Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
File:                     3138392e33392e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          lWxmhhMaB+DxTM/5F4Iu/CFdqYYlI+3nfZUFL7z1VwI=
Subject key identifier:   3D:8E:57:96:A2:6F:CE:49:B2:C3:18:54:65:BE:66:23:64:07:D2:84
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       362158C7CB496FA9CEF7603C0A964EC47F9481F2
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:28 +0000
ROA not before:           Thu 05 Feb 2026 11:00:28 +0000
ROA not after:            Thu 04 Feb 2027 11:05:28 +0000
asID:                     28658
IP address blocks:        189.39.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:21:58:c7:cb:49:6f:a9:ce:f7:60:3c:0a:96:4e:c4:7f:94:81:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:28 2026 GMT
            Not After : Feb  4 11:05:28 2027 GMT
        Subject: CN=3D8E5796A26FCE49B2C3185465BE66236407D284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:88:78:e4:5c:e7:e7:77:23:10:2c:20:bc:
                    32:cc:5e:95:5e:df:65:82:3b:a1:84:f6:f1:cf:b1:
                    d7:4d:32:3d:1f:cb:da:81:4e:c3:4a:e7:4f:81:03:
                    c6:9e:94:4e:ff:d2:dc:df:c6:f6:c5:af:d5:1b:d7:
                    ae:b7:60:57:4f:de:16:0b:48:5d:22:fc:db:9e:0b:
                    82:75:c4:fc:57:96:8c:ac:8c:0c:7f:1f:59:b2:9e:
                    c5:30:e7:9b:72:1f:40:74:4a:22:77:c9:f3:3c:ee:
                    8e:6a:bf:e9:03:5e:4b:c5:ed:f5:ea:07:3c:fc:2f:
                    e3:91:3d:b6:a9:4c:46:38:80:d7:a0:d6:01:54:26:
                    96:da:fb:89:65:1b:e1:ff:99:02:42:35:6a:7f:03:
                    a4:f6:57:19:37:e0:5a:af:ea:00:7c:8b:b6:9d:f6:
                    1e:e7:57:09:66:f7:af:5b:38:84:77:d9:9a:f4:18:
                    5b:d7:b6:3f:ed:0d:6a:55:23:94:9a:5e:f0:8a:3d:
                    a9:f6:35:f1:a8:b5:b9:70:4f:78:0d:94:5d:06:02:
                    ef:df:b1:de:f5:14:fb:ea:68:ba:0e:1e:9a:a0:c4:
                    20:75:ab:01:f1:7c:ba:6a:ec:8e:05:4f:a1:29:cf:
                    59:83:a2:c1:89:03:27:a4:53:cf:0d:2c:45:2f:a3:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8E:57:96:A2:6F:CE:49:B2:C3:18:54:65:BE:66:23:64:07:D2:84
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e33392e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:19:1d:39:c1:ca:dd:68:ec:cf:b3:25:f1:38:75:2b:a1:
         f6:28:e9:9d:5a:da:df:04:2d:6a:de:b0:ef:52:47:31:2a:66:
         28:18:0d:e4:e7:ce:41:80:4a:2b:0f:26:d4:7a:f0:ef:76:3a:
         ca:f0:95:87:96:8d:a3:5f:1d:f6:85:51:4d:20:00:44:48:3b:
         a9:b5:16:d7:1f:b7:82:55:cd:9a:47:cb:f1:45:88:5d:f5:ef:
         f0:e3:24:eb:da:cc:40:cb:16:f8:72:88:11:47:ee:73:69:29:
         3d:82:64:13:47:84:c7:35:a0:3c:2f:c6:5a:ae:5c:0b:5b:26:
         3d:ab:9d:10:d3:07:28:35:40:12:88:59:13:bd:94:53:3f:6c:
         6a:42:14:96:b9:44:b7:f4:9f:b5:06:e5:8e:b7:84:df:59:39:
         52:d3:6c:da:b8:aa:83:e2:45:6d:83:37:3b:2e:a9:2c:81:4a:
         85:06:91:0f:34:b4:2e:af:59:da:59:05:59:f7:66:6c:97:10:
         96:18:dd:53:9c:bd:c6:f5:72:29:05:cd:38:18:f5:9b:20:6e:
         a2:7d:ba:a8:e8:dd:39:4f:af:95:92:0c:26:62:b6:19:4c:6d:
         4d:ec:e4:1a:a5:50:34:67:32:0b:af:78:7f:2a:cc:b7:ee:98:
         46:d3:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:28 2026 by rpki-client