Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa (raw, json)
Hash identifier:          Ga7+LU+PgKgt1f9CYsFstNvu5P8zogDLJ5LlsQwju7s=
Subject key identifier:   AB:65:26:CF:FE:0D:6C:CE:2F:CC:1D:BB:2C:49:73:88:0D:B3:8A:24
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       57355DB23FE4373CE70E3D58D976007F55E620BB
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa
Signing time:             Thu 05 Feb 2026 18:42:30 +0000
ROA not before:           Thu 05 Feb 2026 18:37:30 +0000
ROA not after:            Thu 04 Feb 2027 18:42:30 +0000
asID:                     265885
IP address blocks:        128.201.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:35:5d:b2:3f:e4:37:3c:e7:0e:3d:58:d9:76:00:7f:55:e6:20:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Feb  5 18:37:30 2026 GMT
            Not After : Feb  4 18:42:30 2027 GMT
        Subject: CN=AB6526CFFE0D6CCE2FCC1DBB2C4973880DB38A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:bc:e0:5c:37:bb:dc:00:d3:54:60:1f:cb:
                    7a:bc:c5:74:0e:56:9d:d9:99:c6:1b:ba:33:c9:f3:
                    05:79:e9:e4:36:84:09:b5:f6:73:cf:cc:db:2d:e7:
                    53:25:ab:54:c4:9b:3d:80:f6:ab:13:2b:cd:fb:c0:
                    a8:2f:4c:cf:31:e0:c9:ed:e9:86:6e:85:18:43:fb:
                    54:40:cf:41:40:bf:89:9c:c4:df:7a:6d:de:f0:d4:
                    18:65:9b:4b:17:7f:d4:ec:9b:30:41:0a:e1:0e:3e:
                    0b:86:b8:c6:17:21:02:ed:34:f4:3e:02:ec:e9:20:
                    f9:18:f6:13:55:ec:ff:aa:7f:aa:8b:cf:d0:f8:40:
                    eb:b2:b4:b8:40:6a:16:69:6f:f6:4b:a1:4b:82:f3:
                    31:c8:2a:75:20:2b:0f:0b:2b:80:7e:00:37:f5:e3:
                    b9:05:7c:61:99:5c:95:13:e0:c9:f7:86:97:f5:28:
                    00:03:32:59:45:df:bd:9d:36:2a:d2:93:b5:a3:ac:
                    e6:60:08:8a:71:7c:12:16:19:24:ca:6d:48:bd:15:
                    e8:c5:fb:ca:7d:35:55:8e:06:7e:50:cb:76:cc:f8:
                    5c:21:c0:da:00:2b:6c:89:3e:9d:f9:96:9c:bb:a9:
                    19:0d:0b:ab:cc:14:64:52:ba:77:18:46:c6:a2:55:
                    d6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:26:CF:FE:0D:6C:CE:2F:CC:1D:BB:2C:49:73:88:0D:B3:8A:24
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32322d3232203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:31:3e:08:50:e1:82:3a:36:1d:05:3c:03:6b:20:bc:77:
         44:19:d4:b1:84:bc:c7:f7:c7:39:46:7f:c7:45:a4:88:1c:4c:
         81:7f:1a:0e:d0:4e:3d:2e:c3:90:f7:8c:90:ba:f4:c9:06:76:
         ab:1d:55:05:b9:73:dd:30:7c:db:71:78:59:7f:61:91:39:1f:
         e0:26:53:3b:73:7d:e7:bd:c4:72:0d:97:77:2f:0e:b4:8b:fb:
         81:26:3d:21:e2:a4:23:9c:bc:ea:1c:13:ab:cd:7f:9e:c4:e3:
         08:3e:08:fc:d6:cf:67:ed:1c:b1:72:96:8d:a9:2e:da:4c:82:
         10:46:e6:de:ca:54:7e:43:be:8a:bc:d2:3e:12:98:d1:98:84:
         18:6d:d7:84:65:71:35:e7:9d:d5:cf:f1:ba:da:0c:f2:5f:33:
         5a:1b:1e:c2:cd:05:01:be:a0:21:75:d3:cd:44:cc:48:3b:24:
         79:4a:2d:83:b4:53:46:d9:b1:e4:1e:c6:63:61:85:41:bb:ca:
         ad:4b:dc:57:3b:39:17:c3:75:d5:34:f6:ab:17:82:3e:26:e0:
         20:9a:e5:51:0e:58:ca:5c:77:88:c9:49:7f:87:d2:38:2e:35:
         5f:cc:4e:12:f3:33:f8:e9:ca:33:d4:af:c0:bd:f3:79:bc:0d:
         35:62:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:08:07 2026 by rpki-client