Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
File:                     3138372e39342e3131322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          pNfwOnSvSdihNPffTcFhKGADnoBYRHhk51cRqgCoZMg=
Subject key identifier:   EC:C6:DC:38:C3:2F:C9:07:6D:DC:1C:7A:66:29:45:32:01:26:C2:F1
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       5F8DFC881747B19BDCA968C31898E47F45950CC8
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:28 +0000
ROA not before:           Thu 05 Feb 2026 11:00:28 +0000
ROA not after:            Thu 04 Feb 2027 11:05:28 +0000
asID:                     28658
IP address blocks:        187.94.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:fc:88:17:47:b1:9b:dc:a9:68:c3:18:98:e4:7f:45:95:0c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:28 2026 GMT
            Not After : Feb  4 11:05:28 2027 GMT
        Subject: CN=ECC6DC38C32FC9076DDC1C7A662945320126C2F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:45:22:b0:db:4f:0c:de:a9:ca:7c:ca:9e:
                    e3:72:e0:4e:b4:93:a8:ac:7c:94:bc:d4:70:d9:51:
                    70:66:82:13:9c:d5:ae:e3:0e:f6:56:83:ed:2c:2c:
                    7b:d6:bd:99:d1:00:b7:4d:b0:4a:c5:ac:88:9a:52:
                    77:f2:62:cb:a0:26:a6:a9:73:cf:f5:00:cc:b0:bc:
                    66:cc:a5:e2:36:b7:83:9f:d3:ea:50:d2:0c:8c:0a:
                    8b:e6:23:5e:92:78:54:1c:93:b9:ee:77:fe:24:d9:
                    bb:a6:71:2b:49:13:f6:9d:0c:16:c2:fb:26:31:0e:
                    22:75:b5:53:db:8d:17:f3:e0:ae:a8:3b:b4:66:e8:
                    16:4b:a4:a3:9a:84:41:c2:a1:0c:92:74:15:e9:9c:
                    40:12:5f:4b:16:47:aa:e6:4a:1d:d4:08:c2:83:43:
                    58:93:d9:a6:d5:90:83:88:8e:28:f8:82:e7:9d:78:
                    3c:c0:1a:59:95:d0:21:8f:70:e7:94:7d:b0:ab:d4:
                    17:83:4b:ed:54:90:9c:50:74:76:f9:2c:ac:f9:d7:
                    12:a2:fb:e6:bd:0a:37:50:05:c4:a2:db:d4:32:f4:
                    b7:23:68:a2:c7:22:c5:da:6f:b1:70:a7:d0:4d:81:
                    90:c2:4a:8f:05:61:b0:87:a6:16:8f:3a:7e:a7:c5:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C6:DC:38:C3:2F:C9:07:6D:DC:1C:7A:66:29:45:32:01:26:C2:F1
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:75:c7:50:74:69:c3:cf:bd:4c:68:04:1c:38:ac:4b:d7:7f:
         30:ac:2a:9f:d1:9f:c8:b8:2c:e0:8d:81:1f:8d:f4:17:88:fa:
         8e:ef:e3:8a:a6:c6:e3:a8:e5:c6:60:83:7a:68:6f:2a:23:9b:
         d7:39:f7:e0:fa:1a:a0:96:7f:b7:3e:a4:00:46:d5:9e:72:f3:
         d7:31:a5:2d:e5:66:89:69:75:34:f2:82:47:af:e6:23:00:ad:
         66:63:b4:dd:5a:69:41:30:fd:2c:a9:b4:eb:cf:6a:4b:dd:cd:
         f2:88:84:67:61:4b:59:6b:7e:ff:0a:1d:0f:14:46:bb:48:af:
         11:2f:da:68:5f:f2:39:10:fe:d5:69:ca:06:30:8a:a0:98:02:
         7f:cd:18:29:42:43:95:a1:ac:b5:0f:26:96:37:02:db:0e:8a:
         05:7a:0e:80:55:5a:7e:06:8e:20:32:f6:1c:9f:75:7d:ce:f7:
         6f:50:2a:b2:7f:ce:f2:cb:99:0b:b8:15:a7:3f:84:da:5a:c0:
         47:fb:4e:69:ba:63:43:25:35:18:45:5f:81:5c:7d:02:2c:9a:
         15:46:7f:61:16:5d:2c:99:a7:14:72:c2:86:8c:ef:11:1c:94:
         0a:68:99:65:9c:c5:8d:ad:e2:db:7c:d5:2e:1c:8f:e8:87:9a:
         9f:c1:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:00 2026 by rpki-client