Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa
File:                     3139302e392e37362e302f32322d3232203d3e20323731363432.roa (raw, json)
Hash identifier:          kr/r3PO/7vdnAEHt8ALIr7FCT5sBitRu/RARjgG6GNg=
Subject key identifier:   AB:AE:D9:AD:B7:42:FC:A4:FD:13:22:07:14:A6:7C:5D:D3:C3:4C:72
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       2699A2DFED8D6E07D83DE1923D78427C2B18D127
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa
Signing time:             Thu 05 Feb 2026 15:29:43 +0000
ROA not before:           Thu 05 Feb 2026 15:24:43 +0000
ROA not after:            Thu 04 Feb 2027 15:29:43 +0000
asID:                     271642
IP address blocks:        190.9.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:99:a2:df:ed:8d:6e:07:d8:3d:e1:92:3d:78:42:7c:2b:18:d1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Feb  5 15:24:43 2026 GMT
            Not After : Feb  4 15:29:43 2027 GMT
        Subject: CN=ABAED9ADB742FCA4FD13220714A67C5DD3C34C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:cd:37:a5:b2:95:50:df:3e:dc:70:ae:d2:
                    01:13:17:0a:34:c7:fe:10:7f:71:ec:5b:0c:8c:7f:
                    f4:91:5a:d1:4c:60:b3:49:8a:54:de:4c:d9:e1:b7:
                    a2:d3:0d:1e:b4:ec:36:93:ef:f7:53:84:a6:b1:3f:
                    a4:55:05:59:d3:93:f6:86:f3:17:cb:26:82:e2:f8:
                    63:96:a2:c7:39:66:42:bc:93:e8:05:85:a1:16:a4:
                    ae:30:e8:a5:d8:53:75:25:b9:23:10:03:76:e3:d7:
                    ff:ae:cf:cf:81:87:fb:52:0b:00:92:a2:66:98:7b:
                    a6:61:ad:ab:06:c2:f8:69:28:fd:7b:11:49:6d:94:
                    12:a4:19:64:2f:e2:ed:9b:17:4d:bf:60:c8:c2:c5:
                    4c:06:cb:59:d8:0f:42:d9:44:8f:fe:a8:51:80:98:
                    04:58:ac:7f:ee:76:a7:fa:aa:64:4b:8f:c3:96:22:
                    e3:a1:e4:e4:b3:20:3a:4e:f1:1d:cf:a0:39:b5:0e:
                    00:b5:c5:a4:a1:f0:63:90:f8:42:b2:35:a4:53:e2:
                    18:40:28:f5:15:36:21:0a:f8:12:7f:c2:04:51:66:
                    7c:5f:8f:13:19:09:bf:0d:87:38:a5:2c:36:9c:57:
                    9c:ff:66:cb:6b:7e:c8:f3:85:28:29:5c:dd:c4:f0:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AE:D9:AD:B7:42:FC:A4:FD:13:22:07:14:A6:7C:5D:D3:C3:4C:72
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37362e302f32322d3232203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:ae:b7:63:87:32:3b:e6:de:7f:85:7a:5d:67:04:1c:ba:
         8a:cc:b8:db:d7:bb:f4:98:bf:cf:f0:58:f1:30:39:39:e0:76:
         71:0f:c1:73:d3:94:0c:d6:85:e0:f9:3e:44:f2:35:f7:57:57:
         35:08:32:5a:b1:c9:2e:cf:f3:6c:40:cb:fd:ed:0e:69:37:7b:
         7f:38:c6:d0:c3:f9:f0:df:88:15:29:7a:8d:f1:79:70:cc:8b:
         63:56:e7:bf:65:7b:e9:3c:51:5d:f4:36:24:9c:0a:b8:8d:1f:
         6b:71:cf:f0:c5:9d:80:be:e7:44:da:bc:81:0c:32:97:b8:cb:
         3f:32:a6:4e:59:73:eb:ce:52:7b:27:8b:e3:ca:dc:f2:03:b2:
         22:cb:47:a3:60:85:61:81:48:98:56:05:cb:7a:e5:17:bf:94:
         35:a3:4a:17:f4:b8:79:4e:f7:5d:a8:0f:d7:db:21:1b:35:8c:
         1a:19:fd:c9:3a:d0:eb:7f:d3:70:9a:e7:f1:58:61:43:63:5d:
         e8:22:46:eb:32:8e:45:f0:ec:bc:8a:de:8b:33:ad:c6:f9:45:
         e6:90:5f:08:f8:36:f3:ea:83:37:83:b1:d5:6f:14:cf:7c:ef:
         52:d2:3e:4a:93:20:72:59:4a:8c:68:13:21:0f:7c:df:fe:38:
         61:f9:6f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:26:01 2026 by rpki-client