Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/3139302e38392e36302e302f32322d3332203d3e20323730333632.roa
File:                     3139302e38392e36302e302f32322d3332203d3e20323730333632.roa (raw, json)
Hash identifier:          Nlqdl3Pe48TBmPIpUfhnEzGdOtE3CLZb7hQFlkbVjQE=
Subject key identifier:   3F:75:97:2D:16:38:23:F8:3D:F2:C1:CF:20:DC:E5:0F:0F:6E:3E:97
Certificate issuer:       /CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
Certificate serial:       6089AA2CEC6BED9642718CDF978B35A5EBE28D54
Authority key identifier: 1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/3139302e38392e36302e302f32322d3332203d3e20323730333632.roa
Signing time:             Wed 04 Feb 2026 20:33:50 +0000
ROA not before:           Wed 04 Feb 2026 20:28:50 +0000
ROA not after:            Wed 03 Feb 2027 20:33:50 +0000
asID:                     270362
IP address blocks:        190.89.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl
                          rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 19:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:89:aa:2c:ec:6b:ed:96:42:71:8c:df:97:8b:35:a5:eb:e2:8d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD
        Validity
            Not Before: Feb  4 20:28:50 2026 GMT
            Not After : Feb  3 20:33:50 2027 GMT
        Subject: CN=3F75972D163823F83DF2C1CF20DCE50F0F6E3E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:13:c0:ee:c7:60:8e:fa:1b:79:cb:07:7f:
                    b8:98:75:7a:64:ff:26:c9:bb:ba:a1:5a:4c:64:ff:
                    c7:e5:b9:fb:20:2b:f1:b1:fe:b7:e2:76:db:bc:51:
                    eb:26:68:1b:ea:b1:2f:81:26:f2:ab:fa:97:0c:81:
                    36:fe:6b:b1:a9:5b:41:a8:f2:70:3f:53:b7:29:f1:
                    92:95:b6:3d:67:7a:76:30:40:df:30:4a:0b:0a:fa:
                    4d:3b:ad:de:fc:54:b4:87:8b:3d:86:80:bb:cf:dc:
                    26:33:be:f2:7e:2e:86:aa:ff:07:a4:05:dd:97:ed:
                    10:2b:15:b5:40:4d:c3:b2:2c:8a:37:d1:a2:4e:92:
                    a7:23:f4:d9:25:75:10:43:e1:1f:8b:4a:df:2b:1a:
                    e2:a1:0a:5e:8b:93:f3:85:14:43:6b:73:40:c2:30:
                    c8:f4:56:5d:d0:7b:eb:a4:89:37:f5:c0:ce:89:0f:
                    8b:40:56:56:fb:18:d3:8f:75:e1:ff:21:6e:ca:dc:
                    0e:e9:65:84:e4:1d:9e:ea:04:08:0b:fa:a5:78:4a:
                    92:1f:03:6f:e9:e7:ed:d8:c6:b7:c6:50:01:40:99:
                    b3:a6:e3:7f:68:c3:7d:2d:3a:d6:42:73:f8:44:09:
                    b3:27:53:d0:b7:f3:3d:52:66:b3:f7:e6:ff:9a:74:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:97:2D:16:38:23:F8:3D:F2:C1:CF:20:DC:E5:0F:0F:6E:3E:97
            X509v3 Authority Key Identifier:
                keyid:1B:10:04:FC:54:CD:C4:0D:C5:66:7B:1D:6B:18:3C:CE:A2:DA:4F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B1004FC54CDC40DC5667B1D6B183CCEA2DA4FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8v9o4vDKFhy4Px3hw3PCFiSzsntpe2nWsGp725EnBvg5/2/3139302e38392e36302e302f32322d3332203d3e20323730333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:b0:60:b4:58:ab:2c:39:2d:59:d3:74:fb:e3:6d:f7:58:d3:
         e7:e6:59:06:b4:ca:93:3b:a2:cb:94:3c:6e:0e:21:b6:d2:93:
         d0:ac:5c:72:29:e3:ed:c2:80:ef:65:28:e1:02:53:e2:0a:15:
         c1:b0:72:f1:14:cf:55:e5:24:51:da:c6:f4:d4:f7:6f:06:ed:
         6e:e6:25:78:d9:cc:cc:0b:2d:a1:aa:24:f2:72:65:2f:92:c9:
         ad:19:4b:6c:d6:68:5a:e0:42:de:9b:55:f2:bc:a9:99:b0:8c:
         14:51:02:ed:82:c0:04:18:16:75:26:7e:86:96:0f:81:7d:01:
         09:02:6f:31:14:d5:eb:87:05:b6:35:f9:b3:cc:cd:1b:c5:d4:
         79:8e:a4:31:88:56:a1:d7:79:53:6d:49:bd:42:4f:93:1e:99:
         6d:47:65:ea:f8:ea:1b:35:9f:20:e2:57:35:99:5d:28:d8:2b:
         db:34:8f:2d:7c:5f:9b:e9:8d:6a:1a:67:19:b2:50:d6:61:75:
         36:8b:1a:03:43:24:a7:80:d6:a3:b6:e6:03:1a:e8:e7:86:ed:
         72:f6:4c:86:c4:a3:29:7a:4d:f5:63:92:41:0d:98:42:c5:ff:
         be:09:18:1f:e1:7e:0c:23:2c:e6:22:e1:a2:fc:12:f3:af:51:
         7e:ca:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:17 2026 by rpki-client