Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/3139302e38332e34382e302f32332d3234203d3e20323730333337.roa
File:                     3139302e38332e34382e302f32332d3234203d3e20323730333337.roa (raw, json)
Hash identifier:          PLlxovc7CQ9H7FVmyrgbNVfz1cmS819q1+k2JXFtakM=
Subject key identifier:   2A:F7:A1:10:B0:6A:A5:1B:A6:A2:27:74:20:86:E8:DE:14:1B:28:CD
Certificate issuer:       /CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
Certificate serial:       5871F8486E8D7E0D6BBD7EED25CCC3612E2175C5
Authority key identifier: 10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/3139302e38332e34382e302f32332d3234203d3e20323730333337.roa
Signing time:             Thu 05 Feb 2026 15:48:07 +0000
ROA not before:           Thu 05 Feb 2026 15:43:07 +0000
ROA not after:            Thu 04 Feb 2027 15:48:07 +0000
asID:                     270337
IP address blocks:        190.83.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:f8:48:6e:8d:7e:0d:6b:bd:7e:ed:25:cc:c3:61:2e:21:75:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102E8D201FEFBD18DA17FA1622858BB27784D51F
        Validity
            Not Before: Feb  5 15:43:07 2026 GMT
            Not After : Feb  4 15:48:07 2027 GMT
        Subject: CN=2AF7A110B06AA51BA6A227742086E8DE141B28CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:f8:3e:f2:21:74:5b:02:6a:4a:b7:59:6b:
                    8a:43:dc:2c:02:f5:0e:db:8c:14:c0:f0:c7:fe:e6:
                    6a:7f:03:c7:13:64:6e:6a:00:bf:bd:af:dd:28:d3:
                    a5:53:44:45:09:7d:14:bd:d8:fc:03:93:15:0a:fd:
                    a6:9e:ed:57:4c:37:15:7b:68:a8:72:e7:44:5d:b6:
                    47:ea:e6:69:d6:86:3b:b2:ab:1f:8b:49:7b:1e:c2:
                    47:ee:40:33:51:70:4e:c3:eb:91:43:ca:fb:10:6e:
                    44:0e:17:6d:b3:58:63:15:a1:d4:1f:49:10:20:9e:
                    42:df:41:df:86:40:db:09:e0:86:a7:01:ea:0d:0a:
                    80:03:13:c7:dd:2d:22:5e:89:e8:65:d9:b3:f8:c9:
                    53:52:2a:81:a6:93:26:42:f3:f0:c6:c2:23:96:62:
                    a1:22:c0:fa:65:0f:97:5a:00:b2:ee:f9:4b:1f:ca:
                    d9:91:56:d4:90:11:d4:54:b1:b2:4e:62:0b:1e:e7:
                    e4:6f:d0:d0:8f:cb:eb:79:79:3c:3b:19:4b:ec:b1:
                    63:01:a9:e3:88:21:fc:55:ef:19:b3:3e:7e:c7:aa:
                    1b:ae:3b:9a:bb:a8:d1:b4:90:71:7f:f5:ca:ab:e7:
                    c2:a5:b6:eb:5e:c5:c0:f9:3c:d1:73:4f:99:51:9a:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F7:A1:10:B0:6A:A5:1B:A6:A2:27:74:20:86:E8:DE:14:1B:28:CD
            X509v3 Authority Key Identifier:
                keyid:10:2E:8D:20:1F:EF:BD:18:DA:17:FA:16:22:85:8B:B2:77:84:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/102E8D201FEFBD18DA17FA1622858BB27784D51F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/102E8D201FEFBD18DA17FA1622858BB27784D51F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/2/3139302e38332e34382e302f32332d3234203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:e6:5f:7f:76:3b:e8:05:b9:fa:15:46:0c:94:b6:53:8e:
         3b:7e:8f:fd:a5:de:fa:fe:66:26:a3:eb:32:6c:df:06:ab:36:
         2d:cc:1b:61:69:0c:97:b7:0f:7e:a0:bf:8f:d4:04:26:4d:bb:
         d5:f7:3f:47:2b:6d:5d:b4:63:65:ef:10:92:59:3d:cb:31:9c:
         9d:9e:ec:f3:52:47:4b:3f:10:50:f8:16:61:69:3f:f0:26:be:
         5a:49:e0:44:dc:ea:e1:be:f6:d5:84:2d:f2:c1:1a:c6:05:79:
         dd:94:80:89:9f:eb:33:57:13:9a:d1:cf:05:15:be:89:4b:b2:
         95:79:b4:cb:d1:15:ad:4b:ff:d4:18:cc:7e:96:f8:3c:bc:ac:
         5d:0a:58:4e:fd:d9:ea:a8:e7:a4:17:c8:a2:1e:25:d5:d8:a1:
         ff:43:97:8c:dc:a8:19:e2:82:85:05:80:fe:83:0d:4f:31:91:
         6c:16:cb:ee:10:79:08:46:ed:16:51:5c:36:65:18:ce:76:31:
         91:d1:de:66:73:ed:86:e0:2c:17:06:b6:58:65:50:26:ec:41:
         83:0d:73:ed:df:9c:e5:ca:cc:ef:6b:f6:6f:27:3f:b4:19:97:
         35:43:1a:74:d6:eb:0e:4e:fe:5c:a0:97:08:a9:c4:4a:39:c0:
         36:56:3c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:09 2026 by rpki-client