Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa
File:                     3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa (raw, json)
Hash identifier:          vH0Aba3ZBlsE5UdzS3eBQaKzWKxQSTueVQtv06nEml8=
Subject key identifier:   9A:4C:F3:91:86:8D:35:8E:7B:42:3D:3D:18:40:C9:25:5F:4A:0C:9D
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       6AAE245F399CB9B127C8F5B61C8893EFA5196936
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     266211
IP address blocks:        192.144.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ae:24:5f:39:9c:b9:b1:27:c8:f5:b6:1c:88:93:ef:a5:19:69:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject: CN=3082010A0282010100B980A07337B42B6AAE95C4EBFB605233AB877CC9BF757AE07E549C27966DC31ECD427F1B4A6E838873C13BB9415841644CE5DE46EA10243F0BBB0AD263D967ADEF31BFE465749BDBD03985399631C4B42AE5EE7B6701CD14F9F1FFC9D0D475723C20B175883AECC6992F7F669552263A38631B85D338401B2951CB93061E2C11F4C35A492C56E113CC05036917AF7125F610744610CA83F73C39D46B0698CD6685663397B18AE2AB9CD445C3EA30BE6723C62FEAEB2859BA66A778CE5B12B5E94CF5A02F3B855D3B9CAD7D46FD1E9AA7F3F365CD7AE2B6614AE1EB1DD6032D577223EE8D0E9FDC300D7F90DDF6A8B73395A9AF2C1A5C8E8784DBCC36664A1F6D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:a0:73:37:b4:2b:6a:ae:95:c4:eb:fb:60:
                    52:33:ab:87:7c:c9:bf:75:7a:e0:7e:54:9c:27:96:
                    6d:c3:1e:cd:42:7f:1b:4a:6e:83:88:73:c1:3b:b9:
                    41:58:41:64:4c:e5:de:46:ea:10:24:3f:0b:bb:0a:
                    d2:63:d9:67:ad:ef:31:bf:e4:65:74:9b:db:d0:39:
                    85:39:96:31:c4:b4:2a:e5:ee:7b:67:01:cd:14:f9:
                    f1:ff:c9:d0:d4:75:72:3c:20:b1:75:88:3a:ec:c6:
                    99:2f:7f:66:95:52:26:3a:38:63:1b:85:d3:38:40:
                    1b:29:51:cb:93:06:1e:2c:11:f4:c3:5a:49:2c:56:
                    e1:13:cc:05:03:69:17:af:71:25:f6:10:74:46:10:
                    ca:83:f7:3c:39:d4:6b:06:98:cd:66:85:66:33:97:
                    b1:8a:e2:ab:9c:d4:45:c3:ea:30:be:67:23:c6:2f:
                    ea:eb:28:59:ba:66:a7:78:ce:5b:12:b5:e9:4c:f5:
                    a0:2f:3b:85:5d:3b:9c:ad:7d:46:fd:1e:9a:a7:f3:
                    f3:65:cd:7a:e2:b6:61:4a:e1:eb:1d:d6:03:2d:57:
                    72:23:ee:8d:0e:9f:dc:30:0d:7f:90:dd:f6:a8:b7:
                    33:95:a9:af:2c:1a:5c:8e:87:84:db:cc:36:66:4a:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:F3:91:86:8D:35:8E:7B:42:3D:3D:18:40:C9:25:5F:4A:0C:9D
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:78:ef:08:bc:f6:1b:ef:22:9e:01:d0:4b:90:f9:20:aa:
         f3:cb:fc:93:fc:f7:1d:01:99:04:80:d2:fe:d5:40:57:96:41:
         64:e7:0a:4a:a3:c0:44:0c:0b:6d:11:1f:3e:e2:26:80:f4:04:
         9b:84:18:67:78:82:a1:fe:4b:16:b9:50:7e:ca:09:45:2f:7d:
         d9:ed:61:30:98:f5:be:13:c3:69:f1:3c:8e:58:35:e1:d3:58:
         20:8e:5c:19:f9:06:13:2d:a0:64:48:f8:67:1e:60:3a:02:ed:
         c3:81:6a:0b:dc:d4:84:e5:80:41:56:ed:c3:7f:32:09:f8:15:
         47:da:39:d4:80:68:42:93:5b:98:e9:c1:d5:86:82:ef:aa:f2:
         de:29:6e:9d:23:53:be:6b:61:03:79:a7:d9:18:cb:f1:f2:44:
         59:83:84:74:3c:fb:e5:be:8b:ce:53:f9:88:d1:de:27:99:7e:
         87:7a:b5:62:bf:15:3f:2e:ec:08:d1:96:df:d3:e1:38:18:e8:
         35:84:66:27:7b:5b:c9:c1:e7:7a:8d:d3:58:13:19:24:46:fc:
         60:e0:d8:3c:e1:92:0d:61:ea:12:9d:01:9c:76:bc:0d:21:18:
         8d:9d:fe:48:e3:af:bb:e6:b5:34:53:32:cb:b5:ad:83:e8:57:
         28:02:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:22 2026 by rpki-client