Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
File:                     3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa (raw, json)
Hash identifier:          6XSGPRyZdyBXpZ6cYsl7+qkVSBOZqTLT6o58cw7GkbI=
Subject key identifier:   25:93:D9:B4:62:74:C7:79:05:DE:C3:2B:CA:52:75:F5:02:4A:E7:85
Certificate issuer:       /CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
Certificate serial:       6F03C05415260DD70F1889D1A1ECDF2A0243A93C
Authority key identifier: 32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa
Signing time:             Wed 11 Feb 2026 13:50:24 +0000
ROA not before:           Wed 11 Feb 2026 13:45:24 +0000
ROA not after:            Wed 10 Feb 2027 13:50:24 +0000
asID:                     263089
IP address blocks:        186.250.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl
                          rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 06:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:03:c0:54:15:26:0d:d7:0f:18:89:d1:a1:ec:df:2a:02:43:a9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C2F909A73EFDFF0C595419D622D6A53EAEA292
        Validity
            Not Before: Feb 11 13:45:24 2026 GMT
            Not After : Feb 10 13:50:24 2027 GMT
        Subject: CN=2593D9B46274C77905DEC32BCA5275F5024AE785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:c3:6e:e0:24:7c:9e:a2:ea:13:90:10:89:
                    e1:07:71:f1:e1:c1:d2:80:9c:b2:1c:da:16:c8:24:
                    38:9f:34:1f:9e:43:70:66:c2:15:fd:d1:3f:7e:d3:
                    0b:ec:24:6f:71:03:b9:2c:66:1e:88:69:2e:fd:5a:
                    75:b3:c1:ea:bd:4c:28:76:d7:1a:d2:d3:f0:66:17:
                    64:b7:95:0f:d8:3b:a8:6f:15:32:18:25:3d:f0:60:
                    5e:03:45:ab:ae:79:e8:65:54:a5:90:73:62:a8:a3:
                    7f:0d:3c:19:4b:31:d2:bd:d2:5d:ee:12:cb:c0:ea:
                    ec:65:a2:b0:8a:3f:6f:f2:a4:c0:99:0f:7c:2d:8f:
                    8a:21:67:0b:cd:57:09:87:89:ed:58:93:81:c7:a4:
                    51:33:c9:15:2b:2c:99:16:f2:56:32:e2:80:92:fe:
                    3d:26:5a:6d:0a:89:24:68:9c:d4:45:ea:c9:9a:d5:
                    3e:fa:2b:68:1a:0e:f6:d0:b9:c1:53:4d:53:ff:2f:
                    71:e6:a7:dd:24:9d:06:7a:86:92:e8:83:ff:71:6b:
                    1e:d0:55:d9:0e:ef:6c:81:0c:f6:8f:0f:70:b1:a7:
                    ed:dd:a0:80:ae:b9:8d:fb:a1:ab:b1:8d:c3:0e:5c:
                    01:d3:6e:5a:f9:fd:c0:5c:41:fd:a9:1e:c9:f8:00:
                    d4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:93:D9:B4:62:74:C7:79:05:DE:C3:2B:CA:52:75:F5:02:4A:E7:85
            X509v3 Authority Key Identifier:
                keyid:32:C2:F9:09:A7:3E:FD:FF:0C:59:54:19:D6:22:D6:A5:3E:AE:A2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/32C2F909A73EFDFF0C595419D622D6A53EAEA292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C2F909A73EFDFF0C595419D622D6A53EAEA292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/3138362e3235302e32342e302f32322d3234203d3e20323633303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:86:55:a4:16:26:a8:e4:8a:ef:c1:75:6f:df:69:e2:8e:6e:
         d7:1f:d2:ff:9a:9e:75:c4:4e:99:e7:a2:f5:5e:44:32:2e:fe:
         95:f6:4e:a3:b1:12:fb:f6:9a:d7:91:83:0a:b4:af:85:19:e7:
         75:dc:79:6a:6f:15:9d:81:e2:3f:66:ee:93:0a:68:8d:63:ed:
         53:83:7d:ac:70:cd:6e:67:d1:ff:ac:b5:70:f3:e1:be:5b:33:
         bb:38:db:68:90:13:eb:1b:f1:41:33:11:1f:37:2d:cb:bc:06:
         46:15:20:b4:0f:e7:7b:ea:64:0b:9c:9e:91:c4:c4:4d:f1:21:
         7a:0a:8a:f9:73:17:88:4e:4e:22:76:4a:82:d0:8d:56:68:00:
         d5:6c:f8:55:66:1f:86:cc:2c:46:08:d5:d1:aa:14:4a:dd:63:
         a3:35:84:56:ff:8b:2c:a7:03:bd:fb:e1:8a:a5:e0:b7:d1:74:
         21:b3:8b:94:0b:9b:21:e7:c8:65:cd:cd:6b:8d:63:69:27:94:
         3d:be:35:31:e5:35:58:12:ed:43:d4:8e:5d:54:ae:bb:fd:d6:
         9b:11:fe:0c:a6:13:d0:46:19:16:77:7f:0c:ea:74:47:bf:cf:
         5a:c9:dd:62:45:14:bb:16:cc:af:7f:bc:c0:38:9d:55:4f:81:
         15:b1:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:05:49 2026 by rpki-client