72:db:a9:3e:
                    84:f8:e3:8e:27:ef:a5:9f:71:d0:ff:50:62:3c:d9:
                    88:10:81:e7:4c:73:94:08:92:91:7c:65:09:7f:2e:
                    43:86:55:0d:85:e7:fe:76:ff:06:46:bc:4a:3d:7d:
                    1d:07:af:62:ef:dd:09:a3:7d:ba:8d:77:5a:e3:d9:
                    92:5f:83:53:08:89:00:2e:65:44:44:60:22:bd:9e:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CC:28:61:E8:21:21:D9:4A:C4:E0:59:68:62:0F:0D:C8:C4:AF:0A
            X509v3 Authority Key Identifier:
                keyid:66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/3139302e3130392e39322e302f32322d3234203d3e20323731323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:45:0c:d4:49:1e:3e:58:db:bd:6f:35:6e:d7:ee:9b:7b:
         ae:e8:a2:2b:c0:9b:c1:46:21:d5:e8:49:5f:f4:6a:a0:56:86:
         4a:f5:fb:4e:60:a2:83:62:93:1a:46:ea:61:fa:3b:5a:c4:2b:
         dc:09:8b:09:12:5b:8d:60:c9:8b:5e:9a:c1:1e:24:53:04:ab:
         0c:65:f8:81:50:d5:cb:5e:87:63:49:a9:3d:8c:3e:b1:89:9f:
         a1:d8:b0:75:ba:d9:3f:e7:d0:77:74:50:16:dd:65:66:ed:38:
         6a:21:8a:02:fe:4b:da:f1:0e:df:af:dc:7a:b3:80:16:e3:5b:
         f0:62:84:78:e0:a8:33:e0:a5:19:f2:84:d2:4a:e8:68:1a:ae:
         94:f3:bf:69:fe:ff:3d:a2:07:f9:46:01:9e:6e:08:9a:43:c1:
         93:04:da:17:b0:56:11:6e:ed:e4:53:12:e2:d0:bb:00:b9:ce:
         0d:47:74:8b:f6:cf:8d:c7:a1:36:48:69:04:1a:fd:1a:e4:ef:
         6e:83:77:c6:74:fe:cf:e9:95:2d:a2:f3:61:ee:8e:9e:0e:e0:
         0a:83:ea:60:b5:43:68:6f:e6:ce:4d:1a:aa:f8:41:28:92:b6:
         00:42:78:4f:ef:c4:9f:05:a3:df:1c:d4:58:ab:04:08:a7:f8:
         28:7f:57:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:53:51 2026 by rpki-client