Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa
File:                     3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa (raw, json)
Hash identifier:          07sIUlGmevrIJMbGMVuXl1YMJVfS7KUDlBMkILwxw/I=
Subject key identifier:   29:D4:10:2B:97:D8:D6:70:FA:80:25:00:CD:8F:ED:2A:96:4C:9D:7D
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       6B214DCFA9BB8A4FD5358FD9F067A4AF9E61797E
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     263512
IP address blocks:        191.243.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:21:4d:cf:a9:bb:8a:4f:d5:35:8f:d9:f0:67:a4:af:9e:61:79:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=29D4102B97D8D670FA802500CD8FED2A964C9D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:03:c5:77:6a:cc:60:7e:4e:aa:06:b2:6f:
                    d5:ca:96:10:ff:d7:9c:cd:86:15:17:f9:a4:4f:f3:
                    1e:e9:d8:12:09:15:5f:73:77:53:e1:19:a6:b2:ee:
                    ec:ad:27:48:2d:e2:49:2b:de:82:90:cb:c1:00:b7:
                    e1:8d:8a:7e:f6:44:74:9c:93:da:7c:42:6e:37:84:
                    37:77:ec:7c:87:99:10:c8:e3:6f:9d:b1:31:fb:8a:
                    7e:38:c0:2b:ec:48:be:1a:ad:67:e5:14:9a:e3:4c:
                    0e:9e:e1:66:e1:98:8f:f4:41:a8:69:cc:7d:8e:00:
                    e1:b2:16:e5:70:e6:d3:03:28:19:e5:c1:79:94:3e:
                    6a:bd:4b:35:6f:04:e9:92:2b:b6:df:52:ad:f9:21:
                    74:ea:da:fe:9b:9d:2a:e5:ff:e0:1d:6d:42:47:03:
                    d4:2e:7e:0c:06:34:37:bb:4d:a8:8d:46:dd:fc:6d:
                    b9:99:92:2c:81:de:c3:2d:50:58:85:3b:c9:13:48:
                    0e:a5:99:4d:d2:c2:30:83:c5:b5:88:f0:d5:ee:7d:
                    03:06:c2:3b:bf:b4:4d:ba:2f:ed:01:56:55:e4:49:
                    ff:a9:33:81:ac:f8:42:30:e0:e7:e0:0a:47:b2:19:
                    66:8b:1e:b2:35:ac:6a:f6:84:f0:b2:ee:55:06:44:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D4:10:2B:97:D8:D6:70:FA:80:25:00:CD:8F:ED:2A:96:4C:9D:7D
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230372e302f32342d3234203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:e6:dc:1c:dd:93:5c:9d:8e:79:07:36:f5:99:f2:58:6d:
         10:fc:a8:f9:29:7e:0a:f3:f1:41:62:23:7e:c2:ec:57:b4:9a:
         b3:a6:af:70:7f:ef:4c:fa:d9:22:a5:b4:5a:3e:90:07:8b:cc:
         7a:86:a9:44:d1:9f:2d:81:5f:15:48:4b:37:1a:b5:89:fb:0a:
         6a:8e:e4:ac:b9:52:b8:cd:f0:37:79:05:82:71:ca:81:3e:c0:
         1a:83:d8:a5:86:73:75:80:3b:ae:8b:24:e0:96:7d:72:9b:40:
         2f:61:de:30:ba:09:aa:40:f7:8e:d8:13:de:47:33:ff:69:35:
         05:f0:8a:eb:5d:ae:b2:eb:30:f4:f1:51:be:e5:1f:98:c5:4d:
         56:17:03:28:f8:02:10:39:77:45:43:e0:4d:83:65:48:52:56:
         fa:94:b1:ca:89:e8:6e:91:9d:90:c7:2e:7e:d8:b2:49:7d:26:
         9c:01:52:bd:02:fd:cc:7a:59:dd:9c:d5:db:08:7f:3a:8e:e8:
         61:de:f5:59:dd:cb:d3:d3:5c:20:f2:af:fd:13:3e:13:44:4d:
         b2:e8:56:f0:a1:52:34:6f:f8:cd:d6:c8:0f:c3:de:0b:f9:7e:
         d4:a8:87:ef:60:ee:9c:05:52:76:07:53:fd:79:15:b0:3a:ab:
         f9:7e:8c:db
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUayFNz6m7ik/VNY/Z8Gekr55heX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx
MEU0NDRBMjAeFw0yNjAyMDQxOTU1MDRaFw0yNzAyMDMyMDAwMDRaMDMxMTAvBgNV
BAMTKDI5RDQxMDJCOTdEOEQ2NzBGQTgwMjUwMENEOEZFRDJBOTY0QzlEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUgPFd2rMYH5Oqgayb9XKlhD/
15zNhhUX+aRP8x7p2BIJFV9zd1PhGaay7uytJ0gt4kkr3oKQy8EAt+GNin72RHSc
k9p8Qm43hDd37HyHmRDI42+dsTH7in44wCvsSL4arWflFJrjTA6e4WbhmI/0Qahp
zH2OAOGyFuVw5tMDKBnlwXmUPmq9SzVvBOmSK7bfUq35IXTq2v6bnSrl/+AdbUJH
A9QufgwGNDe7TaiNRt38bbmZkiyB3sMtUFiFO8kTSA6lmU3SwjCDxbWI8NXufQMG
wju/tE26L+0BVlXkSf+pM4Gs+EIw4OfgCkeyGWaLHrI1rGr2hPCy7lUGRIEXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKdQQK5fY1nD6gCUAzY/tKpZMnX0wHwYDVR0j
BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy
TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG
RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv
MzEzOTMxMmUzMjM0MzMyZTMyMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/zzzANBgkqhkiG9w0BAQsFAAOCAQEAW4Dm
3Bzdk1ydjnkHNvWZ8lhtEPyo+Sl+CvPxQWIjfsLsV7Sas6avcH/vTPrZIqW0Wj6Q
B4vMeoapRNGfLYFfFUhLNxq1ifsKao7krLlSuM3wN3kFgnHKgT7AGoPYpYZzdYA7
rosk4JZ9cptAL2HeMLoJqkD3jtgT3kcz/2k1BfCK612ususw9PFRvuUfmMVNVhcD
KPgCEDl3RUPgTYNlSFJW+pSxyonobpGdkMcuftiySX0mnAFSvQL9zHpZ3ZzV2wh/
Oo7oYd71Wd3L09NcIPKv/RM+E0RNsuhW8KFSNG/4zdbID8PeC/l+1KiH72DunAVS
dgdT/XkVsDqr+X6M2w==
-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:15 2026 by rpki-client