Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
File:                     3138372e38352e3232302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          NYciu4zS508bhpx4k2rRPzC9EgxILQCUjQeAO7xUnXI=
Subject key identifier:   04:64:10:97:AD:65:F3:42:C1:F0:94:B0:90:EF:68:89:5E:4E:13:B2
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       4D46E3F955604506AB0B17D2A9A4D19E45E084CC
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:15 +0000
ROA not before:           Mon 12 Jan 2026 15:17:15 +0000
ROA not after:            Mon 11 Jan 2027 15:22:15 +0000
asID:                     28349
IP address blocks:        187.85.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:46:e3:f9:55:60:45:06:ab:0b:17:d2:a9:a4:d1:9e:45:e0:84:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:15 2026 GMT
            Not After : Jan 11 15:22:15 2027 GMT
        Subject: CN=04641097AD65F342C1F094B090EF68895E4E13B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:60:ba:a2:2f:e3:b9:aa:3b:3a:6f:63:6d:
                    22:87:ad:f0:bb:fd:10:06:37:ea:74:e3:15:0d:46:
                    6b:66:7e:cd:51:3f:6a:fe:40:75:53:f5:23:7a:99:
                    b7:77:b8:e9:58:4a:ed:4d:61:75:b5:61:00:bf:f0:
                    41:4f:50:83:dc:b5:21:fe:f2:02:11:57:81:61:7b:
                    1c:79:99:b2:c8:89:3d:96:c7:75:80:6f:21:db:8c:
                    e6:9a:a2:65:1c:4d:8a:39:60:88:85:df:21:e7:ec:
                    07:30:bc:17:b8:e8:bd:5a:29:e6:84:45:90:0f:b2:
                    91:74:33:6f:c2:61:d6:1a:1f:c6:cd:75:a2:20:a3:
                    10:f0:57:c2:03:3b:90:82:ea:f5:b4:d8:0d:05:17:
                    b5:3d:11:13:bc:fb:b6:62:eb:58:7e:4e:cb:de:03:
                    e2:6b:f1:65:30:8b:51:fb:cb:aa:a5:b5:ed:df:57:
                    bc:56:a0:a0:07:14:ec:ef:2e:11:f5:88:bc:f3:be:
                    a6:d1:bc:54:ae:79:e3:77:6d:26:77:e4:48:6b:2c:
                    b9:02:3e:86:bc:b0:29:dd:98:d4:cc:19:ae:ea:26:
                    85:f3:28:c8:3f:02:ad:cc:7f:ae:28:ec:65:c3:ce:
                    5b:66:43:d5:a2:73:b0:36:d1:9e:75:cb:4d:64:37:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:10:97:AD:65:F3:42:C1:F0:94:B0:90:EF:68:89:5E:4E:13:B2
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:ff:ac:87:58:eb:da:45:33:c2:cc:2d:98:a9:cc:ec:87:d0:
         d2:e4:34:a5:85:ad:64:f7:a9:62:c1:33:0a:65:11:fc:44:66:
         6b:15:aa:66:0d:f9:d3:e6:ad:cc:41:b5:be:0e:ab:5d:41:1e:
         9d:62:f8:42:33:39:ee:e0:a6:7c:6a:1d:2e:19:2c:6e:a3:2f:
         09:85:94:97:31:d3:e6:d9:48:cc:5b:2d:6d:e7:88:22:64:8a:
         2d:86:0d:ff:09:e4:09:88:e7:b9:c9:a2:a7:db:6c:7f:d7:88:
         cb:7d:14:71:3f:bf:10:d5:a2:1c:b5:06:dd:b5:87:62:dd:f1:
         53:ae:ed:d0:15:54:a3:04:60:24:0e:8b:e5:99:02:94:d3:5b:
         9f:1f:c8:59:87:e9:1d:fe:bc:d5:b5:83:44:32:86:d5:f3:78:
         45:37:95:69:cc:c6:4d:72:c5:89:d1:2a:ca:40:b0:fc:c7:76:
         5e:90:b1:64:3b:cc:23:b5:24:98:8a:99:e4:dd:ae:71:c9:58:
         2b:9d:9e:77:2c:4c:b4:c8:a2:9e:e6:6c:00:96:3b:a4:13:b8:
         0a:9c:5b:d2:48:ca:e5:4f:cb:43:96:a6:8d:17:16:0c:43:de:
         5a:20:f6:58:b9:75:6d:68:16:99:db:a5:e4:3f:ee:80:2e:65:
         e6:9c:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:46 2026 by rpki-client