Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          l+2JE6M48u+X8awJ3eiyvStmkzPPFBvvmn86rKSTQD0=
Subject key identifier:   BB:67:C0:38:AD:60:5C:97:51:8C:71:40:B8:03:99:F3:02:E2:63:0A
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       2072877793480F606879DD95ECF3A72BA514122F
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:45 +0000
ROA not before:           Fri 30 Jan 2026 13:56:45 +0000
ROA not after:            Fri 29 Jan 2027 14:01:45 +0000
asID:                     262687
IP address blocks:        187.87.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:87:77:93:48:0f:60:68:79:dd:95:ec:f3:a7:2b:a5:14:12:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:45 2026 GMT
            Not After : Jan 29 14:01:45 2027 GMT
        Subject: CN=BB67C038AD605C97518C7140B80399F302E2630A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:37:e1:2f:1f:72:c4:49:92:00:3c:73:ba:6f:
                    3f:a5:22:4e:58:fe:10:79:66:88:27:27:97:2f:6f:
                    b0:33:4f:8d:ee:65:1f:de:d1:7c:87:f2:92:8e:7c:
                    f3:e9:8d:83:89:b9:ac:cc:86:3e:da:6c:3c:94:41:
                    09:18:9a:83:45:d2:c4:89:30:d9:a1:85:7e:0d:26:
                    00:98:7e:95:9b:65:de:9a:64:02:2a:85:28:5f:01:
                    48:2a:e4:c2:51:89:d0:69:c2:a4:ad:c8:d2:36:77:
                    44:3b:0e:af:cc:67:4f:23:0e:86:83:44:19:87:cb:
                    38:7a:d8:2b:bf:62:88:48:ed:0d:51:5d:d9:32:05:
                    e3:86:d6:ba:a8:c1:d2:89:81:6a:92:85:33:40:59:
                    26:db:73:67:f8:59:3f:d0:77:a5:1b:58:1b:03:44:
                    4f:50:d2:23:94:02:3d:7f:71:74:8c:72:dc:19:5c:
                    4c:e8:47:74:a8:d8:fb:2e:35:8a:82:c6:18:4b:bb:
                    a3:c7:4f:3d:c4:d5:7e:da:c7:e0:03:84:b5:d2:e2:
                    58:c9:c4:54:5d:b3:9b:91:de:41:8b:a3:74:15:3e:
                    2d:67:5a:35:7c:cc:7f:38:b7:ae:24:b2:80:73:c0:
                    2a:7f:bf:da:9e:88:9a:e0:6f:43:ba:b9:9e:fa:92:
                    70:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:C0:38:AD:60:5C:97:51:8C:71:40:B8:03:99:F3:02:E2:63:0A
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:1a:9c:bb:3f:9c:ca:9d:c6:28:10:fb:9f:94:44:c4:28:1c:
         56:6c:ee:5a:6f:ef:eb:7a:be:b4:fd:d6:84:ea:3d:24:c3:94:
         85:ab:ad:c5:0e:5d:84:b5:b3:0f:45:90:f8:b1:3e:0c:32:90:
         95:fc:e3:9f:3d:c7:2f:94:5a:56:9d:07:f7:20:26:ec:a2:43:
         11:4c:0a:07:a0:2a:04:f9:52:66:63:55:8c:8e:6f:9a:bf:07:
         29:ea:29:91:db:fa:c0:47:5d:0f:7c:e6:bf:b2:c9:75:ed:98:
         a9:92:af:fe:88:e7:e3:50:06:b3:8f:df:4f:9d:ca:a2:5a:56:
         fd:94:58:78:d3:16:94:cb:06:fc:a9:fc:73:0a:8e:5f:f4:47:
         ea:dd:ac:6f:a7:c1:bf:e6:47:2a:4f:f2:0b:69:81:24:3a:24:
         4c:87:c4:1a:3a:be:6a:64:12:9f:28:df:b8:d3:ff:d1:7c:5c:
         a7:cd:99:55:25:77:7b:13:a7:00:4f:a5:49:8e:94:1b:09:83:
         15:2f:28:48:f4:b1:82:fe:01:c4:b9:a4:f0:83:bb:30:18:0c:
         13:42:1c:ed:b1:0f:01:3f:3a:82:93:57:bc:69:f2:61:00:c6:
         62:43:2f:e5:be:93:b2:2f:a9:ff:49:e4:1c:d1:3a:1b:d9:a3:
         d0:b3:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:07 2026 by rpki-client