Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          jLOFrGZ/FQgDQtFbnQX5cmyw1hAH/peXaWzTo2FB6ZE=
Subject key identifier:   BB:C9:A1:B8:59:D9:58:9E:8B:18:1B:40:3D:52:00:19:9A:2B:02:C8
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       4A388EC3D77CFF65FF4B9BBB9C3F8211EC63D155
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:29:00 +0000
ROA not before:           Thu 05 Feb 2026 00:24:00 +0000
ROA not after:            Thu 04 Feb 2027 00:29:00 +0000
asID:                     262798
IP address blocks:        186.236.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:38:8e:c3:d7:7c:ff:65:ff:4b:9b:bb:9c:3f:82:11:ec:63:d1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:24:00 2026 GMT
            Not After : Feb  4 00:29:00 2027 GMT
        Subject: CN=BBC9A1B859D9589E8B181B403D5200199A2B02C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:f5:c6:8a:e2:d8:4b:e0:05:03:e3:4d:52:
                    91:bc:95:97:a5:3f:68:36:db:d1:73:4d:aa:50:0b:
                    6e:c5:b3:83:5c:81:76:b1:51:72:3d:18:b4:4a:77:
                    79:b9:5a:8d:df:9a:55:31:1c:8b:b0:f1:bc:6d:ea:
                    a6:a5:01:64:52:eb:68:53:53:3d:68:70:73:bc:f8:
                    77:8a:40:05:43:f8:05:3f:eb:f6:28:e8:82:28:64:
                    6b:df:7f:a4:21:be:5c:df:03:7e:61:bb:79:2a:1f:
                    75:b7:e4:0c:c9:57:06:af:ae:37:b3:95:fc:c8:43:
                    8c:2c:06:bc:71:58:1b:f1:71:17:2e:e2:41:3b:e3:
                    b3:df:7b:ab:bb:68:92:43:55:41:24:e8:3e:08:30:
                    a6:8b:ad:5e:d9:9c:63:5b:6c:7b:22:41:67:e5:d1:
                    b8:b5:84:43:af:0c:66:46:7b:bb:4a:7d:71:cb:df:
                    2c:62:12:4d:bc:d4:54:96:93:47:1b:db:27:aa:be:
                    8b:ab:11:18:9c:be:df:0f:5b:4d:16:d0:a9:33:b0:
                    4b:82:b3:19:30:f3:68:0d:0d:ee:ae:d0:52:82:15:
                    a4:54:ce:e4:1a:f3:7a:99:e7:87:c1:1a:b0:eb:e2:
                    ba:a5:60:30:73:b9:12:ae:a5:97:35:31:8c:b2:2d:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C9:A1:B8:59:D9:58:9E:8B:18:1B:40:3D:52:00:19:9A:2B:02:C8
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:0d:e8:7c:7d:04:f5:50:76:4e:a7:79:14:76:95:89:52:
         a6:27:bb:94:b9:ba:1c:36:d2:34:9b:0c:80:74:67:e6:bf:56:
         5e:82:74:25:53:a1:1f:25:65:95:40:e5:8c:7f:fb:7b:f1:37:
         13:0d:75:6c:97:7d:33:cd:26:d6:36:94:13:a5:f9:52:5f:f5:
         f3:2d:00:a3:93:26:04:6d:4a:29:4b:12:aa:27:ab:81:a0:d4:
         6f:70:c3:77:54:d4:dc:46:8a:63:22:6b:a0:82:b7:88:6e:d2:
         c3:87:41:07:fb:ac:cb:ea:af:21:9b:f5:9f:03:a0:41:49:04:
         32:3d:bf:1a:39:8f:bb:9a:42:7d:98:b9:96:92:5e:0d:cc:e5:
         40:de:86:39:d1:7f:d5:1d:62:29:ce:67:4e:60:da:7a:ea:88:
         c4:58:26:4b:7d:83:47:98:62:ff:40:74:ef:e2:81:f2:14:5f:
         94:b6:c0:35:d1:cc:b2:a5:e3:af:9f:d0:2b:f0:cb:93:c7:7a:
         55:5b:01:96:93:81:cd:bd:3f:19:06:25:f2:e9:93:ce:4d:06:
         66:4f:44:79:a6:02:c6:51:df:54:05:4d:24:f7:0e:8d:f5:8c:
         a2:94:22:6b:bc:88:c0:85:06:e9:5c:a6:15:97:60:f9:cd:0b:
         d7:44:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:33:38 2026 by rpki-client