Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36302e302f32332d3233203d3e20323633333437.roa
File:                     3139312e33372e36302e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          639QpTzwasuQzbGUuG6JAuI9+9rwxjI6RZhIvAmZ8uk=
Subject key identifier:   CF:BC:32:53:32:D8:AF:2F:D3:8E:1A:B5:C2:8B:49:32:90:15:82:56
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       4D5C350CA2119B7458A2DF47B7886B8237DDB454
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36302e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 05 Feb 2026 18:58:19 +0000
ROA not before:           Thu 05 Feb 2026 18:53:19 +0000
ROA not after:            Thu 04 Feb 2027 18:58:19 +0000
asID:                     263347
IP address blocks:        191.37.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5c:35:0c:a2:11:9b:74:58:a2:df:47:b7:88:6b:82:37:dd:b4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Feb  5 18:53:19 2026 GMT
            Not After : Feb  4 18:58:19 2027 GMT
        Subject: CN=CFBC325332D8AF2FD38E1AB5C28B493290158256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:51:56:75:da:5e:9f:cc:55:d4:74:76:3b:
                    f4:da:01:cc:d2:05:10:cb:fc:25:03:46:19:bf:6f:
                    8a:e9:16:5a:ec:87:23:5f:35:01:1a:91:f0:ab:4b:
                    89:36:64:f7:a9:45:ef:68:a0:d2:d2:58:4c:c9:1f:
                    72:e4:96:e2:68:6a:55:b9:73:50:8f:25:fc:cd:27:
                    2f:33:fd:7f:9f:48:8a:ed:4f:96:c9:c1:6a:94:be:
                    d9:01:1a:ef:df:34:19:73:7b:e7:35:9c:98:1e:34:
                    0f:e8:c5:35:e9:ad:94:f4:5b:98:75:c5:f8:20:c6:
                    9b:c3:30:a1:8b:3e:4d:94:5d:73:0b:e1:b3:1f:a9:
                    ad:c3:40:3d:45:88:a3:85:45:9a:9c:27:46:77:10:
                    55:6e:dd:87:fa:c3:d7:ca:76:69:5d:a1:5d:ee:ea:
                    bb:de:35:e6:0d:01:74:bf:d7:ac:ad:f6:69:4e:25:
                    03:a4:20:f3:fa:1e:1f:41:cc:4f:18:4e:ea:fd:5f:
                    4e:c4:70:f5:56:2b:86:60:e4:2e:91:e4:15:11:56:
                    c7:d0:7a:17:c9:14:a9:80:47:95:ee:de:d7:2a:4e:
                    46:8d:85:ca:44:0a:fa:6e:63:7d:38:ec:23:f6:a5:
                    b4:d9:05:72:56:c1:be:e6:8b:ce:05:ff:c6:77:40:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BC:32:53:32:D8:AF:2F:D3:8E:1A:B5:C2:8B:49:32:90:15:82:56
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36302e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:66:bb:c8:da:d5:4e:41:00:e0:d7:17:42:08:f7:42:4f:
         46:f7:47:c9:3b:e7:c9:8e:d1:18:0c:23:d6:15:9a:db:54:44:
         ad:5e:d5:5e:a7:5d:50:06:32:2d:5b:32:86:28:5c:f2:2f:5c:
         3e:a2:83:27:28:ce:f7:9a:34:7e:5d:80:8f:f8:e3:b5:97:e2:
         d3:ec:b3:2d:85:43:81:0e:5b:5d:8b:17:30:f7:0f:eb:44:98:
         e8:8f:ee:41:58:4a:5a:0d:97:eb:21:79:f1:41:f5:de:9d:a6:
         21:53:d0:50:22:35:17:14:46:7a:f4:6b:99:ea:ca:3a:2d:0d:
         85:03:8a:3b:5c:ad:14:aa:83:66:a7:75:3d:6e:3d:81:a4:4a:
         5b:75:73:53:f0:58:62:47:10:88:29:a5:81:17:58:8d:97:db:
         9d:8d:bd:2e:33:6a:4f:ce:1c:5f:d0:7c:df:0b:90:28:2c:98:
         20:00:ee:c2:18:a2:e0:90:50:f8:5a:b6:6e:57:9d:54:f3:96:
         40:bc:26:bb:12:e8:6d:ac:c6:14:a7:0f:fb:87:c6:7c:19:7a:
         b5:fc:58:52:ef:fa:3b:22:47:e5:f6:5b:96:ce:14:5e:e6:c5:
         86:51:cd:57:48:0a:57:88:6a:55:ea:2a:2c:b7:fc:14:1a:dc:
         cd:a7:48:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:43 2026 by rpki-client