Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32312d3234203d3e203631393031.roa
File:                     3139312e352e36342e302f32312d3234203d3e203631393031.roa (raw, json)
Hash identifier:          g+L8+MU/BIKAwYWT63uiY31FfyoUGoW4ugoa/Qt7A/M=
Subject key identifier:   C4:29:BA:35:0E:1E:68:96:0B:DB:A7:E8:C4:A8:30:89:3D:B1:39:70
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       04CED68B3BD34EE124ED2E63B8B209BA8F8AB794
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32312d3234203d3e203631393031.roa
Signing time:             Thu 05 Feb 2026 17:46:28 +0000
ROA not before:           Thu 05 Feb 2026 17:41:28 +0000
ROA not after:            Thu 04 Feb 2027 17:46:28 +0000
asID:                     61901
IP address blocks:        191.5.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ce:d6:8b:3b:d3:4e:e1:24:ed:2e:63:b8:b2:09:ba:8f:8a:b7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Feb  5 17:41:28 2026 GMT
            Not After : Feb  4 17:46:28 2027 GMT
        Subject: CN=C429BA350E1E68960BDBA7E8C4A830893DB13970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:89:71:25:05:4f:61:97:79:28:e9:4f:de:
                    d7:9b:62:41:95:a7:f0:29:f9:62:1a:a2:dd:5a:0d:
                    77:5a:5f:f7:5f:0e:0f:8e:a0:d4:c6:b1:97:d0:bb:
                    bc:8a:df:95:52:88:75:0f:1c:47:be:d2:7d:12:42:
                    4e:4d:e4:b2:fc:6b:da:e5:f2:aa:3c:31:db:35:7a:
                    4a:f9:7a:86:19:fb:6f:d2:90:ae:a7:4d:61:5c:7e:
                    a2:df:2f:31:90:21:cb:a5:59:e2:7b:20:c6:a7:c7:
                    e1:77:3a:53:f9:e1:9e:39:63:92:e7:86:57:37:e5:
                    9f:69:17:e7:09:1d:e9:ea:d4:54:fe:f3:1f:b6:ac:
                    69:49:17:36:76:32:71:9a:24:c6:27:57:0f:69:c7:
                    6d:8d:80:17:55:93:92:65:a4:d4:8e:e5:35:9a:08:
                    de:88:98:80:d3:d8:d0:52:f6:3b:4e:94:61:66:1a:
                    b2:cc:58:56:43:f3:62:42:e6:07:47:f9:3c:c2:3a:
                    d6:e7:6b:a9:86:27:a0:5d:bc:a3:d5:87:7b:af:4a:
                    20:f4:00:e4:5c:ee:79:3a:dd:62:d3:5d:29:6b:4b:
                    98:8d:82:92:15:c6:28:6d:28:7d:de:cd:35:60:e4:
                    4c:43:93:6c:7d:fe:85:03:95:57:97:55:a7:0b:df:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:29:BA:35:0E:1E:68:96:0B:DB:A7:E8:C4:A8:30:89:3D:B1:39:70
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32312d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:61:07:c0:bb:c1:66:2f:fa:a9:cc:23:cf:76:62:e7:f2:80:
         7e:a7:e9:4d:bf:cf:d1:1a:c1:17:1e:9c:38:b2:27:18:a2:f6:
         aa:f9:68:87:85:a2:f3:25:d9:05:7b:ce:27:9f:28:64:6c:df:
         51:0d:76:fa:30:59:0b:d9:b5:86:db:08:da:76:36:f0:7f:f7:
         b2:1c:e0:ef:44:e2:fe:29:6e:b6:54:8b:cf:2c:cb:88:43:14:
         9d:52:fe:fc:18:9e:9e:dc:67:38:a6:a4:39:28:ef:38:1a:d9:
         37:5c:25:6e:0a:d3:e3:2e:31:77:5f:83:e4:40:d8:85:dc:b0:
         f4:97:9e:fe:d8:33:7f:1c:eb:ce:5c:70:68:f0:98:95:ca:e8:
         a5:e4:fb:89:fe:c2:a9:ad:42:97:9f:c6:01:5d:ee:35:b4:29:
         e5:9b:aa:3b:70:c6:cd:47:e6:99:a2:c7:03:53:d8:48:5d:20:
         de:d2:d2:a1:9d:55:83:d9:99:ca:75:f5:f8:aa:48:d7:28:b5:
         a0:44:e8:d2:86:b9:28:70:99:2c:9b:57:5c:60:0a:8e:e5:d7:
         8f:8e:ff:52:f5:b7:5b:2e:35:f0:02:58:c1:14:31:40:ea:37:
         dc:e7:d5:7d:e9:a2:22:6c:b7:d2:ea:1e:f9:d2:6b:24:e9:2f:
         85:8e:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:54 2026 by rpki-client