Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa
File:                     3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          0otUuJjCcgtSJuqqNqiFWp0Lm6O3E38XnyZ38A6jk8A=
Subject key identifier:   B3:BE:2D:E2:1B:6B:CD:20:A8:C0:FF:1D:32:E0:69:FE:CB:83:F6:A7
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       3CDE3A72AEAD67F80A65B8C2534D0081AE2BCEE7
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa
Signing time:             Mon 12 Jan 2026 15:22:15 +0000
ROA not before:           Mon 12 Jan 2026 15:17:15 +0000
ROA not after:            Mon 11 Jan 2027 15:22:15 +0000
asID:                     267484
IP address blocks:        189.51.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:de:3a:72:ae:ad:67:f8:0a:65:b8:c2:53:4d:00:81:ae:2b:ce:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:15 2026 GMT
            Not After : Jan 11 15:22:15 2027 GMT
        Subject: CN=B3BE2DE21B6BCD20A8C0FF1D32E069FECB83F6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:f5:1a:08:f9:f3:09:50:03:d1:a1:a9:b3:
                    4e:3c:f7:06:f5:46:6d:e0:15:3f:9e:7e:52:c0:51:
                    15:26:79:d1:ff:9a:ae:e0:23:c0:7b:c1:12:f6:b0:
                    3b:54:5b:c9:ef:e5:09:fc:ed:dc:a8:77:9b:86:20:
                    5a:6a:9f:69:21:3d:5f:ff:25:80:44:d1:45:5c:d2:
                    f2:0e:11:68:46:06:87:49:a4:52:ab:cf:61:ae:16:
                    f9:0f:9f:b9:ec:f3:9f:6f:9b:ac:33:06:fd:56:d2:
                    96:aa:49:a4:e6:33:20:28:96:de:cb:78:a0:f5:8e:
                    e3:99:93:ce:dd:90:f4:59:9c:d0:97:17:ec:dc:3f:
                    18:55:ec:aa:0d:f0:44:27:6d:65:d2:fc:fb:e1:3c:
                    55:42:9a:cc:48:45:ae:0f:96:8f:43:47:d5:35:5c:
                    9e:d8:fe:00:c4:45:a3:c3:c4:90:61:9f:cd:9c:94:
                    c4:ed:54:41:bc:d1:8a:eb:da:1b:9f:98:9d:48:77:
                    59:89:5f:bd:de:28:da:2e:96:ee:3a:93:26:3c:0a:
                    44:0b:7a:27:d7:98:6d:73:97:ea:3b:a9:50:44:7f:
                    24:bb:e0:fc:d2:bc:bf:05:db:91:76:58:15:01:89:
                    18:7e:60:0e:f8:ff:b2:ab:b9:f0:56:00:48:d6:fc:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:2D:E2:1B:6B:CD:20:A8:C0:FF:1D:32:E0:69:FE:CB:83:F6:A7
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3132382e302f32312d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:2e:f9:ac:31:8e:b7:6e:c2:2b:ee:20:8a:7d:0c:4a:88:
         f3:48:17:de:df:75:da:b8:34:d8:67:6e:92:19:30:ee:b3:ce:
         9b:6e:b7:ab:8a:15:68:df:db:4c:d3:08:fa:13:2a:68:48:d5:
         69:5d:19:6f:9e:19:72:0b:70:4f:4c:0b:4a:c2:36:e0:77:df:
         2f:db:4b:be:66:2f:be:1b:24:c8:a5:87:fe:8c:86:a3:ed:af:
         f7:34:83:aa:ee:cd:99:02:70:83:df:6a:6d:16:3c:3d:13:c4:
         7f:db:fa:07:8e:ce:d3:ca:bc:2a:4c:de:f6:71:82:3f:19:f6:
         d3:73:c7:67:9a:89:f5:76:78:eb:22:3a:e4:01:a2:48:a6:15:
         f8:00:87:d8:9e:b2:00:98:0d:40:85:f3:ad:6d:78:89:02:9c:
         f1:a7:f2:26:92:81:a3:68:7c:44:56:31:4b:fa:91:3b:17:fe:
         69:db:2e:7a:6e:6d:6a:a0:cd:b4:b2:92:d0:2b:11:d3:80:70:
         c3:9a:d4:4c:87:dd:36:28:ad:46:8d:45:c7:ea:d6:39:d0:92:
         88:17:40:3d:41:70:04:13:2b:ba:77:a8:54:d6:cb:09:29:42:
         96:2f:43:a3:7d:0b:2a:31:30:9d:a7:e5:73:55:71:3b:7f:69:
         3a:93:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:08 2026 by rpki-client