Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa
File:                     3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa (raw, json)
Hash identifier:          5MtUrib3S8mt5AG/RoO3Nf7Xe8+aMtCoYcP1KGRKM5M=
Subject key identifier:   8D:63:F1:B3:F9:54:20:6E:25:16:85:F4:03:EB:BE:DC:55:90:E0:64
Certificate issuer:       /CN=D7F3F67EA800504F23795E22991815F9E686C811
Certificate serial:       1BB3AD137706E921E4726857BC781FEA186AC176
Authority key identifier: D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     263492
IP address blocks:        191.243.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl
                          rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b3:ad:13:77:06:e9:21:e4:72:68:57:bc:78:1f:ea:18:6a:c1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F3F67EA800504F23795E22991815F9E686C811
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=8D63F1B3F954206E251685F403EBBEDC5590E064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:29:a2:8c:79:cb:a1:90:cb:5f:5f:79:f8:
                    8a:d8:9b:7f:08:1a:ee:5f:f6:3b:fe:8d:53:ed:4d:
                    30:c2:4b:85:46:a4:b7:e1:c0:52:ec:8b:27:fc:2b:
                    95:d0:7a:f6:c5:2e:e9:90:60:9d:85:9d:1f:fa:4a:
                    c8:5a:8e:61:37:50:65:f7:3f:4c:b7:a0:b0:7d:50:
                    e3:e5:7b:cd:bd:6c:ff:bd:f4:3f:5a:64:90:46:f0:
                    cc:c0:56:72:9c:ee:66:a5:c7:6f:d9:42:e8:17:b9:
                    e8:0d:46:a6:77:41:35:23:39:74:1f:17:82:9f:74:
                    49:fc:ef:82:10:b7:1e:a8:13:42:48:8f:c9:08:81:
                    c0:60:c4:4f:4d:15:98:e6:c1:d4:56:d6:28:06:e7:
                    3c:15:9f:e9:d0:9a:da:d2:ca:fd:46:c5:72:c8:f1:
                    bc:0f:4d:4b:78:28:e9:bf:8d:98:02:d4:7a:eb:a3:
                    35:ff:7a:7f:4e:6d:24:b6:67:57:36:e6:df:e9:bb:
                    bf:80:6c:b5:c8:de:8c:71:cd:80:f7:ec:f0:86:e3:
                    47:3e:e7:9e:80:29:73:9f:e7:a8:55:b2:0a:ac:be:
                    7e:d3:de:e5:ba:b8:b6:cf:69:4a:ce:eb:19:26:23:
                    7c:79:d8:59:f1:94:3b:21:9f:dd:73:d8:b6:9f:e7:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:63:F1:B3:F9:54:20:6E:25:16:85:F4:03:EB:BE:DC:55:90:E0:64
            X509v3 Authority Key Identifier:
                keyid:D7:F3:F6:7E:A8:00:50:4F:23:79:5E:22:99:18:15:F9:E6:86:C8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/D7F3F67EA800504F23795E22991815F9E686C811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F3F67EA800504F23795E22991815F9E686C811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMfPokTrt9EfG1UmiZ5AQ3kvymy5AxttsnDiNiNhwque/1/3139312e3234332e33382e302f32342d3234203d3e20323633343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:0b:ac:0a:42:a4:ef:b3:3e:10:91:07:a1:22:4c:de:2b:
         99:f5:be:42:75:75:33:46:69:3e:c0:31:8c:a2:ba:b7:cc:04:
         a8:d1:55:e6:4c:92:64:43:a3:5b:6f:c5:78:38:7a:eb:08:ed:
         a4:df:b1:d5:05:20:29:74:06:4a:d0:72:1d:6e:20:21:e9:d4:
         e7:2c:b2:3e:fd:3f:26:d1:b7:7e:e8:2d:af:0a:aa:7e:b5:5e:
         b0:83:78:6f:2d:01:19:99:52:d1:f3:8a:88:51:8e:f5:ff:af:
         f2:68:64:55:9e:9b:42:0b:61:d1:e2:55:e3:b2:a1:2c:cf:ec:
         5b:c4:5e:65:35:c5:7c:77:f2:b7:18:18:7a:33:a1:00:f8:f1:
         63:44:ae:73:fb:0f:52:f8:c6:d0:87:db:0a:2b:aa:f6:32:0e:
         cb:f8:7e:9f:f7:0a:94:eb:54:7c:9f:80:9a:05:a0:ae:c9:8f:
         86:c9:0a:08:af:f5:4f:d1:de:11:e1:70:30:0d:93:d0:33:a0:
         67:b4:69:2e:02:1c:d6:b0:ab:83:23:7e:a8:50:9a:de:09:1d:
         84:61:de:c3:65:2c:3c:80:19:9e:26:b5:dc:ff:48:6d:cd:97:
         c5:ad:a2:74:d2:a6:0d:18:62:41:60:77:78:29:16:cb:e8:11:
         43:d6:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:45 2026 by rpki-client