Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa (raw, json)
Hash identifier:          xOh29cZW1OByIFhZjJKOc5Ac/zDxUpfT0hiTjzTtnj0=
Subject key identifier:   D4:2F:75:B2:F6:63:62:22:9D:66:27:11:AF:CB:F0:BD:30:97:E1:5D
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       382A15723A1687C782E25B760B9E2745141DB7EB
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa
Signing time:             Thu 05 Feb 2026 07:00:30 +0000
ROA not before:           Thu 05 Feb 2026 06:55:30 +0000
ROA not after:            Thu 04 Feb 2027 07:00:30 +0000
asID:                     263474
IP address blocks:        191.242.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:15:72:3a:16:87:c7:82:e2:5b:76:0b:9e:27:45:14:1d:b7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Feb  5 06:55:30 2026 GMT
            Not After : Feb  4 07:00:30 2027 GMT
        Subject: CN=D42F75B2F66362229D662711AFCBF0BD3097E15D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:f2:c8:8b:54:53:18:5c:65:74:52:20:cd:
                    b6:70:a1:c3:f5:0f:af:a6:e4:14:f7:c0:e1:8c:d4:
                    5f:97:aa:5e:cc:ee:d7:f6:77:f4:68:98:58:40:06:
                    b9:66:a1:c6:dc:fe:42:1b:91:bb:a2:8b:71:2d:b3:
                    6a:ec:eb:c4:e8:90:68:5e:9c:50:25:ac:dd:b3:bd:
                    a8:b9:33:02:b1:a2:17:28:ac:d7:70:aa:8b:8e:97:
                    b7:a3:e4:bc:3a:61:09:c0:d3:a4:be:69:33:5e:39:
                    e6:16:41:af:e2:ff:c9:9d:2c:53:62:71:b3:84:35:
                    75:0d:4b:9d:9d:8b:20:07:eb:a1:44:82:53:0a:d2:
                    c8:5d:aa:6d:de:13:d3:cc:78:17:ac:30:d2:8a:a9:
                    0e:59:ab:bc:14:11:20:58:a8:af:16:d0:1e:b7:5b:
                    0f:0d:d4:bb:4f:92:cf:df:47:f7:af:5d:a9:25:4c:
                    f2:8c:64:2e:c6:9f:eb:94:60:ed:39:e0:9c:7c:0f:
                    e9:ce:da:55:9a:cb:58:92:f0:3e:c6:67:a6:23:ee:
                    6b:82:41:42:4e:64:4d:61:cf:c1:c9:57:7b:77:cb:
                    d8:a7:bd:72:a9:b0:69:87:88:c8:83:40:f2:5c:e8:
                    f1:f2:37:df:fa:96:c1:9c:0b:15:f8:35:0f:73:2d:
                    ab:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2F:75:B2:F6:63:62:22:9D:66:27:11:AF:CB:F0:BD:30:97:E1:5D
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32312d3231203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:ae:f1:d5:8e:61:46:47:35:e9:04:ab:59:b6:9c:0b:69:0d:
         48:d2:fb:c6:b4:02:d9:d7:9e:e2:02:ee:10:2b:7a:b9:58:71:
         16:3e:ee:0a:6c:10:a9:97:e0:83:6a:d7:51:17:12:af:7c:13:
         85:67:91:f9:39:26:86:c5:b5:e1:51:79:7f:a5:c2:84:95:2a:
         d8:14:9b:e3:3f:2a:de:53:c0:07:73:77:45:9b:a4:ba:99:03:
         aa:a5:b0:3c:d1:a1:2b:e2:39:79:fe:b6:a9:72:2d:24:0c:93:
         1f:e3:6d:3b:2f:da:35:90:bf:e1:f3:d0:a7:96:41:e4:c8:81:
         4a:9c:a6:ed:f1:51:55:d2:9b:43:65:2e:e2:69:66:63:ff:4b:
         ed:27:33:13:34:03:61:d2:b3:d5:5c:fb:4a:be:95:e3:48:70:
         7c:ab:38:de:8f:28:94:d0:a9:80:04:55:14:80:4a:d5:c5:f6:
         f7:5a:1b:08:26:89:39:d1:97:43:15:4e:88:b4:50:0a:e4:e4:
         fe:27:55:ac:0a:7b:6a:d8:31:2d:b2:02:dd:db:ed:06:c7:a9:
         fe:6d:6b:0b:8c:b7:8b:1d:23:f2:1b:45:2c:3e:fa:c7:c6:0c:
         63:77:4b:db:c5:4c:ef:b3:81:cb:ec:4d:d4:aa:99:34:09:a5:
         6e:33:cd:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOCoVcjoWh8eC4lt2C54nRRQdt+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU2NDIyN0YwRjI3ODUyQUVFQTc2OTQ4QTExOEQzOEYw
MUQ3NjQ1RTAeFw0yNjAyMDUwNjU1MzBaFw0yNzAyMDQwNzAwMzBaMDMxMTAvBgNV
BAMTKEQ0MkY3NUIyRjY2MzYyMjI5RDY2MjcxMUFGQ0JGMEJEMzA5N0UxNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9PLIi1RTGFxldFIgzbZwocP1
D6+m5BT3wOGM1F+Xql7M7tf2d/RomFhABrlmocbc/kIbkbuii3Ets2rs68TokGhe
nFAlrN2zvai5MwKxohcorNdwqouOl7ej5Lw6YQnA06S+aTNeOeYWQa/i/8mdLFNi
cbOENXUNS52diyAH66FEglMK0shdqm3eE9PMeBesMNKKqQ5Zq7wUESBYqK8W0B63
Ww8N1LtPks/fR/evXaklTPKMZC7Gn+uUYO054Jx8D+nO2lWay1iS8D7GZ6Yj7muC
QUJOZE1hz8HJV3t3y9invXKpsGmHiMiDQPJc6PHyN9/6lsGcCxX4NQ9zLavHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1C91svZjYiKdZicRr8vwvTCX4V0wHwYDVR0j
BBgwFoAU5WQifw8nhSrup2lIoRjTjwHXZF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0tvdkZaYXg1VWg5VzlqNGE3akZuQWUzNGhHcm9mTjVvWjZDeEFzQWhi
ek4vMS9FNTY0MjI3RjBGMjc4NTJBRUVBNzY5NDhBMTE4RDM4RjAxRDc2NDVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1NjQyMjdGMEYyNzg1MkFF
RUE3Njk0OEExMThEMzhGMDFENzY0NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdLb3ZGWmF4NVVoOVc5ajRhN2pGbkFlMzRoR3JvZk41b1o2Q3hBc0FoYnpOLzEv
MzEzOTMxMmUzMjM0MzIyZTM3MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzNDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8kgwDQYJKoZIhvcNAQELBQADggEBAI6u8dWO
YUZHNekEq1m2nAtpDUjS+8a0AtnXnuIC7hArerlYcRY+7gpsEKmX4INq11EXEq98
E4Vnkfk5JobFteFReX+lwoSVKtgUm+M/Kt5TwAdzd0WbpLqZA6qlsDzRoSviOXn+
tqlyLSQMkx/jbTsv2jWQv+Hz0KeWQeTIgUqcpu3xUVXSm0NlLuJpZmP/S+0nMxM0
A2HSs9Vc+0q+leNIcHyrON6PKJTQqYAEVRSAStXF9vdaGwgmiTnRl0MVToi0UArk
5P4nVawKe2rYMS2yAt3b7QbHqf5tawuMt4sdI/IbRSw++sfGDGN3S9vFTO+zgcvs
TdSqmTQJpW4zzYw=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:05 2026 by rpki-client