Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135322e302f32322d3234203d3e20323637343834.roa
File:                     3138392e35312e3135322e302f32322d3234203d3e20323637343834.roa (raw, json)
Hash identifier:          W+xT126y7u585QRMd3jnPwtI1F/sz34xpmaC6NqlGig=
Subject key identifier:   BF:75:D4:3B:CC:1D:84:99:6F:9C:8D:0A:D6:BE:B9:1D:F1:42:E2:8A
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       1F6134DCEED89624366FA141B071197A607F884A
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135322e302f32322d3234203d3e20323637343834.roa
Signing time:             Mon 12 Jan 2026 15:22:14 +0000
ROA not before:           Mon 12 Jan 2026 15:17:14 +0000
ROA not after:            Mon 11 Jan 2027 15:22:14 +0000
asID:                     267484
IP address blocks:        189.51.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:61:34:dc:ee:d8:96:24:36:6f:a1:41:b0:71:19:7a:60:7f:88:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:14 2026 GMT
            Not After : Jan 11 15:22:14 2027 GMT
        Subject: CN=BF75D43BCC1D84996F9C8D0AD6BEB91DF142E28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bc:a5:cd:b9:8b:3a:b3:5f:04:5f:e8:7a:39:
                    18:6d:75:95:2b:de:bf:ef:bd:24:68:36:ea:f5:83:
                    1b:ca:7b:b8:94:3f:b7:05:17:f9:00:99:49:8b:89:
                    b7:49:a4:d7:dc:c0:ef:eb:eb:8c:68:04:9f:85:8c:
                    4c:01:2a:7d:f2:09:7f:16:72:4d:10:8f:84:f5:f5:
                    ce:46:db:f0:15:4f:b8:cf:c9:3f:d6:7a:4f:22:5f:
                    96:7f:57:e0:cd:45:63:0c:ea:82:63:7e:6f:71:51:
                    5b:14:12:0b:c0:4b:e5:24:d9:4f:4a:cc:3d:b3:cc:
                    11:8c:ea:86:b6:f0:0c:53:f0:fe:84:c7:bc:81:e4:
                    67:e4:cb:a5:44:27:ef:3c:46:04:27:94:47:f0:18:
                    ba:77:7d:7a:8e:c1:a3:52:53:ab:53:f3:53:7b:96:
                    5d:e8:e0:d4:6c:d4:d0:a6:e4:f5:a4:af:7d:5f:a9:
                    b5:8e:83:b7:ee:0c:54:c4:ae:af:48:0c:a1:71:58:
                    ee:aa:7c:98:21:c4:2c:0d:63:a7:c7:bf:f7:95:9f:
                    19:05:46:92:47:d9:58:0e:99:e0:2f:99:9c:8b:c8:
                    c2:af:a7:b0:c1:06:39:7f:ae:02:d7:ef:22:c7:42:
                    cf:cf:81:0a:61:1b:e8:a7:dc:2b:25:33:37:7c:3f:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:D4:3B:CC:1D:84:99:6F:9C:8D:0A:D6:BE:B9:1D:F1:42:E2:8A
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135322e302f32322d3234203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:56:42:dc:73:ad:2f:1e:9b:31:d7:fa:5e:b1:53:e6:db:
         35:a2:6f:c0:10:fc:dd:09:ea:f4:8b:79:8d:f0:f3:33:66:f4:
         45:56:d5:a4:d2:79:14:e8:66:41:60:03:88:2e:c8:bd:d2:2c:
         ff:57:30:2b:cb:67:56:27:c4:d2:f8:66:5c:e8:7f:05:6f:b6:
         f1:3f:1c:09:36:a3:f8:68:57:8d:34:bf:9b:eb:80:90:49:02:
         a0:ec:5d:9f:d0:ea:f5:85:06:b5:d5:2a:6f:cc:94:72:7c:1f:
         e9:b3:95:fe:bd:15:5e:ec:9d:0e:43:f1:d0:08:e8:33:67:fd:
         de:90:4e:31:4c:64:d1:17:d2:2e:73:65:ab:15:b2:27:bc:85:
         7f:6c:43:2a:1d:26:e6:ce:b6:d6:71:2b:3b:f5:b1:bf:64:0c:
         90:71:cd:7e:a1:86:6f:9f:5a:ae:ae:ce:bd:42:b8:8d:64:23:
         25:2c:69:7f:fc:c0:fd:0f:06:d0:88:7c:23:3d:b4:1f:37:e5:
         9e:06:da:05:59:f9:ac:c3:ea:0f:a3:6f:bb:bc:96:44:4f:7a:
         da:d9:c1:d1:e4:65:48:86:d7:3f:44:6c:e0:c4:4c:ba:16:e9:
         eb:5c:cb:44:de:93:55:27:13:d7:45:56:93:e7:a2:e1:8f:27:
         74:13:40:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:37:41 2026 by rpki-client