Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa
File:                     3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa (raw, json)
Hash identifier:          KpDavjHYjtCHbt3dHWmxbtnk9CH8alEI+sN4rAdJKgc=
Subject key identifier:   34:4A:EF:1B:7E:2A:95:8E:B1:6E:A0:6A:68:F9:D4:3A:EE:8F:5D:38
Certificate issuer:       /CN=5B90C3AB894B4089B90719C3140678196A073A0B
Certificate serial:       3EAB9BA4A3C55B6B1DA589BBB1C71F409B703849
Authority key identifier: 5B:90:C3:AB:89:4B:40:89:B9:07:19:C3:14:06:78:19:6A:07:3A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa
Signing time:             Thu 05 Feb 2026 20:08:41 +0000
ROA not before:           Thu 05 Feb 2026 20:03:41 +0000
ROA not after:            Thu 04 Feb 2027 20:08:41 +0000
asID:                     263255
IP address blocks:        190.180.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.crl
                          rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Feb 2026 15:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ab:9b:a4:a3:c5:5b:6b:1d:a5:89:bb:b1:c7:1f:40:9b:70:38:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B90C3AB894B4089B90719C3140678196A073A0B
        Validity
            Not Before: Feb  5 20:03:41 2026 GMT
            Not After : Feb  4 20:08:41 2027 GMT
        Subject: CN=344AEF1B7E2A958EB16EA06A68F9D43AEE8F5D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:a5:03:22:4d:12:2c:32:39:ac:c5:f0:cc:
                    e0:32:31:36:f0:ec:7d:61:98:36:84:e8:76:4f:9d:
                    15:0c:0f:ee:b1:0c:11:df:68:24:6c:3f:cd:a5:8b:
                    72:ea:77:7a:43:49:80:91:08:28:43:92:a3:43:42:
                    99:8f:4e:d3:1c:30:69:06:96:46:c4:c7:cb:6d:5f:
                    e8:fd:ec:7c:df:d0:fa:be:aa:30:5b:5e:54:01:3f:
                    bb:4f:e7:cb:e8:b4:4e:0a:e8:10:80:1c:d5:32:38:
                    4d:4c:77:be:aa:af:b4:44:89:80:d6:5f:bf:87:8c:
                    a4:38:b3:6f:0a:6f:01:ff:02:9f:38:11:86:e0:af:
                    67:c7:5e:e7:ea:b6:c7:0b:ce:5e:47:2d:75:6a:e5:
                    1c:95:3d:57:e9:e7:0b:b3:1c:1c:71:30:c0:c9:d5:
                    6c:f0:1e:53:73:8c:c0:2e:35:a0:d8:36:ab:77:63:
                    24:b7:e8:49:8d:d0:23:56:2c:a3:ce:49:c6:7d:00:
                    87:c9:3f:5c:98:6d:e5:a6:24:cf:4e:a4:19:4e:9a:
                    93:91:0a:b5:23:10:5b:69:d6:da:3c:13:ae:ac:a7:
                    a5:3c:8d:5b:4a:8d:c6:c1:08:78:da:da:fe:1f:91:
                    cc:80:96:ac:72:93:e3:15:d8:09:29:6f:4a:52:b1:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4A:EF:1B:7E:2A:95:8E:B1:6E:A0:6A:68:F9:D4:3A:EE:8F:5D:38
            X509v3 Authority Key Identifier:
                keyid:5B:90:C3:AB:89:4B:40:89:B9:07:19:C3:14:06:78:19:6A:07:3A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/3139302e3138302e3134382e302f32322d3234203d3e20323633323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:65:f3:57:a9:47:9c:24:93:12:d3:60:bc:7c:c8:c1:51:08:
         9c:b3:af:af:1c:b1:77:89:20:dc:9f:b8:a9:2b:e8:a3:57:4e:
         20:3d:5c:b2:75:c2:5c:30:42:5c:17:52:45:48:82:e8:71:26:
         a5:dc:dc:5c:43:25:6b:ab:a0:5d:44:20:66:9e:99:76:e6:90:
         54:2b:5d:9a:e2:37:b7:b7:ea:37:01:85:2f:8a:28:6b:15:bd:
         f3:23:db:69:ce:8c:db:76:4a:ed:f7:79:74:c5:06:86:e0:9d:
         4a:ef:05:d2:bd:ab:03:65:ac:bb:86:45:67:92:af:c2:44:1c:
         fa:be:1d:6e:35:72:e3:a0:41:63:44:26:94:2a:61:9d:e0:71:
         72:6d:5b:02:e4:d2:8d:58:30:66:fc:75:32:87:7f:5c:87:00:
         04:78:d6:c8:b5:26:7f:6e:66:df:47:77:00:ab:73:57:83:79:
         9a:d7:68:5b:97:88:48:8e:44:a4:14:68:b2:2d:f3:2d:15:c5:
         62:c7:72:bf:4d:72:32:1e:3c:7c:89:32:f4:f3:fe:6f:59:c4:
         96:f9:e3:01:7f:10:4d:96:dd:a1:8e:fc:26:73:8f:44:ec:1e:
         42:7b:ae:db:8c:3b:f3:c6:00:18:f3:fa:00:53:f9:a3:97:10:
         d6:f7:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 00:57:36 2026 by rpki-client