Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
File:                     3138372e38362e3131322e302f32302d3234203d3e203533303637.roa (raw, json)
Hash identifier:          rFQz3o/jEe/rPz4xsUvKXWOtIDXuFSTsS2svSmxbFls=
Subject key identifier:   4A:41:BD:01:01:3E:CA:19:DB:66:8A:EF:81:81:A3:79:96:6C:8F:B4
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       33DB525AA4A8A5F2F3C088431DA9A25CC71B1CFB
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa
Signing time:             Mon 12 Jan 2026 15:22:09 +0000
ROA not before:           Mon 12 Jan 2026 15:17:09 +0000
ROA not after:            Mon 11 Jan 2027 15:22:09 +0000
asID:                     53067
IP address blocks:        187.86.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:db:52:5a:a4:a8:a5:f2:f3:c0:88:43:1d:a9:a2:5c:c7:1b:1c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:09 2026 GMT
            Not After : Jan 11 15:22:09 2027 GMT
        Subject: CN=4A41BD01013ECA19DB668AEF8181A379966C8FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:80:bb:a9:50:19:0a:47:5e:8d:e6:e4:2f:
                    bb:94:b5:77:64:43:82:d3:dd:be:ac:43:ed:3f:55:
                    a5:cd:d1:a2:a2:cb:9f:69:84:ea:4b:ac:56:e4:92:
                    c3:5e:8a:88:4a:27:11:76:8b:62:ea:d3:62:3f:c2:
                    11:f8:bb:ab:f0:33:7e:fb:70:f3:1e:dc:b2:9c:a2:
                    48:db:26:5c:ea:70:5c:1b:9e:dd:a4:7f:9b:12:60:
                    39:09:e5:61:4d:5f:35:7a:5c:1a:91:b2:57:e2:dd:
                    63:56:41:46:da:85:ad:dc:db:2f:6d:02:bb:fb:cd:
                    ba:20:3c:5d:95:52:e8:59:88:a3:40:5b:44:dc:ff:
                    d5:cf:0d:81:33:c5:ab:a5:31:0c:14:3f:0f:93:a5:
                    4f:02:98:ea:e0:f7:18:23:62:ec:de:45:db:4e:a7:
                    53:06:43:38:e7:ef:08:61:17:37:a8:ad:d2:71:02:
                    0c:6c:fa:1b:38:98:dc:59:b4:b0:00:d1:8b:8b:4e:
                    7c:40:5e:0c:67:d3:12:55:f5:bd:ac:cd:72:29:8e:
                    b5:bc:96:a0:a3:9c:e5:8d:ed:8f:12:76:d6:86:cc:
                    2a:30:38:35:a0:02:0a:77:ff:00:51:6a:7f:5b:6d:
                    26:0c:2b:68:2c:15:a8:79:92:3f:30:94:17:c4:4e:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:41:BD:01:01:3E:CA:19:DB:66:8A:EF:81:81:A3:79:96:6C:8F:B4
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38362e3131322e302f32302d3234203d3e203533303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:9e:04:1a:6b:7e:aa:0e:a2:b9:78:3f:05:be:7e:25:ee:38:
         cb:90:5d:ab:f9:97:8d:8f:e8:ce:37:0b:0f:b2:9b:f5:40:c9:
         3d:76:1c:f5:f8:b3:9e:9d:4d:40:cb:20:f1:3c:09:79:48:9c:
         3c:21:81:5a:d3:9d:b8:db:6d:11:a0:aa:b3:1c:fd:66:d3:6c:
         a5:47:c4:cb:63:89:41:5d:0e:6c:9e:bb:a5:a3:bb:b1:e4:5f:
         b6:d1:90:2a:b6:14:ed:eb:0f:83:32:81:07:d9:e0:e3:90:a1:
         83:a6:f4:bc:c2:a7:da:87:d0:c0:a2:61:19:53:6d:26:34:0d:
         c0:d0:a6:2b:3b:d8:77:59:5f:46:fe:02:69:a1:c0:4b:fe:31:
         92:2b:92:7d:b9:7a:bd:c8:5e:37:6f:70:d9:7a:06:05:e1:92:
         de:cf:9d:b7:20:f2:e3:83:d3:93:bb:60:93:0d:17:86:04:86:
         a8:24:0d:d2:2f:0b:d0:0c:7c:8a:1a:34:3b:8d:51:98:1a:d3:
         73:7b:d9:70:ad:9c:55:6f:03:aa:31:c3:b5:9b:dd:07:e4:9f:
         6e:0a:01:6a:fe:88:6f:da:20:16:14:97:b3:67:d9:bf:fa:8a:
         d7:13:06:67:cf:2a:c3:67:4d:78:93:4e:2c:e3:ed:9e:b8:5b:
         29:ef:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:19 2026 by rpki-client