Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32302d3230203d3e20323633333437.roa (raw, json)
Hash identifier:          bce5E81KN7ZXmxMiKFWE8rU/MSRGH7Ygmw03x7P06Wg=
Subject key identifier:   F3:5B:18:EE:2E:37:40:8B:CD:6A:BF:D5:6B:92:99:88:2D:4F:2A:84
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       1C307BC250C8E232B2079B84D874ED269893EB6B
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:18 +0000
ROA not before:           Thu 05 Feb 2026 18:53:18 +0000
ROA not after:            Thu 04 Feb 2027 18:58:18 +0000
asID:                     263347
IP address blocks:        191.37.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:30:7b:c2:50:c8:e2:32:b2:07:9b:84:d8:74:ed:26:98:93:eb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:18 2026 GMT
            Not After : Feb  4 18:58:18 2027 GMT
        Subject: CN=F35B18EE2E37408BCD6ABFD56B9299882D4F2A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:45:e7:f6:5f:e4:18:f7:d1:8b:9e:20:24:
                    32:32:66:7f:ec:06:dd:ca:0e:0b:b1:40:19:e3:2b:
                    98:63:4b:7f:7d:e5:77:84:8d:6d:85:e4:a0:76:f8:
                    cc:0c:c1:c7:61:38:12:3d:23:4e:32:91:da:34:14:
                    f8:c9:9c:64:8a:23:db:71:fb:1c:57:37:e8:67:30:
                    c3:bb:12:ba:2e:08:0b:09:40:34:54:e6:fa:46:60:
                    16:2c:72:e2:7e:49:ad:41:79:04:b0:69:f6:1d:f1:
                    e5:b4:3a:be:76:f9:4c:86:01:73:5f:65:40:ac:93:
                    0f:48:cd:27:96:d4:7e:1b:bf:c6:68:ac:09:df:b7:
                    5e:2f:e9:dc:22:96:90:c0:2b:3d:39:d4:c2:05:37:
                    d1:e8:94:b2:91:da:22:aa:ee:e0:cd:17:02:1c:5f:
                    4d:d4:d6:b1:0a:07:27:c4:25:1d:ac:29:23:09:43:
                    63:92:06:4a:36:cc:13:52:c4:f1:4c:65:c4:17:86:
                    c3:63:ed:74:a3:9b:30:da:b7:f6:c2:2f:a5:7b:fd:
                    0b:8b:60:b2:c2:0f:68:db:20:df:7c:59:56:ce:a8:
                    e6:c1:7e:1f:a4:3f:b3:79:87:85:8f:d3:4e:59:b1:
                    97:1a:4e:e3:dc:9e:04:6e:99:3c:43:87:2a:48:69:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:18:EE:2E:37:40:8B:CD:6A:BF:D5:6B:92:99:88:2D:4F:2A:84
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32302d3230203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:47:85:d7:e0:ab:14:81:f7:75:ab:3a:a0:c2:f2:73:80:f1:
         6e:21:f1:e5:fb:fa:52:67:eb:d6:25:95:a5:f3:8f:f6:87:97:
         4d:66:ad:15:27:77:f0:8b:e1:5e:2e:83:c9:0c:b4:9a:a7:87:
         c0:fd:d3:12:e7:42:ac:e3:a3:99:75:b3:11:43:6d:56:40:70:
         7b:81:7f:44:eb:87:c1:38:32:2d:a3:a4:f5:b4:23:0a:7d:69:
         31:71:05:44:a4:51:82:71:85:c8:1b:11:2d:b2:82:7a:e1:0f:
         81:c9:64:e4:21:a2:09:9f:e7:54:ba:98:b8:e3:bb:7b:b5:ee:
         da:fb:ed:77:fa:8c:c2:a8:50:fe:02:0d:61:ca:18:09:a8:18:
         c3:0b:8b:e7:ec:7b:f1:f6:65:c5:b4:d6:48:cd:59:79:84:3d:
         1e:bc:c9:d7:d9:4f:1e:61:43:53:4d:f8:d5:f0:14:43:51:b5:
         53:68:b3:e7:13:6e:bd:06:61:8b:a3:30:9c:74:8c:fc:00:a4:
         aa:fc:d6:79:2c:8d:3a:5d:07:40:5b:43:37:44:27:18:4f:4c:
         2a:1c:f3:31:e8:e5:65:61:c1:8a:c2:1e:14:18:1b:fc:d0:34:
         1b:b9:0f:5d:67:54:3e:e0:1a:85:e7:e9:cb:10:7a:bf:d6:13:
         dd:e3:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:38 2026 by rpki-client