Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa
File:                     3138362e3139332e302e302f32302d3234203d3e203533313334.roa (raw, json)
Hash identifier:          8Lltl4dvhjLL3J4ydUxxo0lYfAs+cBWcFNNxGaJea0I=
Subject key identifier:   29:63:DE:5E:58:C6:4A:2A:F3:23:52:FD:48:A0:EE:C9:EA:4F:03:5B
Certificate issuer:       /CN=89B059C223BA0AD41E99D2508292698CA59D4D51
Certificate serial:       317B73150DF14CE10792B33D4AF6C8DA3120EA1E
Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa
Signing time:             Thu 05 Feb 2026 05:26:05 +0000
ROA not before:           Thu 05 Feb 2026 05:21:05 +0000
ROA not after:            Thu 04 Feb 2027 05:26:05 +0000
asID:                     53134
IP address blocks:        186.193.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl
                          rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 23:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7b:73:15:0d:f1:4c:e1:07:92:b3:3d:4a:f6:c8:da:31:20:ea:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51
        Validity
            Not Before: Feb  5 05:21:05 2026 GMT
            Not After : Feb  4 05:26:05 2027 GMT
        Subject: CN=2963DE5E58C64A2AF32352FD48A0EEC9EA4F035B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:37:92:32:0c:9c:f6:b2:ca:72:45:d7:5f:
                    b0:dc:91:00:8b:ef:68:42:fd:55:14:ef:e5:a4:15:
                    b9:e2:e5:5d:14:5e:b4:e3:04:87:ff:c6:74:74:f5:
                    d0:1d:ed:4b:dc:c4:95:f9:4f:8e:36:6c:7d:28:8b:
                    a1:8c:d0:a9:69:c4:2d:1a:38:b8:ea:ad:21:c8:f4:
                    ae:8c:02:58:e8:16:18:78:ea:e6:b2:d6:01:49:08:
                    32:dc:d7:aa:0e:73:6e:e3:58:09:34:b3:09:b3:76:
                    b3:93:8f:b6:36:67:59:8a:06:68:e5:ff:be:62:af:
                    08:24:65:1e:76:4b:e7:09:4e:58:16:2f:e1:14:f9:
                    ce:cf:f5:e9:2e:ff:d2:a4:bb:f3:bc:4a:eb:33:f3:
                    53:19:bc:6c:ca:e6:c8:c2:12:ab:05:da:e7:e4:3f:
                    ba:b0:7d:69:ae:df:77:de:7b:1d:59:c9:11:85:30:
                    3c:de:d8:b0:39:76:45:e5:6f:0d:5d:be:96:02:e5:
                    98:7d:e4:d1:2d:83:c2:62:d6:a7:2e:08:88:8a:ae:
                    81:1b:72:05:55:06:54:4a:c7:ca:d1:6f:29:69:c9:
                    0e:78:b3:94:4c:16:8c:23:8a:f2:d4:64:77:1a:a4:
                    e8:88:73:b3:e4:1b:f2:95:e7:e3:e4:4d:85:d7:c6:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:63:DE:5E:58:C6:4A:2A:F3:23:52:FD:48:A0:EE:C9:EA:4F:03:5B
            X509v3 Authority Key Identifier:
                keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/3138362e3139332e302e302f32302d3234203d3e203533313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:16:f8:32:d3:da:db:75:19:41:00:82:81:32:3a:70:6e:06:
         46:6f:e8:b0:b3:8e:1a:23:01:96:9d:86:0f:d2:a5:c4:e5:f5:
         75:81:20:55:18:14:dd:91:b8:b5:49:61:5e:02:70:a2:96:7a:
         08:01:76:43:1f:bd:e0:b9:bd:3c:82:b0:0d:74:61:19:ad:4a:
         76:e6:a7:4c:75:a6:14:ce:76:74:15:34:b5:a7:84:c2:56:d8:
         75:7b:e7:1c:2c:66:0e:4c:a7:d0:ce:e0:c5:8d:d6:a2:5f:e9:
         b3:bc:e9:1c:ee:14:c3:3d:c2:d8:c2:d4:c2:86:b6:b3:47:29:
         e4:df:76:f0:85:c8:bd:4f:66:55:d6:53:a1:e9:99:78:bc:02:
         8d:c0:e3:2d:23:05:45:43:dd:be:b3:7a:c7:50:09:2b:d2:bc:
         40:f8:a7:c8:8d:1b:d9:0a:8c:6e:ab:15:3b:ae:63:58:fe:a0:
         94:c8:51:cf:df:b4:aa:80:ed:ec:8b:4f:21:81:9b:fb:7a:65:
         e5:9a:fa:f7:f6:73:a4:da:03:f5:2a:cf:a7:aa:ee:77:af:0d:
         36:2d:49:3f:d3:7d:f0:a6:2a:a7:e0:f6:a9:3b:29:82:cc:d7:
         1d:10:cf:50:68:9e:bb:84:73:67:b9:c4:12:1b:16:7f:82:2d:
         62:eb:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:18 2026 by rpki-client