Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          wYVw0EOS9r0yeK2aGqHmuW7nWDZE6LYKSyQOgwv2qrw=
Subject key identifier:   0E:9B:C1:3E:63:13:0F:BA:DB:C7:2D:93:27:35:D2:81:8B:9D:8E:2B
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       74F93649D57D4A4C8EFB9D593D0F3DE1D053202F
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:36 +0000
ROA not before:           Fri 30 Jan 2026 13:56:36 +0000
ROA not after:            Fri 29 Jan 2027 14:01:36 +0000
asID:                     262687
IP address blocks:        187.87.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f9:36:49:d5:7d:4a:4c:8e:fb:9d:59:3d:0f:3d:e1:d0:53:20:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:36 2026 GMT
            Not After : Jan 29 14:01:36 2027 GMT
        Subject: CN=0E9BC13E63130FBADBC72D932735D2818B9D8E2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:75:34:21:28:ae:87:1c:62:41:2d:ef:38:
                    ae:c7:4f:ac:c3:1c:c9:e1:89:48:9d:f9:28:d1:b0:
                    4d:5b:cd:7e:62:6b:5d:9a:48:f7:a8:3e:b1:84:77:
                    a6:11:13:92:59:f2:8d:b9:9c:2c:d7:e6:f2:5e:81:
                    ec:c2:73:c8:4c:56:64:df:7f:4e:83:cf:6a:77:9b:
                    e3:c9:18:d6:6d:47:58:ab:a0:87:15:c8:be:1f:4c:
                    48:be:57:fa:46:89:63:0e:99:19:1a:d4:63:78:4f:
                    8a:cc:7d:b9:07:eb:af:11:f8:c9:d6:e8:1c:df:55:
                    9d:05:d4:26:69:ef:bb:5d:9b:4c:b0:da:b2:15:ac:
                    e0:39:3f:33:e8:7d:27:0b:6e:de:bb:5f:18:a3:3c:
                    00:c2:d9:49:17:96:67:96:78:9e:3f:f8:19:2c:49:
                    17:92:9c:eb:89:34:6a:42:a0:32:35:74:4e:4b:21:
                    64:e4:b2:03:7a:58:62:60:87:06:62:8b:4b:8f:18:
                    d5:a4:ae:94:09:90:3e:75:76:a0:7e:7d:34:bd:71:
                    ad:82:22:22:17:7a:0b:f7:79:a1:16:cc:cc:de:f1:
                    d2:2d:6b:87:c5:52:46:7b:10:29:d0:4a:79:d4:db:
                    9e:9f:57:49:43:a4:22:8f:05:39:66:10:f0:74:13:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:C1:3E:63:13:0F:BA:DB:C7:2D:93:27:35:D2:81:8B:9D:8E:2B
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:96:57:e2:df:b5:cc:e4:f6:f0:0e:f5:1e:45:20:9a:99:e4:
         3a:f6:40:a5:43:46:f3:69:0e:83:a9:c2:17:40:d8:86:d7:e1:
         b2:ca:f3:9a:73:88:83:45:0c:49:6e:e3:37:00:81:00:33:57:
         db:65:41:bc:27:01:61:64:9f:d0:24:40:7c:85:e3:55:e1:fa:
         38:ea:1b:65:17:e7:96:6c:18:5a:05:ab:b7:c9:b9:ff:d0:4d:
         cc:77:49:fc:d0:1d:9a:cf:68:db:34:42:b4:74:9b:e2:ae:e2:
         a5:86:55:1d:10:eb:05:09:15:bf:7c:b3:5e:30:39:15:af:35:
         4a:bf:e6:c3:71:c2:1a:a6:8e:c3:65:c9:7a:89:02:57:63:54:
         a2:14:95:91:ea:e9:9c:3d:64:9e:aa:ac:56:a3:da:40:d8:b2:
         24:e3:b3:19:7e:81:75:11:c0:24:7d:51:c2:86:f7:66:f1:90:
         a0:ef:70:13:5a:bc:e0:2b:c3:7e:69:a3:66:37:a8:60:03:1e:
         01:56:dd:d4:d7:ff:e2:da:7d:57:f1:63:f8:d6:f8:e8:b8:99:
         7b:d0:a6:8a:01:b0:72:f5:cb:45:84:bb:a8:e2:e0:59:1a:30:
         ac:7a:23:39:68:00:ac:52:fe:3d:9d:97:a0:c9:b2:db:f6:d1:
         ef:50:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:53 2026 by rpki-client