Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3133362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          DqXpCjMfuWpalLkQUaY4ZNar2/pQUnfAEOIQWSRAMNc=
Subject key identifier:   5E:1E:2F:01:F1:5E:CF:D8:3A:2C:B2:16:EB:B7:CF:ED:EF:B2:77:C2
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       030981AEC96344E4D2D3455A9AA2474B4497707C
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:16 +0000
ROA not before:           Mon 12 Jan 2026 15:17:16 +0000
ROA not after:            Mon 11 Jan 2027 15:22:16 +0000
asID:                     28349
IP address blocks:        189.51.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:81:ae:c9:63:44:e4:d2:d3:45:5a:9a:a2:47:4b:44:97:70:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:16 2026 GMT
            Not After : Jan 11 15:22:16 2027 GMT
        Subject: CN=5E1E2F01F15ECFD83A2CB216EBB7CFEDEFB277C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:3e:99:0b:ac:31:ee:c3:d9:72:1f:20:81:
                    62:c3:b5:ac:19:c5:1c:db:20:e5:89:0e:9f:5c:1e:
                    39:37:95:c2:19:95:ca:64:84:52:62:ff:8d:32:f5:
                    da:24:8d:e6:14:ff:b3:f2:5e:4c:ba:c5:7a:07:b1:
                    65:f6:20:eb:14:af:86:83:7a:83:32:6e:1e:55:80:
                    d0:5a:0d:90:fa:42:da:dd:e5:2b:36:2f:57:f7:94:
                    87:17:32:18:79:fc:5b:3c:5d:ac:8b:8f:ff:09:3f:
                    26:6a:9b:6e:9c:da:f5:1d:29:c9:9d:33:c7:ef:47:
                    18:88:d6:35:0f:32:23:4e:fd:1d:ce:24:9a:f5:6f:
                    f1:09:15:d3:0d:bc:52:d8:a6:9e:16:12:8c:d3:c8:
                    30:25:98:d4:f4:5c:16:0b:df:29:ba:0a:7c:23:65:
                    35:92:81:cc:38:4c:8f:ae:86:72:35:e2:7f:ac:02:
                    69:5b:0f:98:80:af:23:05:14:48:5d:1c:bb:fe:9c:
                    68:1c:8d:e3:87:3b:89:fa:5f:39:c3:6f:56:ae:a4:
                    48:20:9b:2b:ac:18:9a:24:f3:40:e3:50:87:95:75:
                    31:01:46:0e:52:47:18:60:fb:25:02:67:e4:7a:17:
                    e2:38:30:91:d0:5c:6f:38:96:4b:27:a9:e9:1a:82:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1E:2F:01:F1:5E:CF:D8:3A:2C:B2:16:EB:B7:CF:ED:EF:B2:77:C2
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:99:5a:b9:b0:35:bf:cf:e5:6b:06:ea:9f:28:ae:de:c2:c0:
         24:42:31:8b:b4:b8:32:4d:66:ca:57:15:5a:47:e3:49:2b:ce:
         8f:02:2c:49:62:0f:49:01:06:c6:93:15:5e:91:9a:7f:d3:07:
         af:a0:7b:83:66:2e:66:bb:71:bb:ad:89:47:43:5a:f8:8e:f2:
         4f:f7:65:df:9e:f5:1e:83:06:a9:23:ab:6a:e6:13:31:37:6b:
         34:87:36:ab:71:78:e9:c3:e8:b7:02:e7:8d:64:3c:69:d8:81:
         21:a5:6b:d7:ba:ec:a5:3c:e9:b1:b3:5d:fc:71:b5:99:3e:42:
         6e:d0:6f:e7:f7:82:f1:d9:3d:87:f6:1e:4f:59:84:65:d8:1f:
         7d:27:d6:0a:e8:04:fd:91:1d:06:c6:4c:e0:1c:c2:e2:f0:68:
         57:30:01:f2:04:98:d1:47:d2:d0:8b:1a:9d:11:27:54:c4:c6:
         2e:69:1d:5c:60:18:92:fb:e8:89:26:41:d3:fa:16:cb:cf:5d:
         0f:4f:3e:f5:09:53:e6:33:b7:45:9a:d0:14:33:61:7c:e1:f0:
         ae:d0:34:a7:58:0d:9b:50:b8:52:53:f9:df:d3:07:0e:bd:2e:
         c5:79:8d:4e:09:05:b2:14:9e:46:49:a5:ed:a0:68:d1:c3:25:
         47:76:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:24:29 2026 by rpki-client