Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3134302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          9nHAt5LDIk3GfKAS3kL+ZyhmFSPYZOJzQ/qYkBrofnE=
Subject key identifier:   07:36:C3:AE:A9:D8:7A:42:DF:7D:63:3E:0B:1B:94:64:23:A5:80:22
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       13F98AC22837AADD7A9D299A0044389AEFB44B3D
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:13 +0000
ROA not before:           Mon 12 Jan 2026 15:17:13 +0000
ROA not after:            Mon 11 Jan 2027 15:22:13 +0000
asID:                     28349
IP address blocks:        189.51.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f9:8a:c2:28:37:aa:dd:7a:9d:29:9a:00:44:38:9a:ef:b4:4b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:13 2026 GMT
            Not After : Jan 11 15:22:13 2027 GMT
        Subject: CN=0736C3AEA9D87A42DF7D633E0B1B946423A58022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:91:46:64:21:3f:bc:17:3a:6f:28:bd:b6:a9:
                    67:ef:23:e4:1c:6f:74:42:d5:95:7a:b2:7a:c1:ed:
                    9a:51:22:e7:c4:ee:e8:b3:19:bd:4d:de:ac:e8:5b:
                    8f:10:97:d9:37:a3:d2:73:3c:51:50:03:7c:25:66:
                    ee:d5:a9:cb:d0:8c:ab:5c:8a:a2:4f:68:f0:78:71:
                    35:95:61:74:d3:bd:d3:fe:c7:d2:2e:8a:a7:fe:65:
                    98:5a:d9:d8:8f:dd:e0:42:f0:9a:ac:4f:0a:de:a0:
                    96:65:42:0c:ec:38:a1:96:60:d4:37:07:dc:e5:10:
                    34:87:d8:ac:f9:2e:04:ab:b1:6b:45:a2:77:47:b4:
                    e8:77:a9:11:0c:aa:4e:b2:a3:cc:1e:d3:dc:0e:b1:
                    c4:27:e6:7c:3f:d7:c2:68:a7:81:64:c6:41:7f:e1:
                    cb:51:85:69:31:eb:af:dc:b2:af:55:a5:55:c3:75:
                    4c:82:0e:43:43:b8:3d:61:c8:74:04:8d:ac:0d:45:
                    37:39:e2:06:69:9a:3d:67:89:c9:8c:d2:04:46:44:
                    ca:23:c9:72:fe:8a:9d:fc:c2:84:b7:83:aa:57:01:
                    1f:b4:5e:96:cd:87:7a:79:20:6a:47:4a:2b:9d:2a:
                    9a:f5:e2:08:1d:d5:b3:4a:aa:4d:e2:0b:fe:5a:d5:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:C3:AE:A9:D8:7A:42:DF:7D:63:3E:0B:1B:94:64:23:A5:80:22
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3134302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:c1:35:b4:6c:5c:ac:a5:8f:18:54:7e:8f:0f:a1:d7:f3:
         79:2e:e6:44:ee:0f:28:8a:f4:32:a2:9b:0d:2c:22:2d:f5:79:
         57:53:53:54:62:bd:2d:f3:16:f6:69:53:cd:12:91:8d:34:be:
         fc:33:5b:11:a0:12:4f:2b:0f:39:61:33:fd:5d:07:91:01:16:
         7c:d0:fe:fc:fd:38:1b:3b:e8:c5:74:f3:d1:ad:e7:62:f2:d0:
         0d:43:e5:56:1f:a9:c3:29:5e:96:8c:57:04:aa:12:5e:1f:f8:
         f4:90:d8:26:77:e4:21:a2:4b:8c:0e:8c:8d:b9:f3:3d:8d:c6:
         0f:91:4b:b6:ea:d8:e5:d7:88:f2:e7:f8:ca:18:e6:63:c2:75:
         7b:b4:4d:75:35:21:91:25:31:44:68:8a:0b:ad:ff:4d:74:47:
         e6:89:4e:37:33:bc:54:50:c1:17:55:f4:00:54:42:e5:d0:93:
         8e:8c:82:60:95:77:d3:14:25:cd:4c:cf:a4:fc:c8:5f:30:ba:
         eb:4b:34:6d:5d:ba:c0:52:19:d5:e9:1b:db:ea:b8:89:8f:93:
         7b:1a:2c:cf:83:51:00:fb:54:f9:22:e8:74:36:d4:c8:14:5f:
         aa:6a:57:45:c9:5c:01:db:45:9f:65:5b:6b:f5:71:1e:a1:27:
         1d:89:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:40:06 2026 by rpki-client