Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3138392e35312e302e302f32302d3234203d3e203232313737.roa
File:                     3138392e35312e302e302f32302d3234203d3e203232313737.roa (raw, json)
Hash identifier:          MSpmwvI8koTCZN2TB/gPDH1aKqMHmW0jId9F7ZVss/M=
Subject key identifier:   A3:52:53:D5:FA:60:14:52:2F:72:C0:A9:6A:21:6A:2B:CA:9C:32:BC
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       37775E48410DB54EC15987D5668A14E6D3395530
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3138392e35312e302e302f32302d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:07 +0000
ROA not before:           Thu 05 Feb 2026 05:25:07 +0000
ROA not after:            Thu 04 Feb 2027 05:30:07 +0000
asID:                     22177
IP address blocks:        189.51.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:5e:48:41:0d:b5:4e:c1:59:87:d5:66:8a:14:e6:d3:39:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:07 2026 GMT
            Not After : Feb  4 05:30:07 2027 GMT
        Subject: CN=A35253D5FA6014522F72C0A96A216A2BCA9C32BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:10:44:64:a7:21:10:77:93:53:24:4d:eb:
                    14:b2:f2:14:b8:69:ff:a4:7c:13:38:f6:46:eb:9c:
                    0f:0c:ec:0f:c3:91:14:13:25:e3:f5:94:c7:81:91:
                    6e:cb:e5:62:28:8e:c2:0f:e0:d4:c8:b4:28:84:eb:
                    3e:15:8e:f4:5f:c4:b0:00:c8:b5:9d:67:f0:c7:ec:
                    6a:9b:8e:e3:d9:5c:a9:b0:d1:95:28:0b:84:e2:51:
                    e9:c3:f6:56:bc:e6:a5:d0:5e:ab:44:46:ba:87:86:
                    65:d4:74:23:9d:ea:d7:00:3b:fe:3d:da:6a:87:e6:
                    cb:44:e7:e1:3b:f6:59:dc:be:70:fe:ec:47:5f:5f:
                    01:12:35:c7:53:c5:57:c1:ab:cb:91:5e:52:98:ee:
                    b8:24:5c:42:2c:5c:5a:57:b3:76:df:a0:fa:8e:e6:
                    29:bb:b9:b3:67:ab:e5:ac:bc:49:e4:d4:af:ce:d7:
                    f7:b9:50:5b:4d:b8:22:49:a0:5c:8d:0d:ca:01:29:
                    36:b2:45:35:13:f8:9f:5d:b4:6d:4e:6d:ef:97:4b:
                    ac:43:5f:ff:76:5f:25:92:a1:9a:a1:f6:e1:9f:12:
                    60:a3:57:50:9f:89:c3:d6:45:de:61:63:94:84:a9:
                    4a:ac:5a:92:a5:4a:b4:ec:19:42:42:87:16:d7:7b:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:53:D5:FA:60:14:52:2F:72:C0:A9:6A:21:6A:2B:CA:9C:32:BC
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3138392e35312e302e302f32302d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:f4:0e:e0:6f:64:a7:83:86:44:26:05:6c:b1:f5:d7:9a:
         6c:80:a7:d8:a0:12:37:07:2f:cd:f5:fa:32:04:44:80:fb:19:
         9b:9b:d2:8f:39:5a:99:ee:9b:ef:4d:8b:ce:df:e1:8c:c9:9e:
         95:0e:2c:56:51:3d:5b:87:b2:fd:68:e0:fa:32:76:27:5e:85:
         b3:42:41:7b:33:43:d5:e7:77:45:56:95:d0:cd:5a:e1:60:c4:
         56:de:cc:9e:4e:dd:db:92:5e:a3:8d:de:b1:e7:8d:f3:36:a7:
         47:f9:11:d3:7e:b5:0c:9f:ac:21:83:b3:95:7d:a0:04:3d:ce:
         8c:1b:c2:d5:fe:f0:18:06:ca:17:7a:21:8b:47:31:e2:1d:05:
         07:e0:32:b9:c1:25:f0:b9:0a:79:0e:3d:c8:40:a2:be:1b:74:
         f9:f5:36:09:9a:99:93:63:2b:14:e1:ba:ef:91:4d:2a:8f:34:
         ad:d3:0b:7f:7b:f6:7a:1b:bf:4f:93:bd:ad:84:0a:15:06:83:
         5d:0a:16:f6:b9:04:75:53:eb:8e:8f:6c:44:cd:88:b1:bd:c2:
         6e:53:25:94:c1:86:f0:c4:76:db:52:f4:13:73:c6:41:92:dc:
         18:65:6f:92:fc:ee:12:60:b4:4f:0e:75:1d:ea:a5:8e:b5:6a:
         8d:c1:60:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:38 2026 by rpki-client