Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e33382e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          de55uGiRZtqm1Wp9C+qe3zxfUf+YrBNJ/YpT0s7VHqM=
Subject key identifier:   1F:62:4A:47:AF:9D:C5:5E:01:6F:A8:3A:97:62:93:24:33:F9:3D:8E
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       29E9C0FF425292AA94352D2BA7AFA54A56D0B901
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:17 +0000
ROA not before:           Thu 05 Feb 2026 18:53:17 +0000
ROA not after:            Thu 04 Feb 2027 18:58:17 +0000
asID:                     263347
IP address blocks:        191.37.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e9:c0:ff:42:52:92:aa:94:35:2d:2b:a7:af:a5:4a:56:d0:b9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:17 2026 GMT
            Not After : Feb  4 18:58:17 2027 GMT
        Subject: CN=1F624A47AF9DC55E016FA83A9762932433F93D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0c:77:db:ff:f3:dc:51:5d:a4:b2:e6:11:22:
                    3c:ed:72:bc:d3:75:4b:15:34:3a:8b:93:1a:d9:99:
                    ea:70:02:62:23:60:4a:22:6e:b1:1f:b5:7d:67:58:
                    ba:ac:2a:31:27:be:82:61:cf:7e:08:03:86:7c:8f:
                    d7:f0:4d:0e:76:a0:7e:03:54:d5:2e:e1:8f:8a:b9:
                    89:a6:8d:cb:a7:93:77:0f:2e:d0:05:7a:6e:46:d3:
                    c7:90:e4:6e:ee:cb:5a:2b:bf:12:c0:27:c2:70:40:
                    0e:d9:83:93:41:0e:ad:ae:12:71:88:7c:58:ff:51:
                    c1:67:e0:c7:0b:df:a5:32:4b:a8:cd:12:b8:ff:6e:
                    0f:7d:49:49:d1:c9:0c:8e:94:70:3e:66:8a:fe:0d:
                    c5:98:9f:5e:0d:c7:ff:61:df:f2:a0:44:6e:6f:ba:
                    cb:54:f0:db:2b:d0:f8:6f:ce:d3:7f:36:d2:65:e8:
                    d4:15:17:9a:b2:17:da:0e:40:b4:78:3f:a3:44:82:
                    0d:33:c1:7e:30:c0:6b:c5:8c:85:c0:d2:a7:99:18:
                    d3:94:ba:b5:fc:d6:5a:5d:2f:c5:6c:96:f1:88:ad:
                    b0:1b:9d:4a:23:7b:d7:99:b5:fa:a7:e5:a3:b2:e6:
                    4f:db:f2:f1:a1:ed:9d:54:c0:c9:d9:4c:81:f4:e5:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:62:4A:47:AF:9D:C5:5E:01:6F:A8:3A:97:62:93:24:33:F9:3D:8E
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33382e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:50:5f:a3:68:52:e3:66:6d:48:1b:d9:96:c2:82:f9:78:
         8e:66:07:ca:0f:72:32:5d:11:53:e8:da:a4:44:ad:ca:e0:fe:
         95:50:79:c7:f0:0c:86:e8:a0:d1:e4:eb:1b:83:c0:4e:b8:3f:
         b8:f9:58:4b:38:18:91:0d:ee:2a:5b:c8:a8:ac:1e:c9:1d:ad:
         be:83:d1:96:a6:46:a2:9e:19:ca:1d:73:11:1a:63:1b:9f:62:
         76:1b:74:0f:20:67:db:8b:77:6f:4a:49:cb:7a:9a:50:fb:eb:
         ef:ba:64:3a:3e:ca:c8:6f:dc:48:2b:92:fb:d1:93:20:ee:2f:
         4e:0b:c0:22:bc:e9:a8:b9:98:e9:a4:9f:e7:76:79:4e:d0:63:
         09:91:dd:f7:f3:e0:f0:96:e5:af:04:3b:7b:0e:1b:4e:bf:ca:
         cc:89:f5:ea:99:6d:af:b1:fd:7b:89:06:34:8f:be:ca:8c:ac:
         79:3f:06:14:37:7f:4e:b8:18:a3:60:f6:e3:39:ba:69:ff:eb:
         99:b0:fd:3f:6e:a7:dc:52:b7:1a:30:46:2f:5e:f5:18:09:41:
         ab:7b:fb:9d:22:e3:4f:4e:fb:4b:e7:30:8f:75:43:64:cc:3d:
         9b:36:53:33:2e:74:41:9f:73:47:f4:65:c6:8b:29:22:25:15:
         d5:0d:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:39 2026 by rpki-client