Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa
File:                     3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa (raw, json)
Hash identifier:          fJHBBNkYo3pr4ZitJ4531VoULZ3CdVDMGtv7qv7vC6Y=
Subject key identifier:   5B:7A:67:79:47:D2:18:A4:1E:AC:79:87:73:06:33:87:50:04:2C:EE
Certificate issuer:       /CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
Certificate serial:       4718E1BF088EDCB2526FDA080D9E3CEB79E3D31D
Authority key identifier: 53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa
Signing time:             Fri 06 Feb 2026 00:54:23 +0000
ROA not before:           Fri 06 Feb 2026 00:49:23 +0000
ROA not after:            Fri 05 Feb 2027 00:54:23 +0000
asID:                     265364
IP address blocks:        168.205.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl
                          rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:18:e1:bf:08:8e:dc:b2:52:6f:da:08:0d:9e:3c:eb:79:e3:d3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B8EF890E159C97C854A2FD8A6A51B3E34E626C
        Validity
            Not Before: Feb  6 00:49:23 2026 GMT
            Not After : Feb  5 00:54:23 2027 GMT
        Subject: CN=5B7A677947D218A41EAC79877306338750042CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:36:31:84:c9:02:c0:f8:d0:5e:43:f5:f1:
                    7a:fc:a7:71:20:83:4f:85:22:99:48:dc:61:a0:65:
                    bc:db:0f:c9:84:ca:fe:d7:0b:9d:99:de:1b:13:ba:
                    3b:fb:60:fb:21:6b:3f:d3:71:4b:08:38:f3:77:d1:
                    46:ac:3b:5c:0f:18:a1:a7:70:72:90:b1:c0:03:0a:
                    f0:bb:5c:a7:4a:14:6b:89:87:9e:d1:68:73:37:b6:
                    ca:11:9d:e0:79:bc:fe:55:67:94:9d:67:44:b7:60:
                    dd:f9:8f:91:ed:ae:7d:bf:73:21:43:88:6f:a3:dc:
                    ef:0c:86:a7:17:81:53:cb:13:0f:f8:aa:03:87:fc:
                    8c:ad:fa:cb:16:c6:9f:7c:0a:e6:dc:be:dd:41:b6:
                    65:db:66:71:65:bc:e8:85:21:a6:c5:3c:99:ed:16:
                    6a:d9:a1:63:6e:ab:db:cf:bf:57:75:74:81:91:71:
                    28:2d:d3:19:ac:e6:fe:d0:8d:ed:58:35:ce:8f:34:
                    97:65:14:63:c9:75:1f:d5:d4:62:c7:ed:db:d1:9f:
                    36:56:2a:83:3a:23:e7:3c:11:f6:dd:be:b7:bc:a5:
                    c0:8e:4b:63:51:4d:96:83:17:8e:21:f8:5e:8f:0e:
                    4e:c1:e9:8b:b1:7b:6a:6d:eb:33:02:30:1e:33:04:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7A:67:79:47:D2:18:A4:1E:AC:79:87:73:06:33:87:50:04:2C:EE
            X509v3 Authority Key Identifier:
                keyid:53:B8:EF:89:0E:15:9C:97:C8:54:A2:FD:8A:6A:51:B3:E3:4E:62:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53B8EF890E159C97C854A2FD8A6A51B3E34E626C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/1/3136382e3230352e38392e302f32342d3234203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:eb:74:4e:ed:a3:e9:4e:6c:50:2f:02:2d:69:bc:00:5a:
         cd:1d:3d:91:10:65:8e:05:c1:d5:19:b6:4d:2f:90:98:99:0b:
         69:01:4a:5d:a0:14:23:e6:02:76:40:aa:33:fa:36:0b:97:67:
         2c:5f:25:48:1f:f5:c2:26:ea:d4:29:f3:35:55:3d:da:f3:fd:
         13:c0:d2:cf:f3:5c:da:12:df:fb:b4:77:53:22:ea:fb:71:ef:
         da:7a:d7:65:7a:da:16:e3:cf:4e:34:34:51:46:66:f1:52:ff:
         1b:6d:13:3f:d5:9a:ec:78:40:5a:e0:92:a5:14:d3:19:83:35:
         3e:36:46:cd:92:f1:7e:1f:35:19:a3:d0:5f:54:6e:63:da:f1:
         be:88:c1:d2:98:a7:42:ad:c5:f1:9f:f7:3a:d3:0a:7f:60:db:
         cc:d9:28:67:9e:ac:c9:39:b0:df:6d:58:ca:c4:fc:be:72:e7:
         04:52:c7:eb:68:16:e8:ac:eb:62:25:f5:8d:e1:fe:22:06:b1:
         df:8e:37:5d:cd:01:07:3f:5b:73:18:67:53:7f:c9:2f:58:57:
         aa:dd:30:16:7a:0a:7b:d5:05:f6:0f:78:33:62:ca:34:a6:40:
         f7:91:35:d3:97:9f:b4:c7:79:7d:05:c7:e6:8a:16:71:7e:75:
         05:d0:65:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURxjhvwiO3LJSb9oIDZ4863nj0x0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCOEVGODkwRTE1OUM5N0M4NTRBMkZEOEE2QTUxQjNF
MzRFNjI2QzAeFw0yNjAyMDYwMDQ5MjNaFw0yNzAyMDUwMDU0MjNaMDMxMTAvBgNV
BAMTKDVCN0E2Nzc5NDdEMjE4QTQxRUFDNzk4NzczMDYzMzg3NTAwNDJDRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGEjYxhMkCwPjQXkP18Xr8p3Eg
g0+FIplI3GGgZbzbD8mEyv7XC52Z3hsTujv7YPshaz/TcUsIOPN30UasO1wPGKGn
cHKQscADCvC7XKdKFGuJh57RaHM3tsoRneB5vP5VZ5SdZ0S3YN35j5Htrn2/cyFD
iG+j3O8MhqcXgVPLEw/4qgOH/Iyt+ssWxp98Cubcvt1BtmXbZnFlvOiFIabFPJnt
FmrZoWNuq9vPv1d1dIGRcSgt0xms5v7Qje1YNc6PNJdlFGPJdR/V1GLH7dvRnzZW
KoM6I+c8Efbdvre8pcCOS2NRTZaDF44h+F6PDk7B6Yuxe2pt6zMCMB4zBCMLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW3pneUfSGKQerHmHcwYzh1AELO4wHwYDVR0j
BBgwFoAUU7jviQ4VnJfIVKL9impRs+NOYmwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWh1RTJqRDZKdjR2bkFTQkdidU05cGZnRkJUWjdzaUtrQlg4YmFwN1lu
SmIvMS81M0I4RUY4OTBFMTU5Qzk3Qzg1NEEyRkQ4QTZBNTFCM0UzNEU2MjZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzQjhFRjg5MEUxNTlDOTdD
ODU0QTJGRDhBNkE1MUIzRTM0RTYyNkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlodUUyakQ2SnY0dm5BU0JHYnVNOXBmZ0ZCVFo3c2lLa0JYOGJhcDdZbkpiLzEv
MzEzNjM4MmUzMjMwMzUyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACozVkwDQYJKoZIhvcNAQELBQADggEBADzz63RO
7aPpTmxQLwItabwAWs0dPZEQZY4FwdUZtk0vkJiZC2kBSl2gFCPmAnZAqjP6NguX
ZyxfJUgf9cIm6tQp8zVVPdrz/RPA0s/zXNoS3/u0d1Mi6vtx79p612V62hbjz040
NFFGZvFS/xttEz/Vmux4QFrgkqUU0xmDNT42Rs2S8X4fNRmj0F9UbmPa8b6IwdKY
p0KtxfGf9zrTCn9g28zZKGeerMk5sN9tWMrE/L5y5wRSx+toFuis62Il9Y3h/iIG
sd+ON13NAQc/W3MYZ1N/yS9YV6rdMBZ6CnvVBfYPeDNiyjSmQPeRNdOXn7THeX0F
x+aKFnF+dQXQZYM=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:20 2026 by rpki-client