Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa (raw, json)
Hash identifier:          h/QL5LzDuLaq60FpxfXMW0gtmQE6QgmpNRmiHgEOU8Q=
Subject key identifier:   4D:0B:A5:B4:7C:80:07:14:8C:1C:81:4F:B3:22:9F:FC:6D:CE:20:EC
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       113C41CF9C43641B0033ED4EEE38D1287B842964
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa
Signing time:             Thu 05 Feb 2026 18:42:30 +0000
ROA not before:           Thu 05 Feb 2026 18:37:30 +0000
ROA not after:            Thu 04 Feb 2027 18:42:30 +0000
asID:                     265885
IP address blocks:        128.201.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3c:41:cf:9c:43:64:1b:00:33:ed:4e:ee:38:d1:28:7b:84:29:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Feb  5 18:37:30 2026 GMT
            Not After : Feb  4 18:42:30 2027 GMT
        Subject: CN=4D0BA5B47C8007148C1C814FB3229FFC6DCE20EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:47:f9:34:74:7b:a4:6d:ab:20:64:ac:1c:
                    b4:61:5c:86:c6:f7:53:e6:2f:0a:55:fd:eb:2a:96:
                    f8:36:e4:57:a2:77:ed:46:1e:9a:03:a0:99:76:b6:
                    34:a2:05:f4:e7:15:64:41:3b:36:eb:d8:48:37:ad:
                    36:7b:f9:2c:0d:c1:0e:cf:56:a1:fd:25:72:a4:0c:
                    04:f0:a6:51:6f:24:9e:fc:da:d6:49:dd:1b:e6:00:
                    53:1f:00:f7:84:aa:d7:2b:2b:bd:e4:ce:65:b4:fa:
                    93:25:61:98:1f:55:01:70:54:85:e6:23:81:de:11:
                    58:d4:a5:c4:15:3a:34:79:51:e8:d1:1d:5b:82:b6:
                    14:34:80:69:89:de:23:23:46:11:c3:2d:77:60:c1:
                    ee:66:3e:6f:56:54:f7:51:bc:ec:1e:bb:6a:5a:65:
                    36:21:8f:c2:61:a7:2e:5c:22:a4:19:a3:ff:b4:ef:
                    5b:77:79:43:48:c7:31:e9:f7:32:d7:77:31:70:cc:
                    1c:bf:c7:b2:ee:19:d0:17:6d:4b:54:f8:cc:3c:c0:
                    18:d8:e6:da:dd:2f:2d:e0:13:29:0f:b1:26:b5:6e:
                    31:98:dc:ae:0f:c2:b9:37:90:09:82:98:ee:6e:6b:
                    ad:20:13:b1:9c:d9:de:b3:27:0a:35:65:a9:5b:5c:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:A5:B4:7C:80:07:14:8C:1C:81:4F:B3:22:9F:FC:6D:CE:20:EC
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32332d3233203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:c1:d4:40:c6:22:e5:1a:d4:72:cd:60:f6:47:a4:9d:f2:
         fc:fc:0e:19:48:5b:13:62:bb:86:a3:6c:a4:40:aa:71:36:19:
         6b:13:21:19:36:b2:22:68:19:6d:5d:f2:db:7f:43:a6:ec:65:
         03:e9:ff:7f:ad:21:5c:10:30:ab:d6:e7:da:8f:51:eb:15:17:
         e7:58:7e:b1:52:6c:49:be:97:76:c7:97:9a:1d:fb:0f:b2:92:
         f5:44:18:e7:10:05:71:26:7f:b2:54:65:49:5b:c1:19:c1:1a:
         89:82:13:89:01:1c:49:60:b1:2f:f5:1b:1a:0a:5d:ed:8c:f0:
         38:be:74:93:47:7b:14:a2:c9:b3:02:1a:4d:d0:d4:7e:4e:da:
         48:35:e9:01:38:33:a3:84:c2:38:40:b1:78:bd:40:25:36:7b:
         ed:8c:ae:65:7d:e3:38:08:78:59:7f:5a:79:25:e7:3d:21:b6:
         30:fc:8f:c9:bf:aa:ad:b9:09:cd:3d:b6:20:7c:18:a6:be:a4:
         60:dc:b1:29:e6:c6:3c:45:fb:1e:8f:d7:c4:56:43:33:4c:45:
         61:26:91:c2:dd:12:ea:7c:23:23:21:8e:f9:f7:f8:25:8a:93:
         de:40:d0:89:f4:e6:88:d7:c4:0d:ea:99:6d:c8:17:08:9c:28:
         f8:46:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:20 2026 by rpki-client