Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230372e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230372e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          NDIEkYku2VFJOXSe94zj7HWaQ1KCr1jJohCFfYZmmNQ=
Subject key identifier:   49:3C:FE:8D:0A:94:54:A6:FE:89:1B:86:94:D3:24:31:7B:CA:F0:C8
Certificate issuer:       /CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
Certificate serial:       192BA190F684002FDCFBC4A6870B65991853F914
Authority key identifier: D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230372e302f32342d3234203d3e20323632363837.roa
Signing time:             Fri 30 Jan 2026 14:01:43 +0000
ROA not before:           Fri 30 Jan 2026 13:56:43 +0000
ROA not after:            Fri 29 Jan 2027 14:01:43 +0000
asID:                     262687
IP address blocks:        187.87.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2b:a1:90:f6:84:00:2f:dc:fb:c4:a6:87:0b:65:99:18:53:f9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F123F850B68CABD3D5C67D9B2660D78C38455C
        Validity
            Not Before: Jan 30 13:56:43 2026 GMT
            Not After : Jan 29 14:01:43 2027 GMT
        Subject: CN=493CFE8D0A9454A6FE891B8694D324317BCAF0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:9b:04:76:02:e9:6d:87:09:6e:63:a9:c5:
                    5e:78:b0:89:a8:b3:c8:4b:73:74:07:5d:21:b5:af:
                    23:1e:a1:86:7f:b9:e8:71:e1:e9:b2:02:bb:84:5a:
                    f6:f1:3a:94:a5:d7:86:dc:85:55:1b:7c:5b:f9:f5:
                    55:96:5b:26:39:6b:94:c5:bb:8b:3c:8e:63:e6:21:
                    55:c3:0c:b9:84:cc:15:37:5b:b2:a9:2b:35:b8:27:
                    5d:02:55:eb:b3:76:51:6a:1b:25:da:9c:10:8b:c1:
                    d1:6e:e3:20:77:bb:9a:2e:ec:fb:78:33:c5:17:b7:
                    63:da:0d:0b:d4:91:23:fb:cf:52:e5:ad:73:3b:0e:
                    80:35:b1:ac:69:a4:6a:a8:1e:77:1f:c0:18:8a:ec:
                    4c:98:59:d5:b9:9f:a3:7e:8a:90:d6:e5:57:78:ef:
                    dc:fa:ef:a6:d7:e4:de:30:f6:c8:44:3f:69:8e:e0:
                    cb:19:f9:1a:8a:87:c8:ec:06:05:12:e5:90:dc:02:
                    4b:08:e5:8c:1d:23:30:60:75:b7:6e:96:2b:66:5b:
                    47:c1:d8:95:a2:19:96:12:af:0b:74:64:c4:b9:b2:
                    0f:7a:f1:df:20:2a:67:ca:6b:bf:a2:75:c8:d4:9e:
                    69:f4:f1:fe:f1:24:29:61:ca:4c:cd:99:f4:10:ab:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3C:FE:8D:0A:94:54:A6:FE:89:1B:86:94:D3:24:31:7B:CA:F0:C8
            X509v3 Authority Key Identifier:
                keyid:D1:F1:23:F8:50:B6:8C:AB:D3:D5:C6:7D:9B:26:60:D7:8C:38:45:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D1F123F850B68CABD3D5C67D9B2660D78C38455C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F123F850B68CABD3D5C67D9B2660D78C38455C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230372e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:85:5d:a6:78:9f:f9:6b:2f:ca:67:4c:c7:17:2c:b7:4e:2a:
         93:5b:0c:4a:1f:b3:76:cb:d1:29:e6:5a:06:dd:aa:0a:ea:10:
         db:47:fe:2f:b7:47:87:38:77:af:89:92:81:8d:e7:62:58:6c:
         cf:a7:6d:8b:5f:b0:cc:8d:43:5b:bc:3f:3e:ee:de:f2:de:40:
         3e:a7:f2:52:e7:a2:4f:85:a0:e2:d9:c4:99:7b:5f:8c:f9:64:
         3a:d6:c3:cd:c0:de:08:13:bd:b8:c3:89:1c:bf:f1:75:54:a8:
         06:e0:00:fc:90:86:3a:ec:8d:4c:b9:38:df:76:33:54:b1:1d:
         b2:e2:32:6a:b3:26:ad:72:4a:3b:51:37:d6:cc:24:e4:e7:8d:
         15:6b:09:bb:a4:e2:df:6a:a5:e4:8a:82:e8:f1:e6:90:77:7d:
         94:22:74:11:be:79:67:b7:27:6b:b9:d6:27:01:25:78:7f:9e:
         d7:40:72:06:4c:14:7b:b2:ca:70:4b:4a:cd:eb:5a:bb:9f:82:
         4a:1a:1e:28:2f:08:68:6d:05:23:76:46:d1:3e:79:4a:e7:52:
         4e:5c:0d:c5:37:46:db:c6:fc:1c:f2:40:08:42:88:f8:3a:7e:
         26:da:c0:ab:12:db:2b:12:8e:d9:7b:44:43:3d:4b:fe:91:98:
         52:3c:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:31:45 2026 by rpki-client