Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa
File:                     3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa (raw, json)
Hash identifier:          gwfbQtvZPw+lHpqSQB/2PtztyzWhC+GVEenvJssP4iY=
Subject key identifier:   2E:C6:3E:7A:87:21:78:78:D7:C8:E8:43:BA:23:44:EB:95:3A:1A:C2
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       44995AB181FDA28CDFEDB5689B69FD2692171A08
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa
Signing time:             Wed 04 Feb 2026 20:07:26 +0000
ROA not before:           Wed 04 Feb 2026 20:02:26 +0000
ROA not after:            Wed 03 Feb 2027 20:07:26 +0000
asID:                     270690
IP address blocks:        190.120.32.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 12:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:5a:b1:81:fd:a2:8c:df:ed:b5:68:9b:69:fd:26:92:17:1a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Feb  4 20:02:26 2026 GMT
            Not After : Feb  3 20:07:26 2027 GMT
        Subject: CN=2EC63E7A87217878D7C8E843BA2344EB953A1AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:f8:85:f0:dc:d8:25:a0:c4:7e:01:d5:a1:
                    3a:83:fe:1a:a5:ee:24:52:38:a5:07:38:6a:d4:0f:
                    5d:87:e0:9f:d8:ef:02:1b:aa:81:c4:9d:a0:d7:60:
                    7a:1a:23:2c:99:04:c2:f8:e8:56:ff:a1:eb:74:46:
                    4d:67:da:ca:d7:71:da:e5:92:fe:f1:50:3e:1a:fc:
                    43:86:4e:7e:90:90:cf:3c:d9:66:99:c7:c2:f8:7c:
                    fe:46:23:37:ce:79:a6:b3:3f:74:51:b7:fb:7e:54:
                    ab:6f:7f:52:c1:5e:67:27:20:7f:dd:66:bd:b9:64:
                    2e:ac:a3:38:49:63:bf:2d:cf:4e:3f:e4:51:65:b3:
                    68:44:bb:08:f4:63:d1:7c:50:00:f3:1a:cf:a6:3f:
                    f5:52:1b:6c:ca:79:41:d1:16:69:0e:05:e4:2d:85:
                    1a:22:42:1e:84:83:77:28:5d:7d:ee:85:0a:45:79:
                    e8:b1:5c:88:1c:2b:2d:9c:34:fb:e9:d7:a1:27:f7:
                    98:76:97:39:8a:e4:33:a1:60:b4:1a:b1:90:71:f8:
                    77:6d:95:d1:44:94:a3:b1:ba:03:f9:89:7b:18:47:
                    6f:51:43:e5:60:40:fa:34:c9:e1:7d:05:a1:82:8b:
                    b1:25:13:09:aa:32:69:0f:f4:51:23:cb:97:12:ea:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C6:3E:7A:87:21:78:78:D7:C8:E8:43:BA:23:44:EB:95:3A:1A:C2
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33322e302f32322d3233203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:61:ef:ae:51:36:6e:88:2f:06:ce:e1:71:de:9f:9a:98:
         7b:a9:48:42:8c:9e:ea:84:3b:5a:76:89:c4:14:89:54:b6:46:
         64:d9:9a:5c:f7:a2:d6:ed:f7:b3:e8:38:23:a7:24:68:ce:9b:
         c0:9c:8b:29:55:b3:5d:a0:45:6d:c2:ff:d5:64:0b:a7:22:10:
         e2:88:dc:04:d6:2d:4b:c7:f5:6d:09:5c:42:22:66:a0:a1:10:
         32:f8:c0:42:d0:33:25:f0:d7:3b:5d:a8:97:7c:78:53:ed:18:
         f9:2d:c9:ab:32:ac:b6:0f:cb:32:2b:80:c0:65:73:13:19:f7:
         48:9e:34:81:b1:19:c6:23:4e:44:0d:9e:ed:6b:b9:65:d5:93:
         b5:91:8f:b0:5f:e8:00:78:98:72:5c:e2:45:d8:3d:c5:d5:4f:
         71:cf:a3:97:b6:5c:5f:c8:99:3f:77:be:48:50:c7:5a:3a:5c:
         e5:d5:c4:48:41:d5:38:d1:ee:ec:58:92:2c:f9:c9:7c:86:48:
         27:e1:84:ea:c5:ca:bf:4a:4c:5c:27:1e:33:3d:ca:38:06:48:
         5f:23:29:2c:a9:29:2f:7e:30:79:23:d4:6d:48:45:5e:51:8b:
         9d:19:b4:b3:1c:96:b1:54:26:81:bb:a3:42:2e:6a:bb:fa:ad:
         32:ad:e1:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURJlasYH9oozf7bVom2n9JpIXGggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2QjVBNDIxMDQ3NTZBMTRFMjY1MUU3RUFDODFEMDJF
QTBGNzUzMTAeFw0yNjAyMDQyMDAyMjZaFw0yNzAyMDMyMDA3MjZaMDMxMTAvBgNV
BAMTKDJFQzYzRTdBODcyMTc4NzhEN0M4RTg0M0JBMjM0NEVCOTUzQTFBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxfiF8NzYJaDEfgHVoTqD/hql
7iRSOKUHOGrUD12H4J/Y7wIbqoHEnaDXYHoaIyyZBML46Fb/oet0Rk1n2srXcdrl
kv7xUD4a/EOGTn6QkM882WaZx8L4fP5GIzfOeaazP3RRt/t+VKtvf1LBXmcnIH/d
Zr25ZC6sozhJY78tz04/5FFls2hEuwj0Y9F8UADzGs+mP/VSG2zKeUHRFmkOBeQt
hRoiQh6Eg3coXX3uhQpFeeixXIgcKy2cNPvp16En95h2lzmK5DOhYLQasZBx+Hdt
ldFElKOxugP5iXsYR29RQ+VgQPo0yeF9BaGCi7ElEwmqMmkP9FEjy5cS6jV3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULsY+eocheHjXyOhDuiNE65U6GsIwHwYDVR0j
BBgwFoAUKWtaQhBHVqFOJlHn6sgdAuoPdTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo3YTNObTFSaFNWSlAyc2czdEZhSmhNeEZObldhZ3I3OFQxbXB1dUMy
SGMvMS8yOTZCNUE0MjEwNDc1NkExNEUyNjUxRTdFQUM4MUQwMkVBMEY3NTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NkI1QTQyMTA0NzU2QTE0
RTI2NTFFN0VBQzgxRDAyRUEwRjc1MzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqN2EzTm0xUmhTVkpQMnNnM3RGYUpoTXhGTm5XYWdyNzhUMW1wdXVDMkhjLzEv
MzEzOTMwMmUzMTMyMzAyZTMzMzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM3
MzAzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+eCAwDQYJKoZIhvcNAQELBQADggEBAHChYe+u
UTZuiC8GzuFx3p+amHupSEKMnuqEO1p2icQUiVS2RmTZmlz3otbt97PoOCOnJGjO
m8CciylVs12gRW3C/9VkC6ciEOKI3ATWLUvH9W0JXEIiZqChEDL4wELQMyXw1ztd
qJd8eFPtGPktyasyrLYPyzIrgMBlcxMZ90ieNIGxGcYjTkQNnu1ruWXVk7WRj7Bf
6AB4mHJc4kXYPcXVT3HPo5e2XF/ImT93vkhQx1o6XOXVxEhB1TjR7uxYkiz5yXyG
SCfhhOrFyr9KTFwnHjM9yjgGSF8jKSypKS9+MHkj1G1IRV5Ri50ZtLMclrFUJoG7
o0Iuarv6rTKt4ao=
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:08 2026 by rpki-client