Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
File:                     3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa (raw, json)
Hash identifier:          I4dvjPymbp5Gn2yrtrY3c6P1OCso+xTwf98Q54aix48=
Subject key identifier:   C2:AD:F9:8E:47:E6:7C:29:93:52:B5:4B:93:BC:94:05:C3:AB:B0:5C
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       57074B963C829677F980E989AAAC9E7FA425DF6F
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa
Signing time:             Mon 12 Jan 2026 15:22:09 +0000
ROA not before:           Mon 12 Jan 2026 15:17:09 +0000
ROA not after:            Mon 11 Jan 2027 15:22:09 +0000
asID:                     267452
IP address blocks:        181.191.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:07:4b:96:3c:82:96:77:f9:80:e9:89:aa:ac:9e:7f:a4:25:df:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:09 2026 GMT
            Not After : Jan 11 15:22:09 2027 GMT
        Subject: CN=C2ADF98E47E67C299352B54B93BC9405C3ABB05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:b5:a8:ca:ba:48:af:31:39:dd:15:89:d5:
                    de:96:12:c3:37:55:08:cd:5c:ea:3f:f9:8d:f9:23:
                    ac:5b:40:72:9c:30:95:e4:6b:95:f1:cc:a6:40:16:
                    2d:d8:c0:db:5c:e6:f7:19:42:a2:92:3b:27:ff:60:
                    89:87:13:1f:08:e8:da:5e:12:35:a9:d2:54:d4:1a:
                    c1:77:86:9e:96:1b:90:26:4b:bd:fe:8a:75:59:6e:
                    a9:d9:f2:34:79:fa:e4:76:1c:6e:81:7e:38:07:96:
                    5e:9c:e7:1d:d1:86:82:4d:ea:a5:1e:6f:5d:da:25:
                    bb:1c:2e:79:29:9c:a5:43:52:5b:9b:d1:e8:75:56:
                    52:88:8e:c5:d6:4d:64:1e:3d:4d:95:30:20:3c:b9:
                    1c:d5:35:f7:f8:c7:d9:1b:45:44:16:38:e8:36:4c:
                    7f:ad:e9:b6:16:c6:ea:c3:87:25:2c:9f:65:34:1d:
                    bb:f8:2d:62:c5:77:85:89:c4:3b:0f:5c:99:44:48:
                    8f:56:cb:a1:2f:2e:b5:e7:24:7d:40:c3:e0:18:ed:
                    a8:1b:dc:62:6d:bf:74:21:6d:e6:99:37:a8:86:1f:
                    29:42:22:ff:32:2f:2e:58:07:2d:02:b0:89:ea:17:
                    da:64:ba:db:91:92:91:0e:a2:77:ef:0a:1f:9f:d7:
                    fe:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:F9:8E:47:E6:7C:29:93:52:B5:4B:93:BC:94:05:C3:AB:B0:5C
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138312e3139312e37362e302f32322d3234203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:aa:73:92:db:98:23:d6:76:03:37:c6:6a:1e:24:05:e4:
         62:ad:5b:f5:f3:27:30:50:3c:3b:13:97:b8:60:9d:f7:2b:fe:
         90:34:c4:e9:09:b0:62:c3:be:c8:39:69:5e:d5:33:66:2e:5c:
         90:18:9b:77:fe:18:8c:8e:0c:b2:ce:67:63:ba:a4:50:6d:3f:
         cc:5a:61:4e:37:66:50:3c:47:06:1a:fd:28:b7:61:37:2d:42:
         ab:b3:37:85:97:d8:a3:b8:16:28:68:53:b5:4c:98:5e:5e:8d:
         95:86:31:8c:3b:43:ca:e6:b1:17:86:92:6a:2f:d9:61:ee:60:
         2f:6d:be:e3:3b:83:07:6b:01:64:b6:df:20:01:21:55:94:31:
         07:d6:82:31:28:31:b3:11:49:47:57:b3:4d:39:28:49:a6:dc:
         89:bf:be:ea:11:0c:6e:d8:d8:52:dd:7f:6d:ec:ae:40:33:42:
         9f:c8:f8:5f:7a:d7:cd:10:10:cc:64:49:03:87:d9:4a:42:2e:
         cc:c5:dc:8f:ee:2c:46:bf:10:3f:33:8c:92:eb:a7:c6:a0:73:
         d8:51:c5:7b:e5:e2:43:d2:d6:8a:2a:94:b9:98:37:67:20:17:
         06:2c:9b:ff:d5:9c:dc:df:18:95:06:96:96:1f:07:b1:e8:18:
         c7:a8:13:dd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVwdLljyClnf5gOmJqqyef6Ql328wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNjAxMTIxNTE3MDlaFw0yNzAxMTExNTIyMDlaMDMxMTAvBgNV
BAMTKEMyQURGOThFNDdFNjdDMjk5MzUyQjU0QjkzQkM5NDA1QzNBQkIwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmW7WoyrpIrzE53RWJ1d6WEsM3
VQjNXOo/+Y35I6xbQHKcMJXka5XxzKZAFi3YwNtc5vcZQqKSOyf/YImHEx8I6Npe
EjWp0lTUGsF3hp6WG5AmS73+inVZbqnZ8jR5+uR2HG6BfjgHll6c5x3RhoJN6qUe
b13aJbscLnkpnKVDUlub0eh1VlKIjsXWTWQePU2VMCA8uRzVNff4x9kbRUQWOOg2
TH+t6bYWxurDhyUsn2U0Hbv4LWLFd4WJxDsPXJlESI9Wy6EvLrXnJH1Aw+AY7agb
3GJtv3QhbeaZN6iGHylCIv8yLy5YBy0CsInqF9pkutuRkpEOonfvCh+f1/4TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwq35jkfmfCmTUrVLk7yUBcOrsFwwHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODMxMmUzMTM5MzEyZTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1v0wwDQYJKoZIhvcNAQELBQADggEBAC5xqnOS
25gj1nYDN8ZqHiQF5GKtW/XzJzBQPDsTl7hgnfcr/pA0xOkJsGLDvsg5aV7VM2Yu
XJAYm3f+GIyODLLOZ2O6pFBtP8xaYU43ZlA8RwYa/Si3YTctQquzN4WX2KO4Fiho
U7VMmF5ejZWGMYw7Q8rmsReGkmov2WHuYC9tvuM7gwdrAWS23yABIVWUMQfWgjEo
MbMRSUdXs005KEmm3Im/vuoRDG7Y2FLdf23srkAzQp/I+F96180QEMxkSQOH2UpC
LszF3I/uLEa/ED8zjJLrp8agc9hRxXvl4kPS1ooqlLmYN2cgFwYsm//VnNzfGJUG
lpYfB7HoGMeoE90=
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:36 2026 by rpki-client