Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa
File:                     3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa (raw, json)
Hash identifier:          +IEpLx0dIBvOxrGZt6dGdebrlCHhh65RwIjFjbMk6hY=
Subject key identifier:   99:79:CF:F0:A4:D5:28:7A:3F:A9:BB:51:0F:83:AA:A5:30:6E:1A:62
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       43FA08804DFBB862C270F0199782AC597167BCDC
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:11 +0000
ROA not before:           Mon 12 Jan 2026 15:17:11 +0000
ROA not after:            Mon 11 Jan 2027 15:22:11 +0000
asID:                     28349
IP address blocks:        189.126.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fa:08:80:4d:fb:b8:62:c2:70:f0:19:97:82:ac:59:71:67:bc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:11 2026 GMT
            Not After : Jan 11 15:22:11 2027 GMT
        Subject: CN=9979CFF0A4D5287A3FA9BB510F83AAA5306E1A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:b8:6f:97:c8:e6:1f:02:3c:78:f0:1e:d7:
                    2a:1d:f9:2f:0a:98:c8:78:a1:97:04:7e:a7:ee:71:
                    83:c1:86:c5:4f:18:16:00:97:ca:a4:4e:b0:5c:82:
                    9b:a2:e6:2a:c2:24:9a:a0:ec:d7:d1:6e:50:82:4f:
                    dc:ed:db:c1:73:1f:d5:ee:2a:73:e2:a1:d1:82:cb:
                    0f:80:3e:2f:66:b4:6c:15:64:ef:11:f4:2e:02:ab:
                    10:8a:65:e2:a3:0b:e6:81:a1:cf:29:98:a4:45:75:
                    e7:c7:c9:93:3c:b0:c4:6a:d6:b8:b7:93:98:4f:39:
                    fe:aa:fd:49:95:6a:7d:40:b4:d6:45:fa:68:0e:72:
                    e9:0d:10:81:57:3c:5d:39:d1:6d:3b:27:23:81:b5:
                    2c:3f:81:40:95:59:83:24:c6:f8:ee:4f:09:56:71:
                    b1:99:bc:8a:12:25:a3:00:3b:f0:ca:5b:cf:49:4b:
                    92:06:43:3f:30:06:e4:e8:45:50:1d:83:c4:75:b6:
                    51:7f:2c:11:c1:ce:b8:59:68:0a:00:98:31:b1:44:
                    31:38:9a:66:6c:c7:ab:aa:73:94:f7:9b:4f:a2:cc:
                    c1:43:7e:3c:3e:7d:3a:29:b6:90:82:49:43:a1:3d:
                    b8:98:78:3e:1e:df:2e:99:2e:b8:96:51:c9:b0:c0:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:CF:F0:A4:D5:28:7A:3F:A9:BB:51:0F:83:AA:A5:30:6E:1A:62
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3138382e302f32332d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:7b:1b:c4:10:5b:82:d4:fe:23:6f:e8:61:6d:3b:91:e8:8b:
         99:5b:f5:67:6f:6c:9e:41:93:d2:ab:f6:63:ab:e6:d8:69:98:
         5a:59:20:ef:29:7a:92:07:a1:2e:ba:2c:0f:22:8c:0b:24:2a:
         11:4c:c1:0a:6d:66:fb:b4:8e:9b:71:1c:62:32:59:89:f4:a0:
         70:ee:13:94:a0:0e:f6:d5:b2:55:99:30:c1:1b:39:5d:09:e4:
         84:01:ac:5e:37:fd:f6:aa:b3:56:26:e2:6a:b7:8e:d0:31:bd:
         f4:0c:ef:34:c9:3d:8a:66:bb:da:2d:06:ed:21:85:68:69:51:
         5e:62:52:43:11:ef:b1:73:88:aa:55:fb:3f:5f:11:6d:75:2f:
         32:ce:f1:0e:7e:57:8e:0b:9f:e1:81:c0:d6:4c:90:b5:6c:01:
         6d:c8:dc:aa:dc:0c:02:26:99:fe:3b:5b:5a:b7:1d:fc:ad:f5:
         b5:cf:9a:75:c5:93:36:56:b3:dd:14:a8:53:3b:88:03:bb:64:
         2c:72:97:dc:b7:75:71:61:09:6c:40:db:fb:59:52:43:bc:4d:
         1b:e2:77:c2:34:90:59:fa:ff:ec:7d:82:14:57:54:f5:ee:fc:
         c2:75:b5:78:ad:a7:e9:d0:82:a2:d9:8f:fd:df:ce:99:80:ce:
         4b:be:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:07 2026 by rpki-client