Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa
File:                     3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa (raw, json)
Hash identifier:          E/6hHFlIIgaxFy93/LzJ7uIeNAbjKa0yLsARMcZK1Q0=
Subject key identifier:   A9:F4:07:D1:3D:B4:0C:8E:D1:31:73:1F:8C:6F:C1:80:6A:A7:C1:ED
Certificate issuer:       /CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
Certificate serial:       27920B6B74DB9E3778A7C347F61F9BF447A9037D
Authority key identifier: 08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa
Signing time:             Thu 05 Feb 2026 16:30:16 +0000
ROA not before:           Thu 05 Feb 2026 16:25:16 +0000
ROA not after:            Thu 04 Feb 2027 16:30:16 +0000
asID:                     263666
IP address blocks:        191.241.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl
                          rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:92:0b:6b:74:db:9e:37:78:a7:c3:47:f6:1f:9b:f4:47:a9:03:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
        Validity
            Not Before: Feb  5 16:25:16 2026 GMT
            Not After : Feb  4 16:30:16 2027 GMT
        Subject: CN=A9F407D13DB40C8ED131731F8C6FC1806AA7C1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:d9:a2:ef:d5:6a:98:72:5d:af:b8:1c:4a:
                    84:c1:7d:a7:a8:08:08:6e:7b:01:a4:74:54:5e:81:
                    a1:d8:8d:80:f5:85:06:b5:29:dd:39:c7:37:9a:95:
                    be:2c:ee:98:33:4d:e3:ba:58:87:da:95:77:7e:e5:
                    41:b1:1e:fe:29:1f:12:80:0d:5f:db:1f:4d:e6:7a:
                    a1:47:fc:da:41:88:43:93:d5:c4:62:14:58:45:b2:
                    d9:9f:2c:9f:10:b3:89:7e:df:02:29:75:2b:6e:e6:
                    62:3c:57:03:5a:02:41:d9:87:c7:4f:27:f8:5e:28:
                    a3:b7:4c:f9:a2:c5:6e:d3:c9:43:8c:68:cf:f5:6f:
                    6c:32:c5:22:6a:27:c1:b6:78:8f:ba:bd:5f:2d:a4:
                    a5:97:21:2c:bb:ff:95:6f:57:9e:62:32:c3:3d:5f:
                    54:1d:bf:1d:a3:07:f8:50:44:fb:18:be:aa:6f:bd:
                    d2:ba:80:a4:a9:f4:03:63:7a:b5:c7:2d:89:52:7d:
                    7a:4a:c9:08:cf:d0:25:fa:a5:90:f0:47:39:80:a7:
                    92:05:74:9e:36:cc:d8:7b:ce:ab:15:53:b3:b0:ef:
                    7d:3b:9d:c8:64:a1:5f:cd:29:7b:3c:86:c2:c2:69:
                    59:83:b3:de:6d:c0:41:98:f6:6b:14:3f:18:da:9b:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F4:07:D1:3D:B4:0C:8E:D1:31:73:1F:8C:6F:C1:80:6A:A7:C1:ED
            X509v3 Authority Key Identifier:
                keyid:08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:97:c3:72:69:c7:9b:19:f3:fb:3d:6a:74:3e:24:2f:24:19:
         35:01:e8:38:53:08:39:76:6c:66:66:60:1a:31:7b:59:54:7b:
         af:71:e8:6b:c2:30:fc:a1:88:06:69:6f:48:f5:99:64:fb:40:
         b9:0f:de:87:97:c0:65:49:a4:2d:31:16:b1:9a:82:0d:91:e0:
         9b:77:dc:20:65:e0:59:07:0e:8e:e5:b7:c9:6e:9d:af:b1:fb:
         3a:ae:4c:b4:96:63:f3:86:de:f2:d7:b3:6b:82:8b:ac:02:a3:
         f3:39:3a:f2:44:08:f6:a7:57:d7:3a:fa:6d:ea:a5:6f:01:68:
         4a:76:6c:4a:9f:99:20:e7:c6:28:43:ad:8a:27:8d:e3:66:32:
         ee:7d:d2:1b:b8:f0:55:91:8c:7b:09:96:32:10:46:1b:97:11:
         b9:c2:0b:f4:82:67:39:06:97:5b:c0:7a:d5:8a:46:e2:5e:8f:
         be:c9:16:dd:52:79:a9:d8:49:13:89:bd:35:79:da:d8:b8:ec:
         a2:fa:5c:12:eb:f8:d8:c0:23:51:f2:44:ac:0c:87:b6:b3:d1:
         78:08:4f:06:71:61:fd:f2:64:4e:14:63:c5:cc:91:27:dc:95:
         4a:5a:6d:8d:09:c6:77:f4:7a:b4:65:e4:95:a6:c8:0d:60:28:
         3a:d3:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:46:38 2026 by rpki-client