Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa
File:                     3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa (raw, json)
Hash identifier:          30hFBOfQ8KHqmEyyawXkJ+Lg5E/4BZQ6Mv7z1yesxcM=
Subject key identifier:   27:1D:F5:E8:C1:46:2C:E7:44:9F:16:23:B5:66:40:E5:AA:BB:C1:75
Certificate issuer:       /CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
Certificate serial:       5A08520AB33625AAAA5B87170D1A380E10B42A
Authority key identifier: C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa
Signing time:             Sat 07 Feb 2026 23:15:00 +0000
ROA not before:           Sat 07 Feb 2026 23:10:00 +0000
ROA not after:            Sat 06 Feb 2027 23:15:00 +0000
asID:                     270414
IP address blocks:        190.89.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl
                          rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:08:52:0a:b3:36:25:aa:aa:5b:87:17:0d:1a:38:0e:10:b4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95BCD8741F1697313471305FEAAAF3DA02061D6
        Validity
            Not Before: Feb  7 23:10:00 2026 GMT
            Not After : Feb  6 23:15:00 2027 GMT
        Subject: CN=271DF5E8C1462CE7449F1623B56640E5AABBC175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:e5:c6:02:8d:04:27:3a:26:34:2e:7a:81:
                    c4:45:16:cf:56:4f:1d:92:b0:5f:ce:94:a6:43:e6:
                    af:0e:48:70:b2:a2:e8:5a:bb:7a:a5:5b:8b:93:c7:
                    e6:41:65:da:c8:e7:36:24:a7:d2:6e:45:21:9a:91:
                    29:df:dd:89:0c:ee:25:44:de:1d:02:94:41:43:d0:
                    4e:07:54:ec:d4:dc:17:4f:10:41:4f:c9:55:a8:cc:
                    3d:b5:60:5a:c0:69:d9:be:87:e9:5c:a9:1c:f3:12:
                    2a:06:b0:ad:bc:cd:cf:8d:a5:9f:49:3d:aa:b4:b6:
                    d1:7a:09:86:3d:2e:33:a7:c9:af:43:a3:6b:f7:01:
                    bd:69:13:4a:57:5b:cc:76:d7:d0:90:40:ac:5e:db:
                    c2:51:ab:01:08:64:38:9c:f4:2a:c1:20:63:c3:54:
                    48:7d:e5:21:fd:d6:b3:1e:c5:b5:a5:85:7d:bd:f2:
                    f7:90:62:ca:8b:0b:29:ca:73:01:7d:e3:71:84:d2:
                    18:e2:b9:4a:29:ff:3c:48:de:df:d7:5e:e0:9b:bc:
                    29:4f:63:68:4c:5b:da:bf:e3:f1:65:4a:6f:53:b9:
                    2e:d9:cd:e2:dc:f3:ec:d6:e0:31:e7:0a:64:5e:d5:
                    46:e7:40:63:21:a4:2b:a4:e6:d8:99:fc:17:5c:4f:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:F5:E8:C1:46:2C:E7:44:9F:16:23:B5:66:40:E5:AA:BB:C1:75
            X509v3 Authority Key Identifier:
                keyid:C9:5B:CD:87:41:F1:69:73:13:47:13:05:FE:AA:AF:3D:A0:20:61:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95BCD8741F1697313471305FEAAAF3DA02061D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C514coYEexrxv39oTKuNiJmKkE1Mhqyja9Ns3stH3x3C/1/3139302e38392e3235322e302f32322d3234203d3e20323730343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:41:2f:58:30:fc:b0:de:bd:1a:d6:a8:69:99:b6:2a:e9:45:
         43:39:79:5c:e9:c2:7c:7e:12:45:da:ab:98:77:a9:74:be:fd:
         dd:c2:11:ce:5f:05:8f:65:4d:7e:41:bd:13:61:38:c7:4a:d1:
         a7:30:d1:42:ca:c1:c1:61:79:00:0c:16:c9:3d:ea:dc:bd:29:
         e2:f4:99:06:07:4d:75:c9:a3:82:f4:e0:16:65:02:a6:ea:3f:
         39:48:4e:96:58:d0:91:e6:df:d7:a8:eb:8b:48:e5:c9:1e:e1:
         c0:b4:1b:8d:4e:d8:66:7c:1f:70:57:c8:db:2f:1f:4c:36:6f:
         08:a0:04:fc:e8:cf:bc:52:f0:9b:1f:72:8e:e7:60:f6:cc:19:
         e0:3e:61:a3:83:fe:eb:7f:7a:f6:14:17:6a:cf:4a:af:cb:d7:
         7f:d2:e9:fa:6f:fe:18:25:53:48:a8:ae:20:77:ee:bb:1c:fd:
         4f:71:21:13:20:43:19:0a:b9:a0:a4:cf:80:04:7f:c9:05:40:
         13:da:d8:81:e7:2f:a6:c1:e0:17:18:42:a3:0d:6f:91:4f:b5:
         6d:1a:8f:03:f3:5b:e7:b2:bd:77:a9:7b:18:92:6c:b8:1d:1e:
         66:8e:55:da:b3:68:54:f1:72:03:03:31:b3:a7:97:dd:81:8a:
         a7:eb:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:02:32 2026 by rpki-client