Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3135362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          ML5Alxy7OuNlLOVCwlXPOgXjBiuAMTHDYJuTfVLH4pQ=
Subject key identifier:   23:D1:98:66:96:5E:BB:D8:2F:AA:9C:11:FE:68:B0:EC:84:E0:BB:4C
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       51F073442C94CD4C8F3776F8795ABB24EF6A4E13
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 12 Jan 2026 15:22:16 +0000
ROA not before:           Mon 12 Jan 2026 15:17:16 +0000
ROA not after:            Mon 11 Jan 2027 15:22:16 +0000
asID:                     28349
IP address blocks:        189.51.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f0:73:44:2c:94:cd:4c:8f:37:76:f8:79:5a:bb:24:ef:6a:4e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Jan 12 15:17:16 2026 GMT
            Not After : Jan 11 15:22:16 2027 GMT
        Subject: CN=23D19866965EBBD82FAA9C11FE68B0EC84E0BB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:9a:89:e5:f3:4a:d5:37:30:03:b1:7a:79:
                    69:21:fe:23:27:87:7b:3e:b6:fd:9a:1f:f2:52:da:
                    a0:99:f5:9a:7e:b7:76:6d:d8:66:2b:2c:2c:d9:0e:
                    7c:77:e4:ce:5c:e5:6b:60:07:e4:5c:7e:b0:f7:6c:
                    ca:6d:c3:23:14:84:3b:df:c3:6d:b0:1a:84:80:76:
                    49:d3:da:6e:e5:1c:69:2c:79:34:b2:17:21:92:38:
                    12:48:eb:17:4d:95:f7:05:56:f5:97:30:09:2f:38:
                    84:b5:78:b1:c6:89:d1:8d:33:ea:df:92:e2:d0:3f:
                    aa:bf:53:45:ca:26:aa:45:ef:12:e0:1d:fd:0e:62:
                    c9:ef:da:60:f3:b0:73:b2:c5:3d:46:40:cf:11:89:
                    95:6b:5f:cb:ef:5c:cd:68:91:e6:96:85:53:6e:ac:
                    c3:dc:b5:75:97:85:c5:2d:42:cd:84:c2:ee:38:6b:
                    a3:fc:64:f9:d6:36:20:38:00:06:10:a4:72:d4:32:
                    f4:47:b2:fa:4b:d4:d7:bc:50:7e:92:5b:9b:af:03:
                    64:b5:3c:6a:65:3a:eb:4e:0b:0e:51:4d:b5:52:18:
                    b5:b2:70:bf:aa:e5:2b:71:58:8a:7b:6e:ac:4e:5e:
                    9d:45:d1:82:f6:bd:96:bd:1b:b1:a1:0e:64:aa:4b:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:98:66:96:5E:BB:D8:2F:AA:9C:11:FE:68:B0:EC:84:E0:BB:4C
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3135362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:8e:9d:30:e5:d8:67:53:99:70:89:46:aa:f0:46:5a:db:
         e3:b2:18:3d:f2:ca:bd:96:d6:c1:f4:16:29:d1:88:6b:84:8d:
         4a:6d:ca:59:c0:56:28:bc:81:d2:b2:2b:f7:52:1a:38:9d:a9:
         6b:52:b4:6d:a7:b3:08:09:21:17:f9:8d:6c:1d:cf:10:eb:dd:
         ab:5c:53:ec:e3:93:6d:1c:e4:87:02:02:78:0f:5f:de:09:31:
         a3:c4:c5:c1:a3:71:66:ee:32:cf:3f:74:ee:28:ca:f1:76:7e:
         5d:d6:d8:6d:05:e7:b8:82:43:46:ca:37:e8:3b:48:72:0b:e0:
         90:d0:08:0a:f5:6a:e5:ef:d3:2e:52:ad:97:8a:27:5c:92:4d:
         8e:d8:e1:12:ca:56:03:21:61:41:48:f7:20:4c:5b:00:be:3e:
         fe:fa:b9:27:1e:9e:7e:af:a1:f4:63:aa:6b:91:8a:61:08:43:
         c3:22:68:7e:01:2f:12:cc:02:0e:24:d3:6d:0f:8e:6d:4e:0f:
         c6:17:f8:f1:e7:f3:5d:e5:d8:e0:d8:2a:9f:ed:99:3a:a0:db:
         77:d3:50:b4:7b:be:25:5e:ac:6e:73:55:d6:5b:f3:a7:2b:e6:
         30:67:39:34:74:44:49:0d:f7:27:66:4b:ae:1a:31:0a:dd:9d:
         77:2c:18:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUfBzRCyUzUyPN3b4eVq7JO9qThMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUxRkE4QzBFODA0QjRDRkM4REQxRTA1M0MyNDU0ODFF
RDBGNjZDMjAeFw0yNjAxMTIxNTE3MTZaFw0yNzAxMTExNTIyMTZaMDMxMTAvBgNV
BAMTKDIzRDE5ODY2OTY1RUJCRDgyRkFBOUMxMUZFNjhCMEVDODRFMEJCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDj5qJ5fNK1TcwA7F6eWkh/iMn
h3s+tv2aH/JS2qCZ9Zp+t3Zt2GYrLCzZDnx35M5c5WtgB+RcfrD3bMptwyMUhDvf
w22wGoSAdknT2m7lHGkseTSyFyGSOBJI6xdNlfcFVvWXMAkvOIS1eLHGidGNM+rf
kuLQP6q/U0XKJqpF7xLgHf0OYsnv2mDzsHOyxT1GQM8RiZVrX8vvXM1okeaWhVNu
rMPctXWXhcUtQs2Ewu44a6P8ZPnWNiA4AAYQpHLUMvRHsvpL1Ne8UH6SW5uvA2S1
PGplOutOCw5RTbVSGLWycL+q5StxWIp7bqxOXp1F0YL2vZa9G7GhDmSqS+fXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUI9GYZpZeu9gvqpwR/miw7ITgu0wwHwYDVR0j
BBgwFoAUpR+owOgEtM/I3R4FPCRUge0PZsIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC9BNTFGQThDMEU4MDRCNENGQzhERDFFMDUzQzI0NTQ4MUVEMEY2NkMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MUZBOEMwRTgwNEI0Q0ZD
OEREMUUwNTNDMjQ1NDgxRUQwRjY2QzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzNTMxMmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTOcMA0GCSqGSIb3DQEBCwUAA4IBAQCxio6dMOXY
Z1OZcIlGqvBGWtvjshg98sq9ltbB9BYp0YhrhI1KbcpZwFYovIHSsiv3Uho4nalr
UrRtp7MICSEX+Y1sHc8Q692rXFPs45NtHOSHAgJ4D1/eCTGjxMXBo3Fm7jLPP3Tu
KMrxdn5d1thtBee4gkNGyjfoO0hyC+CQ0AgK9Wrl79MuUq2Xiidckk2O2OESylYD
IWFBSPcgTFsAvj7++rknHp5+r6H0Y6prkYphCEPDImh+AS8SzAIOJNNtD45tTg/G
F/jx5/Nd5djg2Cqf7Zk6oNt301C0e74lXqxuc1XWW/OnK+YwZzk0dERJDfcnZkuu
GjEK3Z13LBix
-----END CERTIFICATE-----
Generated at Thu Feb 19 07:23:14 2026 by rpki-client