Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230382e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230382e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          RSGsdbWVGMZALiIHOi75KAMhkc0HX6WlfVTDHaUU2AQ=
Subject key identifier:   13:73:69:5C:8D:E8:24:4D:F9:0E:73:D7:F2:32:41:BD:ED:84:22:4C
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       75E3E87BA5B06312862F8DC5A8C00B27E71365A3
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230382e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:12 +0000
ROA not before:           Mon 12 Jan 2026 15:17:12 +0000
ROA not after:            Mon 11 Jan 2027 15:22:12 +0000
asID:                     28349
IP address blocks:        187.85.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e3:e8:7b:a5:b0:63:12:86:2f:8d:c5:a8:c0:0b:27:e7:13:65:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:12 2026 GMT
            Not After : Jan 11 15:22:12 2027 GMT
        Subject: CN=1373695C8DE8244DF90E73D7F23241BDED84224C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:86:5d:17:a4:7a:64:24:21:7a:38:41:a3:
                    0a:8e:b0:c9:dc:d1:2c:31:dc:b0:3a:97:52:45:27:
                    32:a0:be:f0:8f:9c:30:b6:0e:bc:7f:f5:3b:cd:e4:
                    50:5a:06:95:d7:d3:a9:fe:c2:20:d3:e2:8a:38:32:
                    96:87:a0:28:0c:c2:45:ba:62:9c:53:71:8e:56:9f:
                    4c:f0:a3:26:b4:aa:ec:8e:ff:3c:2d:0f:4f:8e:45:
                    3a:d7:05:98:47:e6:c8:dc:31:5a:e9:a3:5c:85:8b:
                    93:cc:ff:e1:de:1c:d6:cf:aa:a2:7d:c7:07:ca:62:
                    ab:d2:26:e8:87:ba:00:f8:af:44:36:0d:c4:c4:81:
                    c4:ba:65:a3:95:52:17:52:e0:9b:06:3d:35:79:c2:
                    00:e1:26:42:e2:92:8f:44:4f:93:da:ee:85:02:c7:
                    0e:e9:76:b0:72:35:50:9f:f7:5b:b7:9b:21:a3:fa:
                    ec:fd:e8:12:04:3f:22:cc:cb:74:62:0c:32:79:ae:
                    ab:9e:d8:f5:01:78:b4:15:35:b0:bb:19:89:5b:cf:
                    fd:12:df:cf:15:74:c9:f8:3e:d0:66:ff:00:a2:db:
                    59:ef:b0:a8:02:9c:2d:00:4a:6b:7d:56:26:ba:bd:
                    4c:22:54:0a:37:2e:90:a1:f6:88:32:9e:12:05:b5:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:69:5C:8D:E8:24:4D:F9:0E:73:D7:F2:32:41:BD:ED:84:22:4C
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230382e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:90:48:87:3f:08:61:3b:62:8e:bd:3c:a0:80:fd:b7:18:
         63:d1:a7:b1:74:d0:97:70:ab:2e:e3:bc:5e:b4:32:80:8d:2c:
         7d:10:df:f1:b7:05:ce:53:d8:65:81:3d:2a:1b:99:f3:99:2c:
         26:22:45:34:81:41:88:dd:c4:32:e0:38:b7:39:f8:49:a9:a2:
         ae:d5:59:b5:e8:ad:aa:33:8f:d8:07:05:f1:e9:75:07:17:d9:
         62:4b:ef:f9:5a:72:89:be:28:4e:42:18:ed:f2:a4:94:12:3b:
         0a:37:38:19:13:39:4a:d1:6f:be:74:ac:d3:32:b3:8c:1d:c0:
         a0:03:0c:b9:59:db:8e:15:40:de:f9:3d:ac:09:ea:bd:96:d6:
         f7:d6:af:3f:0f:f8:12:22:ef:e4:88:40:42:a2:cb:60:34:c7:
         6d:7f:67:fe:1e:9a:6a:b9:ff:aa:e4:1b:ba:80:f0:e8:5e:13:
         9e:1b:35:f4:55:4e:d8:a7:99:15:a9:78:45:5c:86:90:04:e6:
         9c:90:6d:14:eb:04:f4:a7:c6:fa:32:36:91:37:86:b1:10:9f:
         27:33:56:77:6b:9b:3a:c7:c0:04:03:bb:66:7a:e5:39:e0:7d:
         38:92:98:19:5e:35:4a:7c:2e:46:36:e5:ba:c9:a5:f0:2a:be:
         24:25:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:40:14 2026 by rpki-client