Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          1/vSruGm2SUim8WydiIhyffb0851NIBW8A1qt0QBxtM=
Subject key identifier:   4B:BE:BE:08:42:55:82:F6:A9:C3:16:F9:A1:23:10:59:AE:9D:DE:0F
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       43EFBB8B6DA82726AA1F58224B1F94870DD3D7F2
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:38 +0000
ROA not before:           Fri 30 Jan 2026 13:56:38 +0000
ROA not after:            Fri 29 Jan 2027 14:01:38 +0000
asID:                     262687
IP address blocks:        187.87.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ef:bb:8b:6d:a8:27:26:aa:1f:58:22:4b:1f:94:87:0d:d3:d7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:38 2026 GMT
            Not After : Jan 29 14:01:38 2027 GMT
        Subject: CN=4BBEBE08425582F6A9C316F9A1231059AE9DDE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:a6:dc:16:81:85:19:e2:5e:35:b7:7c:40:
                    7b:2b:55:af:be:93:a9:d3:df:09:24:e1:90:2c:70:
                    4c:a3:f2:64:92:4f:30:86:66:97:14:67:31:f5:96:
                    61:ad:d7:7c:99:72:64:5d:82:4a:76:f6:77:b3:e6:
                    12:69:18:86:87:83:bf:e3:30:7b:9a:fe:68:81:07:
                    12:4b:24:bd:7d:80:a9:46:86:6f:66:ba:6c:f8:8c:
                    54:ce:06:29:d3:55:0b:80:34:ae:ea:d3:08:61:c7:
                    33:a6:b0:c4:c3:75:de:24:50:cb:52:93:86:2a:d2:
                    d3:b6:d2:7b:d5:de:ba:eb:26:ef:11:6a:04:fd:ec:
                    7e:1d:fe:ae:42:11:92:91:ca:07:16:91:ba:76:af:
                    cf:5a:fc:bf:28:ef:9e:6d:2c:49:bc:10:f8:f6:21:
                    7c:92:c7:3b:e1:c5:7d:23:0d:27:8e:7a:b5:05:b0:
                    89:c6:d2:a3:dc:20:49:e5:1d:fe:00:24:fb:3b:3e:
                    8a:d4:da:59:b1:eb:98:15:fb:e4:30:34:96:31:be:
                    00:29:14:80:75:7c:5c:37:c0:c1:4e:99:56:e1:80:
                    c8:b7:2b:ee:5c:48:0e:06:8e:9f:e2:fc:57:2d:c4:
                    b0:7a:19:0f:c9:07:de:dd:bf:a4:89:dc:50:5e:bc:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BE:BE:08:42:55:82:F6:A9:C3:16:F9:A1:23:10:59:AE:9D:DE:0F
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:e5:0b:bd:42:e7:a0:97:89:28:ae:5d:fb:86:a0:26:10:f0:
         93:be:58:bf:7c:58:cc:f4:e3:9d:f0:ce:3e:ff:87:74:d4:55:
         c6:75:b1:91:1c:89:83:58:85:87:4e:a5:5e:49:d7:81:98:a7:
         fa:b4:aa:49:04:4b:21:b8:c4:b9:d0:2d:f5:d1:6e:77:4c:3f:
         14:15:a2:65:be:6b:58:7d:6c:d4:3f:48:b0:90:7c:77:9f:68:
         2f:f5:d7:87:d6:b8:5e:79:85:17:1d:19:2c:1e:b7:08:6f:d1:
         61:66:0a:8d:7a:8c:59:02:42:7e:ba:2e:1d:ea:f8:70:b9:d5:
         1a:26:f2:23:4d:32:aa:2a:e6:e1:da:10:87:c3:3c:58:49:78:
         18:3e:6e:f7:88:c9:40:7a:32:d4:f7:0b:97:72:23:9a:72:4d:
         03:75:bf:bc:a1:f9:25:2a:89:a4:b6:4b:24:e1:1d:14:f3:fe:
         e1:47:96:2b:10:3e:2e:8f:d9:c8:3a:67:f9:27:ee:d7:db:e5:
         c2:5a:bd:24:da:62:b4:f8:fd:e9:b5:6f:df:de:63:a3:8b:b0:
         c3:f0:fb:d3:ed:e4:bb:ad:3c:26:58:06:31:14:50:6d:89:c0:
         90:78:b0:c3:e7:81:fc:86:26:d5:3b:b5:4a:7e:dd:95:f5:78:
         23:25:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:04 2026 by rpki-client