Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32322d3234203d3e203631393031.roa
File:                     3139312e352e36342e302f32322d3234203d3e203631393031.roa (raw, json)
Hash identifier:          eqoH3t/ns4CbKNyKmwtSxX3UtkoMI2uU5YORJvabovE=
Subject key identifier:   0D:65:2E:65:77:97:68:B5:27:38:AD:DA:C5:C0:76:6C:7C:5F:90:2D
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       3711AA7C1CFA4537C446B7ED3476CC5A9662FCD4
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32322d3234203d3e203631393031.roa
Signing time:             Thu 05 Feb 2026 17:46:28 +0000
ROA not before:           Thu 05 Feb 2026 17:41:28 +0000
ROA not after:            Thu 04 Feb 2027 17:46:28 +0000
asID:                     61901
IP address blocks:        191.5.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:11:aa:7c:1c:fa:45:37:c4:46:b7:ed:34:76:cc:5a:96:62:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Feb  5 17:41:28 2026 GMT
            Not After : Feb  4 17:46:28 2027 GMT
        Subject: CN=0D652E65779768B52738ADDAC5C0766C7C5F902D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:0b:35:b4:de:89:1f:c2:44:47:e5:6d:34:
                    4c:52:44:5d:9b:b6:7b:a2:5e:62:13:24:8d:9b:79:
                    7e:a2:1c:58:ea:eb:79:6f:24:00:9e:2c:ff:ee:78:
                    d6:fe:98:fa:19:62:9e:8f:f2:f0:d6:ce:27:02:af:
                    85:8d:5f:5f:12:1b:9e:c2:de:c7:78:05:2b:2c:ae:
                    cf:98:84:de:f9:d4:06:61:60:59:89:9b:39:b3:40:
                    36:1f:f6:ba:22:ca:8f:4e:32:a9:f1:9b:7d:2a:0b:
                    d4:32:95:4b:18:06:a3:0a:85:55:fc:7e:ce:aa:01:
                    8d:ac:e8:bb:0e:80:7f:47:e5:3f:e2:c1:3c:c0:2f:
                    30:15:99:30:70:76:f3:86:6b:0b:91:15:ba:3f:c3:
                    f1:eb:9b:8c:28:ae:5c:98:97:7e:4b:ec:2b:9b:1c:
                    d7:03:11:8f:04:ea:5e:7c:3f:bc:70:e3:51:61:a2:
                    f8:98:da:59:3a:86:aa:e7:e6:18:8f:a4:92:22:ab:
                    ba:bf:ba:f9:15:d9:04:a0:36:7e:25:25:6c:2f:8b:
                    d5:44:f4:e0:f2:cb:e2:78:de:54:a2:ae:01:29:61:
                    ef:6d:b2:df:9e:0b:5d:a7:34:dc:4e:ae:7f:3c:86:
                    30:9e:5f:08:65:39:0a:fe:65:96:19:3c:0d:a6:2c:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:2E:65:77:97:68:B5:27:38:AD:DA:C5:C0:76:6C:7C:5F:90:2D
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3139312e352e36342e302f32322d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:05:b2:a5:63:12:61:54:84:66:eb:82:76:1f:4d:05:92:
         53:8b:44:f6:85:d7:58:14:ab:2e:1a:b4:ff:1a:f9:4a:bb:c3:
         b8:10:61:a8:00:2d:a7:8d:91:38:83:1b:21:de:67:e2:28:27:
         68:14:2b:c2:f0:de:1a:6b:7f:50:74:2d:10:43:83:4e:6d:55:
         67:5a:60:77:70:e7:8c:28:68:db:58:21:21:bd:99:6b:ff:2a:
         2a:58:35:96:d5:e2:ef:23:21:bb:dd:77:f7:85:70:1c:b5:2e:
         44:c9:c9:2c:3a:e6:59:d0:95:21:f9:c6:94:40:56:04:26:e6:
         23:bc:70:27:5e:d8:e6:4c:61:79:17:92:84:b8:3f:51:c7:d8:
         d0:70:68:ac:01:1b:31:f9:66:9a:55:2c:4c:1a:26:a9:9e:f6:
         99:df:7f:db:91:0a:3d:91:de:53:56:82:86:d5:cd:ea:24:33:
         95:71:f9:81:05:51:1f:b2:40:21:0b:39:bf:45:9d:b4:18:12:
         05:35:da:b4:db:13:3b:36:47:8b:50:21:39:08:4e:81:fb:9e:
         e3:31:06:3f:ae:d9:2c:c6:b0:ae:69:60:51:aa:0b:55:76:57:
         b4:8a:53:38:db:a0:9f:23:6d:be:a5:27:fe:98:d6:d8:8e:39:
         f3:48:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:01 2026 by rpki-client