Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
File:                     3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          FTgIarqenyYsFIevmdjI0/xlBryzwd3uALHwH4vmTc0=
Subject key identifier:   80:AB:91:EC:D3:6D:68:F7:DE:6B:1A:34:EB:89:9F:0D:94:1D:8A:E7
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       2C83A4483C104BF6622943CF308126948016BC7A
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 05 Feb 2026 14:26:17 +0000
ROA not before:           Thu 05 Feb 2026 14:21:17 +0000
ROA not after:            Thu 04 Feb 2027 14:26:17 +0000
asID:                     264381
IP address blocks:        131.100.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:a4:48:3c:10:4b:f6:62:29:43:cf:30:81:26:94:80:16:bc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Feb  5 14:21:17 2026 GMT
            Not After : Feb  4 14:26:17 2027 GMT
        Subject: CN=80AB91ECD36D68F7DE6B1A34EB899F0D941D8AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:40:b9:de:96:7a:4c:92:4e:eb:bc:4d:7c:
                    4d:0e:3c:0a:61:44:ca:31:d5:57:4e:18:d5:a6:69:
                    70:9e:aa:40:81:ee:28:6a:97:b0:19:f4:c3:94:cf:
                    d1:03:71:3e:e6:a4:2b:f3:9c:a5:0b:2e:04:fe:f1:
                    5b:7a:03:81:cd:f5:24:7b:52:16:51:98:6e:46:39:
                    20:aa:4d:83:87:23:ad:3b:95:99:94:35:a5:d5:8f:
                    4c:a0:58:81:28:59:ab:8c:99:ce:fc:06:0f:ab:88:
                    6c:9c:f4:2a:24:07:0f:77:1f:90:09:7d:31:ba:0c:
                    24:75:00:e7:75:4b:67:c1:d1:e3:0b:5b:3b:d4:08:
                    a6:e7:53:d3:95:c9:17:23:f5:d9:b3:e9:05:a6:7c:
                    72:5e:67:81:cc:74:e7:a3:b8:94:1c:89:40:0a:32:
                    3d:97:e0:8c:81:99:13:df:7d:1e:e0:07:72:26:1e:
                    36:54:40:d2:23:4f:88:42:2b:80:c9:f3:54:57:ac:
                    98:cd:b0:44:eb:5e:5f:c8:13:27:a9:06:7a:83:ff:
                    87:f9:86:29:f4:47:44:0e:7d:46:45:4b:3e:b7:f3:
                    c8:3b:f5:78:2e:41:70:da:d1:aa:aa:30:c2:04:54:
                    35:ed:f6:de:5e:22:4a:9c:fc:94:75:90:cd:27:be:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:91:EC:D3:6D:68:F7:DE:6B:1A:34:EB:89:9F:0D:94:1D:8A:E7
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:76:99:bc:88:98:30:2d:79:c5:05:05:0f:19:52:1e:76:a2:
         e0:28:82:bf:cc:1e:17:20:c0:e6:e9:1d:08:df:72:c5:2e:a2:
         61:ac:1b:d9:4d:13:a8:db:ce:05:c5:c0:91:d2:88:a7:b9:73:
         68:03:b7:2e:06:06:a4:b5:40:0a:83:0a:b0:f8:be:7b:86:ec:
         ba:2c:01:16:ce:f3:b5:29:74:74:ff:c6:6e:61:84:de:a3:57:
         1d:1c:dc:1d:19:14:18:23:55:b8:ac:3d:c5:5e:ff:59:2f:98:
         dc:69:57:b4:af:25:46:9c:37:db:d6:43:5e:fb:d3:37:f9:0b:
         94:09:a8:09:1f:67:a2:33:5f:5a:52:3e:db:96:13:c4:7b:71:
         19:d7:dc:43:6e:9f:29:03:24:dd:e3:d9:52:af:99:79:e7:c4:
         03:d4:81:48:7a:32:52:35:7c:1c:74:84:40:06:48:cc:9e:69:
         76:83:0d:be:e9:90:f8:bc:c0:a5:31:f0:50:54:74:6c:29:1c:
         2d:b0:96:1b:31:f3:9e:68:15:46:7a:9e:ee:a6:80:34:c8:51:
         b1:66:06:24:31:25:23:9d:ab:f1:6d:31:68:88:90:f1:59:29:
         4b:88:ac:d6:ea:28:49:f8:e8:3e:31:15:90:44:a8:f0:54:e8:
         04:5c:d5:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULIOkSDwQS/ZiKUPPMIEmlIAWvHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDMThEODhCRDQ5RDA3RkQ0MkNGMjU5REQzRjMzMDcw
QTZCRTg2OTAeFw0yNjAyMDUxNDIxMTdaFw0yNzAyMDQxNDI2MTdaMDMxMTAvBgNV
BAMTKDgwQUI5MUVDRDM2RDY4RjdERTZCMUEzNEVCODk5RjBEOTQxRDhBRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nEC53pZ6TJJO67xNfE0OPAph
RMox1VdOGNWmaXCeqkCB7ihql7AZ9MOUz9EDcT7mpCvznKULLgT+8Vt6A4HN9SR7
UhZRmG5GOSCqTYOHI607lZmUNaXVj0ygWIEoWauMmc78Bg+riGyc9CokBw93H5AJ
fTG6DCR1AOd1S2fB0eMLWzvUCKbnU9OVyRcj9dmz6QWmfHJeZ4HMdOejuJQciUAK
Mj2X4IyBmRPffR7gB3ImHjZUQNIjT4hCK4DJ81RXrJjNsETrXl/IEyepBnqD/4f5
hin0R0QOfUZFSz6388g79XguQXDa0aqqMMIEVDXt9t5eIkqc/JR1kM0nvv2hAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgKuR7NNtaPfeaxo064mfDZQdiucwHwYDVR0j
BBgwFoAUkcGNiL1J0H/ULPJZ3T8zBwpr6GkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ5MlJjVmlYcGUyUFhkeDkzWVlMRWhMTEJxNHBQZEJLaDlRWTZiMlk2
bWcvMS85MUMxOEQ4OEJENDlEMDdGRDQyQ0YyNTlERDNGMzMwNzBBNkJFODY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQzE4RDg4QkQ0OUQwN0ZE
NDJDRjI1OUREM0YzMzA3MEE2QkU4NjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2eTJSY1ZpWHBlMlBYZHg5M1lZTEVoTExCcTRwUGRCS2g5UVk2YjJZNm1nLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNkkDANBgkqhkiG9w0BAQsFAAOCAQEAonaZ
vIiYMC15xQUFDxlSHnai4CiCv8weFyDA5ukdCN9yxS6iYawb2U0TqNvOBcXAkdKI
p7lzaAO3LgYGpLVACoMKsPi+e4bsuiwBFs7ztSl0dP/GbmGE3qNXHRzcHRkUGCNV
uKw9xV7/WS+Y3GlXtK8lRpw329ZDXvvTN/kLlAmoCR9nojNfWlI+25YTxHtxGdfc
Q26fKQMk3ePZUq+ZeefEA9SBSHoyUjV8HHSEQAZIzJ5pdoMNvumQ+LzApTHwUFR0
bCkcLbCWGzHznmgVRnqe7qaANMhRsWYGJDElI52r8W0xaIiQ8VkpS4is1uooSfjo
PjEVkESo8FToBFzVVw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:46 2026 by rpki-client