Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa
File:                     3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          57JO0bvpKzDmLKEPpGyu1NrfxdJhk8I0v6C3rwOCyv8=
Subject key identifier:   B7:F5:75:CA:3B:1B:C9:32:F0:48:31:58:0C:AD:D4:85:BD:23:F4:4C
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       0CD9BF1A6ED6D7246BFD621306D912C2B486751E
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa
Signing time:             Mon 12 Jan 2026 15:22:11 +0000
ROA not before:           Mon 12 Jan 2026 15:17:11 +0000
ROA not after:            Mon 11 Jan 2027 15:22:11 +0000
asID:                     267484
IP address blocks:        187.85.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d9:bf:1a:6e:d6:d7:24:6b:fd:62:13:06:d9:12:c2:b4:86:75:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:11 2026 GMT
            Not After : Jan 11 15:22:11 2027 GMT
        Subject: CN=B7F575CA3B1BC932F04831580CADD485BD23F44C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:23:65:de:92:cf:1d:af:38:1c:4a:9d:27:
                    0f:74:99:e4:e8:42:1c:ab:0f:c2:33:0c:f1:16:5c:
                    77:38:32:5f:95:88:6b:5f:73:a9:79:f5:87:d2:3b:
                    1b:22:41:18:0e:e0:79:ba:de:b9:e2:80:c5:21:5b:
                    51:df:37:06:b1:46:9f:b5:2f:ce:64:28:e1:94:49:
                    8c:61:8d:a2:2c:09:e2:31:d0:e8:ff:9d:13:5d:97:
                    d7:7b:c7:8b:27:a0:01:32:96:19:97:2c:2f:ba:93:
                    e9:39:24:aa:e9:cf:30:87:aa:59:12:dd:42:ec:32:
                    81:d1:62:00:c0:2b:a4:26:0f:ce:bb:6f:c5:c8:0f:
                    df:4b:d3:9b:86:f0:7e:eb:51:07:35:d4:73:ec:2b:
                    15:f6:3f:60:e4:54:d5:3b:cd:8c:7a:86:65:ad:d8:
                    05:a4:3d:4a:b0:e2:88:a9:b0:a0:2c:70:97:9f:b7:
                    e4:36:bd:25:f9:84:e2:99:09:fa:98:f4:67:cc:e4:
                    84:0f:52:7e:39:db:02:8f:cc:2b:ec:5b:73:b5:a2:
                    f4:7c:6b:bc:86:e8:3b:a7:44:a7:be:88:18:f0:30:
                    24:22:da:53:ac:0a:9c:9f:d5:2c:87:73:34:29:ff:
                    3d:51:bc:4f:92:f9:4a:dc:ea:30:36:b2:4a:6c:16:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F5:75:CA:3B:1B:C9:32:F0:48:31:58:0C:AD:D4:85:BD:23:F4:4C
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3139322e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:66:31:d6:f1:a7:8f:4c:f7:43:7c:e3:37:e0:94:6b:98:
         90:51:ce:79:18:f8:c5:84:b6:14:3b:65:16:10:80:db:13:9d:
         cb:d6:13:c7:82:57:6f:53:5e:c7:11:2e:96:c9:de:c9:f0:e8:
         85:f0:2c:ad:ee:dd:60:da:b9:4d:08:f8:f9:6b:3f:ff:de:81:
         69:96:91:36:15:17:50:57:90:98:8d:0e:30:02:4a:57:5d:4b:
         87:4d:75:c9:24:c1:04:30:83:35:42:98:b7:0b:d7:ed:9a:ac:
         ef:ae:57:f4:c8:22:20:7b:45:92:12:9c:16:53:a8:6f:ab:fd:
         7e:4f:0e:fe:5c:2c:20:3a:37:89:7d:82:39:eb:65:ff:7f:16:
         bc:ac:6a:9f:e8:f7:07:c6:a6:d4:05:0e:9a:ba:97:d3:b9:12:
         52:f7:95:17:70:04:a1:a2:0a:6d:75:56:be:63:48:2e:aa:1e:
         c7:56:74:c7:c1:3f:de:8a:f6:f3:a4:d1:ca:0d:a4:93:e6:89:
         94:9d:29:ed:fb:12:c9:e0:84:9a:60:8a:26:55:ca:db:26:46:
         1f:3c:83:7c:06:ad:bb:14:87:ab:96:1c:8d:bb:c0:0a:5b:08:
         21:b0:32:ae:d3:6f:3a:e8:32:c2:60:3f:f5:ac:b5:0b:40:fc:
         ed:3e:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:57:27 2026 by rpki-client