Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
File:                     3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          HrZgXc0vJHd1EdnKUuVKE+Qtzb4B7QyqSCltgmOJbcA=
Subject key identifier:   21:6B:2B:A1:8C:57:1C:D9:8A:54:D4:D0:A0:B0:3D:41:F7:33:47:97
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       1B5E62023D37F5FFBD4C5EB426D47D6397BD4361
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 05 Feb 2026 08:26:09 +0000
ROA not before:           Thu 05 Feb 2026 08:21:09 +0000
ROA not after:            Thu 04 Feb 2027 08:26:09 +0000
asID:                     262645
IP address blocks:        192.140.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:40:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5e:62:02:3d:37:f5:ff:bd:4c:5e:b4:26:d4:7d:63:97:bd:43:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Feb  5 08:21:09 2026 GMT
            Not After : Feb  4 08:26:09 2027 GMT
        Subject: CN=216B2BA18C571CD98A54D4D0A0B03D41F7334797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:4b:8e:df:bc:02:b9:d3:24:ec:19:6a:27:
                    ff:f2:8c:c1:8e:d7:28:8f:af:73:fd:c2:88:b2:6c:
                    6f:95:13:57:e6:68:f0:94:db:72:89:fa:03:51:fe:
                    bb:7d:8d:f9:da:b8:d1:1c:4a:50:5f:a7:89:23:e8:
                    8e:45:8f:5b:61:ba:29:1d:fc:b0:d1:24:13:5e:9c:
                    5f:30:7e:86:b2:7e:ef:ed:6a:d8:3d:01:e2:2e:b7:
                    39:c9:38:1b:7d:cd:a0:c8:00:5a:ab:57:5f:57:39:
                    e8:8e:74:ee:57:45:98:7f:61:f4:8c:70:f8:ca:7a:
                    d3:72:41:d0:b2:f3:0a:a3:d7:26:fa:06:78:b5:39:
                    b6:0a:2b:eb:d9:71:57:7d:1c:67:17:79:1b:1c:14:
                    df:89:fe:da:d4:f4:25:dc:eb:25:73:06:6b:17:1e:
                    9e:97:7c:7c:50:8b:45:17:4e:b0:6b:c8:47:a3:c8:
                    5e:40:7c:f8:73:82:f7:d3:f1:02:b0:27:2c:da:cf:
                    59:07:c2:ab:80:e1:6b:0a:65:94:ad:3d:a2:59:a4:
                    ec:35:f8:73:2a:26:ac:99:51:44:83:9c:9f:25:af:
                    ec:83:bd:59:9a:6b:5e:4b:a7:b9:d1:5c:b9:39:38:
                    ba:eb:b9:07:ed:68:aa:7f:6e:2b:44:d3:75:7c:a1:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:2B:A1:8C:57:1C:D9:8A:54:D4:D0:A0:B0:3D:41:F7:33:47:97
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3139322e3134302e34342e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:16:a8:55:e3:b4:fa:d5:93:09:5e:08:db:d6:6e:ea:36:d9:
         2e:3b:2f:c9:7d:57:87:1a:0c:11:85:39:ba:b5:ae:ad:30:4e:
         37:8c:0f:3e:c7:30:53:7b:c4:46:7c:9e:e6:0a:79:5f:21:b1:
         2e:91:6e:6a:81:09:a3:be:f2:65:57:68:b7:a7:41:e2:f9:a5:
         f2:cc:b3:54:a7:e1:21:68:89:73:e0:52:0b:f8:31:50:c7:f3:
         68:d6:68:12:0a:03:41:d0:0c:8b:6a:09:14:13:87:b1:69:1c:
         7b:c9:49:d4:d6:3c:6e:54:ca:96:c4:0a:c4:b8:62:2b:52:8b:
         6f:d7:e8:f1:64:e0:68:8f:ba:8f:90:17:47:7f:23:68:3e:d4:
         7b:d6:42:0e:91:44:ca:f9:b1:df:f6:4c:b1:b2:da:35:c9:e3:
         f1:7f:92:54:a2:4d:68:54:24:0b:2b:80:ba:84:d5:85:79:74:
         1c:88:2d:b9:f8:07:86:c8:5d:30:85:f1:19:31:a5:fa:9f:5f:
         ed:bc:9b:c6:58:d3:13:9f:ee:52:70:5f:cc:95:30:18:e0:cb:
         ab:7d:35:6e:20:4c:05:a9:21:23:96:89:92:4b:ce:44:de:70:
         6c:0d:4d:0b:74:4d:a1:cc:05:66:80:e7:d0:96:a4:70:f9:41:
         a4:c0:69:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG15iAj039f+9TF60JtR9Y5e9Q2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5RjJCODFFRDEyRDRCMDJBNUIxMDREQjIwMERFRjBB
MDMzMDNBRDAeFw0yNjAyMDUwODIxMDlaFw0yNzAyMDQwODI2MDlaMDMxMTAvBgNV
BAMTKDIxNkIyQkExOEM1NzFDRDk4QTU0RDREMEEwQjAzRDQxRjczMzQ3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdkuO37wCudMk7BlqJ//yjMGO
1yiPr3P9woiybG+VE1fmaPCU23KJ+gNR/rt9jfnauNEcSlBfp4kj6I5Fj1thuikd
/LDRJBNenF8wfoayfu/tatg9AeIutznJOBt9zaDIAFqrV19XOeiOdO5XRZh/YfSM
cPjKetNyQdCy8wqj1yb6Bni1ObYKK+vZcVd9HGcXeRscFN+J/trU9CXc6yVzBmsX
Hp6XfHxQi0UXTrBryEejyF5AfPhzgvfT8QKwJyzaz1kHwquA4WsKZZStPaJZpOw1
+HMqJqyZUUSDnJ8lr+yDvVmaa15Lp7nRXLk5OLrruQftaKp/bitE03V8oeGrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIWsroYxXHNmKVNTQoLA9QfczR5cwHwYDVR0j
BBgwFoAU4J8rge0S1LAqWxBNsgDe8KAzA60wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1mSFJ6elNaMjY5Y25RYm96Z3lSYk5wd3A0Z0xuV0JOV0ZQV1pFbVdH
WHMvMS9FMDlGMkI4MUVEMTJENEIwMkE1QjEwNERCMjAwREVGMEEwMzMwM0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwOUYyQjgxRUQxMkQ0QjAy
QTVCMTA0REIyMDBERUYwQTAzMzAzQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZkhSenpTWjI2OWNuUWJvemd5UmJOcHdwNGdMbldCTldGUFdaRW1XR1hzLzEv
MzEzOTMyMmUzMTM0MzAyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjCwwDQYJKoZIhvcNAQELBQADggEBAJgWqFXj
tPrVkwleCNvWbuo22S47L8l9V4caDBGFObq1rq0wTjeMDz7HMFN7xEZ8nuYKeV8h
sS6RbmqBCaO+8mVXaLenQeL5pfLMs1Sn4SFoiXPgUgv4MVDH82jWaBIKA0HQDItq
CRQTh7FpHHvJSdTWPG5UypbECsS4YitSi2/X6PFk4GiPuo+QF0d/I2g+1HvWQg6R
RMr5sd/2TLGy2jXJ4/F/klSiTWhUJAsrgLqE1YV5dByILbn4B4bIXTCF8Rkxpfqf
X+28m8ZY0xOf7lJwX8yVMBjgy6t9NW4gTAWpISOWiZJLzkTecGwNTQt0TaHMBWaA
59CWpHD5QaTAaUI=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:54:54 2026 by rpki-client