Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          tP3Iy1WvJDrbK1RVZYsyhjawG8Znl4Pww8ShvtwwHRg=
Subject key identifier:   3D:89:1A:97:18:A1:9F:0F:53:4D:13:52:10:E6:59:66:1A:D5:D0:CC
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       0D0CF7FCA1A00BB8814DFE437EA27DD0AE112D54
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:12 +0000
ROA not before:           Mon 12 Jan 2026 15:17:12 +0000
ROA not after:            Mon 11 Jan 2027 15:22:12 +0000
asID:                     28349
IP address blocks:        189.126.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0c:f7:fc:a1:a0:0b:b8:81:4d:fe:43:7e:a2:7d:d0:ae:11:2d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:12 2026 GMT
            Not After : Jan 11 15:22:12 2027 GMT
        Subject: CN=3D891A9718A19F0F534D135210E659661AD5D0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d2:0b:f2:f4:26:41:ba:9e:72:53:fd:a3:32:
                    29:dc:48:99:68:4b:18:d3:51:34:c2:3c:24:1e:39:
                    19:0d:50:2b:c7:d0:9e:a1:47:1c:24:d2:43:a6:2d:
                    25:2b:6c:df:2d:4d:17:59:fa:f3:b4:6c:09:c3:53:
                    26:ee:a2:59:a1:07:87:e7:76:69:05:d7:e5:ec:86:
                    cb:d8:6d:34:4f:9e:b6:5d:c3:36:41:6d:ad:8f:e3:
                    da:fd:00:1b:b4:c4:cd:d3:9d:10:da:d1:d9:33:23:
                    46:41:44:f9:fe:32:93:4a:76:ed:44:5c:55:a1:2c:
                    bf:bb:f9:63:59:5d:97:76:e4:53:43:90:56:43:24:
                    9c:8d:8b:03:65:18:22:84:a0:23:f3:9e:9b:b5:2d:
                    55:b2:eb:4e:18:43:b5:f6:53:dd:fd:ff:77:12:d9:
                    71:2b:39:5d:f6:78:03:a3:74:ec:b0:dc:17:8f:80:
                    0c:13:68:11:29:e8:a8:9c:34:a6:2f:e7:4c:fb:cf:
                    6c:f2:d8:ce:80:5a:4e:1b:e8:cf:6a:d6:75:51:fd:
                    7a:e4:e8:ec:6b:f4:76:71:3e:50:2d:15:6d:0c:02:
                    5f:92:ee:40:5f:a7:96:07:78:06:4d:74:5e:3f:5a:
                    5e:60:b9:22:e5:f5:2c:93:72:4d:9d:82:49:b5:b1:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:89:1A:97:18:A1:9F:0F:53:4D:13:52:10:E6:59:66:1A:D5:D0:CC
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:f4:ea:b4:a0:2a:a7:2a:ae:30:40:2b:78:25:ae:a7:38:
         3d:d1:f8:00:cc:ad:35:61:8c:bd:50:0f:ca:91:67:d4:eb:42:
         d8:e9:8e:10:32:76:79:c9:dd:73:67:0f:36:9e:d4:56:e3:4e:
         41:aa:a2:ec:aa:c1:4c:5b:d9:64:ff:b4:2b:5a:79:60:a0:fc:
         69:a4:8f:dd:a6:7c:08:e5:02:2b:a2:14:e8:64:ba:29:cf:86:
         73:33:e3:bb:e5:ac:16:1d:e4:89:4f:41:63:60:63:f8:d3:2c:
         87:bd:e4:d0:63:fb:59:ff:12:7f:68:4e:02:55:db:d5:bd:27:
         5d:ed:63:f2:28:1e:f8:d6:70:3e:02:57:67:38:83:6b:d9:bd:
         4d:0c:85:0f:46:b2:b4:8f:8f:5d:e9:b6:19:08:6e:94:02:67:
         b8:7d:da:96:c8:89:6d:e0:b7:4d:57:aa:15:b6:c4:44:ed:d2:
         ed:a5:ed:3f:f6:f4:fa:0a:77:ce:45:65:a8:c0:cd:dc:b8:ec:
         4b:bf:85:51:d3:80:9f:8a:bf:50:83:82:92:ca:0a:89:28:ef:
         48:35:ac:ad:4a:88:19:35:d3:bf:5d:a8:db:52:bf:82:6c:9f:
         72:58:1d:88:51:f9:22:93:0c:b3:a3:ef:49:41:a7:b2:70:37:
         ff:e4:7d:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDQz3/KGgC7iBTf5DfqJ90K4RLVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNjAxMTIxNTE3MTJaFw0yNzAxMTExNTIyMTJaMDMxMTAvBgNV
BAMTKDNEODkxQTk3MThBMTlGMEY1MzREMTM1MjEwRTY1OTY2MUFENUQwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0gvy9CZBup5yU/2jMincSJlo
SxjTUTTCPCQeORkNUCvH0J6hRxwk0kOmLSUrbN8tTRdZ+vO0bAnDUybuolmhB4fn
dmkF1+XshsvYbTRPnrZdwzZBba2P49r9ABu0xM3TnRDa0dkzI0ZBRPn+MpNKdu1E
XFWhLL+7+WNZXZd25FNDkFZDJJyNiwNlGCKEoCPznpu1LVWy604YQ7X2U939/3cS
2XErOV32eAOjdOyw3BePgAwTaBEp6KicNKYv50z7z2zy2M6AWk4b6M9q1nVR/Xrk
6Oxr9HZxPlAtFW0MAl+S7kBfp5YHeAZNdF4/Wl5guSLl9SyTck2dgkm1sVsHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPYkalxihnw9TTRNSEOZZZhrV0MwwHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9frAwDQYJKoZIhvcNAQELBQADggEBALle9Oq0
oCqnKq4wQCt4Ja6nOD3R+ADMrTVhjL1QD8qRZ9TrQtjpjhAydnnJ3XNnDzae1Fbj
TkGqouyqwUxb2WT/tCtaeWCg/Gmkj92mfAjlAiuiFOhkuinPhnMz47vlrBYd5IlP
QWNgY/jTLIe95NBj+1n/En9oTgJV29W9J13tY/IoHvjWcD4CV2c4g2vZvU0MhQ9G
srSPj13pthkIbpQCZ7h92pbIiW3gt01XqhW2xETt0u2l7T/29PoKd85FZajAzdy4
7Eu/hVHTgJ+Kv1CDgpLKCoko70g1rK1KiBk1079dqNtSv4Jsn3JYHYhR+SKTDLOj
70lBp7JwN//kfWs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:26:44 2026 by rpki-client