Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33322e302f32302d3230203d3e20323633333437.roa
File:                     3139312e33372e33322e302f32302d3230203d3e20323633333437.roa (raw, json)
Hash identifier:          aBnmKH7sSyDggGBRFeLhcCPHRLXcjvr4RhcXyruQa/U=
Subject key identifier:   DD:82:9F:87:F3:D3:82:C8:61:43:29:28:B4:96:99:1B:7D:01:75:23
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       6C214C373EA28C584D6DFDDAD6E9088A0F22E3BA
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33322e302f32302d3230203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:20 +0000
ROA not before:           Thu 05 Feb 2026 18:53:20 +0000
ROA not after:            Thu 04 Feb 2027 18:58:20 +0000
asID:                     263347
IP address blocks:        191.37.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:21:4c:37:3e:a2:8c:58:4d:6d:fd:da:d6:e9:08:8a:0f:22:e3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:20 2026 GMT
            Not After : Feb  4 18:58:20 2027 GMT
        Subject: CN=DD829F87F3D382C861432928B496991B7D017523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:11:96:c1:62:58:d4:96:ac:e1:a6:19:39:
                    a0:0d:4f:f2:00:d5:72:cc:59:02:a3:09:ed:da:ab:
                    4a:85:5f:73:ee:bb:82:ae:54:6e:b6:69:64:70:46:
                    f2:30:9b:fa:db:d7:b5:93:88:1d:c7:97:4f:c1:54:
                    ed:94:a9:02:21:be:0c:35:13:72:05:e6:a0:ed:30:
                    8f:ef:ca:aa:f4:85:cf:13:25:4f:d1:5b:5f:d8:65:
                    4c:31:ae:e1:d4:4f:5e:13:71:d8:47:ea:38:b8:02:
                    a2:6b:23:5a:fc:f3:32:70:7a:df:55:a5:d8:18:b4:
                    37:2d:95:94:d6:b9:53:ef:93:74:88:2b:9e:87:c2:
                    44:65:30:3b:ca:82:40:84:b1:a4:ef:07:3f:f1:31:
                    ff:e1:06:ff:83:7b:37:61:ce:be:69:79:9d:fa:79:
                    16:10:7a:d9:b0:ba:8f:70:c6:83:c4:af:88:6f:da:
                    55:2d:9f:03:0f:8f:cc:4d:4b:05:df:f9:9f:f6:b6:
                    b2:d5:b5:22:0c:b7:28:3c:ce:40:6b:74:2b:74:78:
                    fd:dc:1f:1a:d6:95:88:53:24:64:e2:26:f7:5a:2c:
                    0e:d2:f3:5c:7a:03:9f:64:68:63:63:0a:57:29:00:
                    bc:63:e2:3d:8c:b8:9d:7a:f8:bd:43:3d:57:4c:f1:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:82:9F:87:F3:D3:82:C8:61:43:29:28:B4:96:99:1B:7D:01:75:23
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33322e302f32302d3230203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:02:71:3f:4d:01:5f:29:ce:ea:8a:3b:0f:7f:1f:06:6d:fd:
         5f:9d:25:77:0d:1d:fb:bb:e6:e4:bd:6f:e9:0b:51:72:d8:4e:
         24:35:af:49:d6:36:a8:eb:30:b5:94:ff:5a:39:93:2f:02:f2:
         1a:4b:8b:4f:50:a7:3c:d3:38:6a:76:5f:db:22:a3:91:5e:7a:
         9f:d4:6b:68:c1:73:eb:bc:17:8f:5c:e0:53:2f:70:a3:95:ac:
         81:78:4a:61:e6:5d:3f:5b:40:14:c5:4c:73:2f:45:1a:de:9d:
         7f:6a:02:7e:58:3f:33:52:1d:cc:0f:93:62:7f:a6:8e:fe:45:
         a3:d9:4d:e4:02:f8:9e:b6:53:68:eb:4c:f3:4d:f3:66:e7:e9:
         02:91:5e:2a:cc:50:01:4b:e4:8f:55:9c:db:41:37:ec:38:c4:
         a8:0b:bc:0a:41:71:8b:e4:00:2f:cf:3f:27:7e:a7:e9:10:f6:
         6c:1d:07:ef:1c:80:93:ff:07:1b:12:21:15:86:28:b8:58:f9:
         80:e2:7c:ce:dc:0b:70:2b:04:2e:f4:a5:80:5d:07:dc:b7:a8:
         32:21:d3:b4:41:37:9a:e4:f9:a7:4a:8a:7b:d7:6e:c2:b3:9f:
         e1:30:10:9a:9b:26:cc:6d:68:ca:46:99:78:3d:aa:d3:3a:d4:
         e4:3c:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:33 2026 by rpki-client