Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          ztuK1y6TzrnBV2BGxQ4WtWxNXu99oTuXmP5v0i65W/U=
Subject key identifier:   2C:CE:00:68:A8:95:35:FB:AC:5D:47:63:15:99:F8:60:08:9A:24:93
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       511C6082422B0EB37FE73EF351F63315852D0E70
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     263492
IP address blocks:        191.243.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:60:82:42:2b:0e:b3:7f:e7:3e:f3:51:f6:33:15:85:2d:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=2CCE0068A89535FBAC5D47631599F860089A2493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:35:23:52:e1:0d:99:ec:b7:22:f6:6f:bc:
                    a5:31:0f:9d:5b:ec:3e:ce:ca:8d:1c:a7:69:bf:e9:
                    aa:1a:e3:10:2b:75:f3:e6:da:a1:86:3a:8d:40:93:
                    0c:04:84:a3:27:85:24:e6:b0:df:a7:d0:35:4d:4f:
                    49:21:ee:94:45:aa:be:91:f8:15:6e:1a:b8:48:16:
                    20:10:11:65:41:70:05:74:bb:ce:c4:3f:2e:73:c9:
                    4e:13:62:d6:62:7f:2c:67:78:5c:86:10:5a:77:47:
                    2e:b6:6d:41:7f:1c:ba:33:6c:f1:c0:47:52:0d:fd:
                    4e:ca:8b:e0:84:33:65:d2:fa:06:c6:c5:d5:c7:ca:
                    e7:b9:76:1b:ab:ce:7f:6b:82:1c:cb:7b:4a:12:3d:
                    6f:d7:66:20:61:8a:84:13:7b:4a:e8:6d:54:21:04:
                    7f:72:67:df:f3:53:68:58:8e:d7:7a:e1:4f:b5:f8:
                    42:37:57:54:30:66:f1:e4:0c:a7:46:1a:20:9d:e9:
                    a9:d3:1c:22:9d:e7:f0:26:be:d1:cc:b4:31:13:ec:
                    ec:2a:7a:04:36:63:22:bd:7d:b3:46:d9:6e:ce:fa:
                    85:e3:f1:5c:85:6e:b1:36:cb:8d:08:5c:64:51:3e:
                    af:c7:b3:09:92:dd:35:fd:9a:fd:a3:f5:e7:f9:de:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CE:00:68:A8:95:35:FB:AC:5D:47:63:15:99:F8:60:08:9A:24:93
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33362e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:12:c1:3f:0e:0b:83:bb:db:53:0e:da:21:96:1f:f5:fb:f8:
         48:17:39:e7:bd:98:75:c0:9a:9f:2a:61:99:a8:8e:1a:b4:17:
         85:09:67:f9:9a:0a:f7:ac:6e:83:3a:c8:8a:e9:be:77:b6:62:
         5e:7b:02:fc:0c:fc:b5:39:44:4f:f7:08:b0:36:7e:51:54:fa:
         9c:79:66:e7:99:9e:35:7d:51:49:25:f4:01:53:1d:a1:ad:fe:
         21:28:ce:70:fc:7a:3b:6d:2d:22:63:a6:58:0c:f9:fd:8c:d7:
         3b:de:5b:25:6b:ae:80:e1:ee:f0:1c:e9:db:a6:92:e4:f3:a3:
         53:d4:d3:7b:0e:34:f7:7d:b9:56:5b:bb:86:48:10:01:f9:6a:
         82:f5:a8:2e:62:71:ac:ef:c1:33:c1:a4:8a:b6:b9:f3:1e:ba:
         40:58:23:d3:3c:b1:3f:1f:1e:fc:45:1d:96:69:b8:a4:6d:fa:
         a9:a0:14:73:42:54:28:34:d1:cd:85:29:e7:91:75:72:f4:2c:
         8c:13:59:7d:be:4e:70:4f:75:82:6f:b6:a7:93:8c:5b:9d:56:
         75:e4:a5:82:1c:5c:6a:f1:d7:9d:22:2d:ee:c6:1a:08:c8:3c:
         c2:5e:74:72:96:91:27:f5:48:2f:7c:c5:c7:4a:35:c7:b3:f5:
         f2:0a:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:10 2026 by rpki-client