Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          ZmRSO+Z2kOaSD0YvqORR0r6BqyAafMD3vZJhihzchoQ=
Subject key identifier:   38:22:8E:C4:77:80:E2:A3:96:D2:43:10:87:3F:44:3A:37:2F:E3:37
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       48A53FFC9C441B8D3A61192C5D64FBD67D5FFF7D
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     263512
IP address blocks:        191.243.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a5:3f:fc:9c:44:1b:8d:3a:61:19:2c:5d:64:fb:d6:7d:5f:ff:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=38228EC47780E2A396D24310873F443A372FE337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:1d:c0:38:e2:df:f9:8e:0c:98:b9:ee:3e:
                    fa:db:23:d1:36:d3:03:6a:2b:70:ff:b7:15:e5:cb:
                    8e:57:df:3c:0c:43:56:60:c5:b5:f3:b9:a9:2d:99:
                    37:58:f6:80:dd:ec:40:ff:02:6d:7b:72:f3:8e:34:
                    50:03:59:fc:03:ff:ce:5d:c1:21:ad:ce:73:ef:19:
                    70:fd:77:e4:05:6e:01:7e:62:6d:c9:43:39:0e:53:
                    dc:ff:34:6e:94:af:af:d3:10:32:86:f7:65:10:fd:
                    d5:21:10:eb:e0:38:3e:33:aa:17:58:c5:af:c4:8b:
                    74:ef:47:f3:f1:96:ff:78:cc:c2:ff:ce:03:fa:39:
                    e5:ea:c4:d3:7f:35:4d:7f:24:ce:2e:ab:eb:ad:9b:
                    2e:0e:17:3a:09:94:43:fb:8c:65:ed:a4:b3:72:79:
                    90:66:39:34:c1:3b:6d:ba:7a:9c:f1:35:29:1f:a5:
                    c5:b9:76:74:70:23:29:f8:1a:b9:54:6b:55:cc:25:
                    d6:70:1d:24:bc:e0:84:6f:13:26:46:64:60:a8:69:
                    08:df:d4:48:87:b5:ad:50:e5:a5:d1:f5:2c:c8:53:
                    fe:f9:98:e3:aa:12:46:ef:a5:e1:b9:03:17:27:64:
                    a2:e5:6f:fc:4f:14:68:f3:8d:0b:7e:8b:2d:d5:df:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:22:8E:C4:77:80:E2:A3:96:D2:43:10:87:3F:44:3A:37:2F:E3:37
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230322e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:78:56:47:51:dc:d6:af:a9:a1:fd:60:e3:c6:2c:80:99:
         06:9f:37:9c:96:91:55:6d:33:c2:89:d1:b2:46:21:9f:ea:3e:
         5e:27:ca:f0:6d:cf:21:27:3d:f4:08:99:96:7f:94:81:50:c7:
         14:56:a9:9f:b9:15:bb:50:38:88:72:e5:d4:ab:81:12:83:44:
         53:79:34:c8:64:4f:68:17:71:96:17:db:6e:50:a5:a6:57:51:
         d4:e4:61:58:8d:86:56:d9:4a:81:08:6a:93:d9:93:d5:31:10:
         87:8b:d1:e5:52:fa:1e:90:b3:be:e6:ff:02:b7:80:7f:bf:58:
         dd:c5:dc:b4:3a:04:21:ab:34:59:89:b9:56:61:75:b3:2b:1f:
         38:ec:f6:7b:ca:16:a5:d2:7a:f9:c4:68:1d:c2:e4:e0:af:72:
         86:ef:83:27:92:7a:a4:14:bc:44:81:ab:a6:ac:37:21:d0:c5:
         19:44:4e:fb:cc:99:60:74:7c:ab:cd:09:71:6a:fb:6c:01:30:
         86:0e:f7:be:5d:d6:59:51:88:ec:c1:a8:04:40:88:b1:01:b1:
         de:94:bc:0b:fe:b5:eb:35:b8:b1:a1:42:42:2c:97:18:37:f3:
         8b:a6:d1:99:1c:ed:1f:bb:a9:c3:a3:9a:43:58:33:5f:9a:83:
         29:b9:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:12 2026 by rpki-client