Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
File:                     3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa (raw, json)
Hash identifier:          oJ69g6TXNgwcHL8cuQIAh4IsQa7UgPzvJVeZvMZIfGM=
Subject key identifier:   4E:C0:52:DF:60:55:82:11:36:87:E8:AE:28:BF:69:CF:9B:B2:80:5A
Certificate issuer:       /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial:       3BB8B2111526BD2AECC3FFDBBB63BFBE27A34F91
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     270836
IP address blocks:        189.14.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
                          rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 12:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b8:b2:11:15:26:bd:2a:ec:c3:ff:db:bb:63:bf:be:27:a3:4f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject: CN=4EC052DF605582113687E8AE28BF69CF9BB2805A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:98:0c:ed:5a:c9:16:7e:d3:32:d1:34:15:
                    0f:cb:b4:88:08:7d:0b:a5:16:eb:b8:a8:98:bd:ae:
                    01:83:fd:3e:ff:5f:3d:ba:42:69:0f:81:6a:fc:90:
                    ad:f8:df:c4:e9:b8:00:28:af:41:3b:08:f5:e8:3a:
                    dc:db:32:c0:7d:93:c1:0f:07:90:f3:7c:a0:50:c6:
                    17:f1:68:13:44:e0:70:22:72:f4:2e:42:48:2a:53:
                    c6:ff:b3:8c:24:3e:a1:78:0a:b4:2b:e3:68:1a:a6:
                    c5:bc:d2:0d:dc:e6:00:c3:33:03:d1:cb:c9:60:7b:
                    b2:ea:c2:e8:fa:56:cb:72:9a:c9:03:06:93:8a:56:
                    a6:61:97:d8:cb:2f:70:70:25:24:94:ff:79:cd:1e:
                    d9:17:21:a7:f6:d5:31:ad:e2:c9:14:c5:0e:80:51:
                    bb:2e:28:b0:22:da:c9:c9:c9:c9:d0:b9:ef:3e:53:
                    60:d5:0e:63:0c:d3:b8:66:7b:35:ee:af:e0:fd:6c:
                    9b:50:17:12:96:c3:b4:07:62:0d:2e:fc:01:63:0a:
                    6a:f4:0f:5e:fe:c1:f9:9a:8c:43:5a:7b:a4:14:32:
                    70:a7:10:4b:09:aa:78:b3:8b:2a:5d:66:cf:90:fd:
                    1f:5d:1f:78:65:00:9a:dd:fc:80:c7:ea:b1:bc:1c:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C0:52:DF:60:55:82:11:36:87:E8:AE:28:BF:69:CF:9B:B2:80:5A
            X509v3 Authority Key Identifier:
                keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/3138392e31342e3131342e302f32342d3234203d3e20323730383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:02:7b:71:82:dc:12:4b:94:e9:bd:3d:61:d9:32:6e:bb:
         97:fd:35:f1:5e:2a:09:f2:a4:ac:85:bb:73:8d:cb:cc:e5:65:
         96:43:78:c6:68:1a:2b:cb:ae:fd:29:da:c4:5d:b4:a6:ca:57:
         dd:91:70:70:44:91:64:ba:35:31:63:19:4e:79:91:3f:6b:f0:
         49:48:54:0e:ce:46:76:95:56:e5:14:f9:5b:e0:dc:43:e9:28:
         62:f6:ff:16:8d:70:4b:e3:38:fa:22:12:61:52:ad:bc:95:96:
         0d:8a:1a:be:2a:f0:5d:87:af:ad:bb:86:20:bc:5f:a5:ec:ba:
         c0:0c:5b:60:e1:38:eb:19:88:f0:9e:9c:80:e9:f4:43:1f:40:
         7d:31:ad:28:e0:ea:22:81:31:27:0b:57:44:a1:94:74:56:7c:
         c1:80:22:e7:d5:c1:c9:62:c1:79:3b:19:f0:c3:70:69:51:8f:
         7b:6c:0f:8e:80:37:dc:1e:9c:52:2c:cf:76:94:e4:ce:05:58:
         10:4a:2a:31:6b:ba:8e:78:93:7b:9b:23:4e:0f:f7:72:0e:10:
         74:ee:4a:c1:7d:4b:eb:e1:e7:18:d7:c6:36:16:24:41:34:1a:
         49:64:9d:50:b0:8e:8b:26:6d:28:ae:43:ce:ae:11:85:c9:db:
         69:d4:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:19:59 2026 by rpki-client