Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
File:                     3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa (raw, json)
Hash identifier:          1KyBLzxs5fD3SerUrbKulshaDx6DPLzMvUpyPTLojzI=
Subject key identifier:   21:C4:13:20:49:65:01:21:1C:1B:20:17:4A:77:36:24:93:98:0A:A0
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       5A5634521C6924BED703BFD9440A65EF7503CDCB
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     270770
IP address blocks:        189.127.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
                          rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:56:34:52:1c:69:24:be:d7:03:bf:d9:44:0a:65:ef:75:03:cd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:df:41:2f:da:aa:ed:58:cd:7f:40:5a:89:
                    5c:8e:0a:01:00:2d:2e:09:af:70:2b:d2:f5:fa:75:
                    b8:ab:b9:45:2f:56:19:59:f9:b6:a0:ce:7c:35:04:
                    ae:fc:66:da:72:fc:be:62:5b:bc:3d:c9:42:f6:68:
                    cc:30:c8:c6:16:3b:5b:48:b6:2c:ff:6a:ca:86:8d:
                    61:ac:7a:7a:f2:0d:55:44:eb:40:82:a6:48:77:a2:
                    cf:23:f8:dd:3c:eb:e4:9e:5e:bf:28:ed:64:f6:80:
                    9a:d2:25:bc:57:6a:59:bc:06:22:b7:80:7a:b3:50:
                    ae:23:aa:bd:64:78:5b:5c:ba:be:97:00:bf:d6:7e:
                    e1:90:a4:47:45:6f:54:4e:29:ba:ab:b0:41:4f:cb:
                    92:eb:73:31:8a:2c:3f:f6:48:b8:b2:cb:19:87:f5:
                    fc:18:b3:06:50:52:8a:5e:7e:2a:fd:eb:95:63:2c:
                    14:7e:7a:51:68:26:97:89:1a:6d:b3:c8:58:1a:e6:
                    58:49:e4:df:8d:b1:76:ee:d1:4b:e2:2e:c7:23:29:
                    67:ab:72:ec:b2:81:39:a4:b5:7f:d3:04:6c:37:5e:
                    83:ca:e7:50:7a:1f:93:4c:cd:5d:7e:97:21:fe:61:
                    21:c3:68:c4:6f:38:57:12:24:5f:47:e4:25:3f:b0:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C4:13:20:49:65:01:21:1C:1B:20:17:4A:77:36:24:93:98:0A:A0
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/3138392e3132372e3133382e302f32332d3234203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:06:8b:c3:12:13:8b:e7:e9:87:c7:9a:05:fd:74:33:b8:0a:
         01:9c:d3:31:10:36:96:98:f0:ae:ce:13:d4:a0:8a:ea:36:a3:
         a0:66:e1:26:6c:02:48:40:7d:2b:cc:24:cf:04:d1:4a:46:80:
         57:52:6f:1d:1d:bf:7d:c1:04:7e:34:e0:5d:13:ef:0b:50:66:
         78:34:c6:4a:71:35:39:87:42:d5:68:18:41:0e:44:1d:23:75:
         ad:c6:af:40:f5:8a:42:3d:81:cb:c2:ff:dd:3f:be:3d:17:b5:
         4c:17:1f:f8:73:37:b3:35:29:b1:95:93:e8:d3:b2:4e:fd:f0:
         fb:4e:b5:58:8f:14:79:06:f4:9c:1f:44:9a:b1:7b:81:ec:47:
         57:05:4d:2d:c9:11:83:e3:e7:9e:1c:0d:ac:64:ed:63:9e:e0:
         15:95:35:02:af:30:b6:53:5d:eb:d7:dc:7d:f3:a7:b9:9f:0c:
         99:2b:8b:68:5c:6d:ff:b3:0f:41:a9:15:ad:f3:f0:72:1a:ff:
         a9:d4:dd:c4:36:71:a2:a2:fc:bd:12:70:ac:d4:70:9c:81:80:
         17:2b:9c:6e:f9:77:1d:be:c4:5a:0e:fe:0f:f4:cc:17:65:c1:
         28:5d:c2:0e:89:96:bf:0e:4a:a6:6a:22:ec:fe:21:28:f8:e3:
         5a:ad:37:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:16 2026 by rpki-client