Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          InWUm/RnkqES1XnCOooQf4oJsjEkeEqOm0RITLZwTeI=
Subject key identifier:   35:F1:97:C0:7B:23:E0:05:6A:34:37:AD:8F:7A:50:E7:33:81:27:DF
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       4BF31261F898A4FF097995790CA395733BB4FA3E
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     263512
IP address blocks:        191.243.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f3:12:61:f8:98:a4:ff:09:79:95:79:0c:a3:95:73:3b:b4:fa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=35F197C07B23E0056A3437AD8F7A50E7338127DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:d2:d9:24:2f:99:51:11:9a:60:a9:7c:3b:
                    36:53:fb:7c:56:17:e1:67:c2:6f:10:e4:44:a0:e0:
                    57:e7:21:fb:83:5e:7d:59:93:6d:c4:12:af:9b:c8:
                    fe:cb:62:49:9f:9b:fb:a1:e3:46:d7:36:3e:cc:0e:
                    62:07:e3:5d:08:22:66:da:f2:96:3c:b4:22:31:2b:
                    e2:92:ec:0b:63:e5:bf:f4:f9:59:32:ed:47:dd:e9:
                    d5:74:98:fe:2b:57:9d:95:0c:8b:90:a6:f0:34:2d:
                    cc:da:d8:7e:53:b8:b2:a7:61:b8:99:20:e8:bd:fa:
                    5b:e2:94:d6:06:d0:5a:36:6f:c5:e2:46:0d:3f:ae:
                    75:1a:61:b6:11:e8:3e:da:19:df:61:ac:a4:a2:dc:
                    cd:16:3e:44:f6:1c:46:6c:87:d0:b8:dc:b9:8d:3d:
                    5a:6b:f4:0d:2e:da:f7:a0:5c:35:f8:7c:a5:8a:49:
                    73:57:f5:2c:d6:64:8d:71:3f:91:69:6a:a1:b8:47:
                    81:b1:0f:6f:69:5c:f0:a0:80:cd:ab:c5:a4:17:9c:
                    8e:be:2b:1d:80:86:4c:83:79:f2:d5:7f:0e:df:da:
                    ef:99:81:ad:e5:82:c2:a8:8e:6f:5e:5e:28:a8:47:
                    59:c9:b4:cb:37:86:18:5f:48:fc:80:e8:f5:d4:10:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:97:C0:7B:23:E0:05:6A:34:37:AD:8F:7A:50:E7:33:81:27:DF
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230312e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f4:e3:c0:93:49:ec:0e:f5:f4:0c:14:6f:c7:60:f7:d7:59:
         5b:02:22:51:1c:65:4e:34:d7:6c:bc:4c:9f:b3:33:43:91:b5:
         2a:10:b3:90:18:27:52:94:fa:fb:2e:a6:19:71:88:28:09:08:
         c2:59:10:60:68:28:c0:7a:4a:5c:db:13:cf:cb:7f:37:a4:aa:
         af:33:78:04:5a:90:fb:33:ff:a8:9e:eb:74:99:b3:8f:b3:fb:
         73:81:59:3d:95:8b:a0:64:b7:df:ae:6b:93:85:61:aa:b3:1b:
         0a:2f:18:cf:05:b8:35:66:26:9a:58:b1:8c:cf:2c:53:6e:9d:
         03:01:60:cd:d1:3f:41:30:df:40:ec:f2:6c:97:a1:89:d0:d5:
         a0:c2:59:6f:ed:63:b1:c2:86:38:3c:39:c4:c5:9c:e4:42:2c:
         5d:a6:07:a7:3d:f3:c6:38:7b:b4:47:b9:77:ed:88:39:f7:41:
         b4:8e:01:85:fa:e8:7e:4e:d4:12:e4:73:a3:a6:5c:33:04:04:
         76:c7:db:59:73:5f:bb:b0:55:4c:da:9b:81:e5:0f:05:39:42:
         ca:c9:03:f2:7f:02:e8:2f:4f:6a:ac:6d:7c:5f:b3:d9:78:d9:
         9b:17:8b:f2:80:03:b9:2f:dc:3f:7c:4b:4e:0c:87:9d:b2:91:
         7d:58:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:06 2026 by rpki-client