Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37382e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          yUDHAb3echhaxyK0aFJwqXrNZTw3ttn6+O68XjiGtAQ=
Subject key identifier:   95:95:51:DA:2F:9E:54:BF:CA:4A:8F:BE:85:A1:E9:35:56:46:5B:C7
Certificate issuer:       /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
Certificate serial:       3B2F192DF0803B9F0607F70DFBBEE2FAC5D90AA5
Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa
Signing time:             Thu 05 Feb 2026 15:29:43 +0000
ROA not before:           Thu 05 Feb 2026 15:24:43 +0000
ROA not after:            Thu 04 Feb 2027 15:29:43 +0000
asID:                     271642
IP address blocks:        190.9.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:19:2d:f0:80:3b:9f:06:07:f7:0d:fb:be:e2:fa:c5:d9:0a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219
        Validity
            Not Before: Feb  5 15:24:43 2026 GMT
            Not After : Feb  4 15:29:43 2027 GMT
        Subject: CN=959551DA2F9E54BFCA4A8FBE85A1E93556465BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:92:b5:f3:65:65:45:a1:85:b1:ab:40:67:
                    0e:2f:31:ad:7a:c8:2b:e0:50:d7:51:ae:f1:22:0e:
                    e1:47:21:cc:cd:df:a8:a8:f0:d2:23:ff:17:7c:81:
                    68:24:8f:b5:5b:62:e3:c8:92:c6:22:94:74:ee:bf:
                    0b:15:99:b2:7a:89:42:7d:6d:c1:98:8e:f7:b4:e3:
                    ba:cd:0b:91:56:ab:4d:02:65:00:b6:13:33:ef:e3:
                    01:88:d7:4a:f4:dc:da:37:e6:44:64:5e:dc:65:ac:
                    27:3f:b8:0d:b7:fa:86:80:12:7f:1f:03:4e:fc:ac:
                    19:ee:78:5b:71:93:f0:d6:21:b1:c6:63:a7:71:ea:
                    a9:00:d7:1f:69:76:94:21:9a:21:41:e1:17:28:86:
                    02:ca:de:9a:ba:61:64:3b:24:7d:b7:8d:06:99:0a:
                    6b:7c:25:b2:61:df:c4:ef:56:66:df:d6:aa:f2:5f:
                    ed:0c:eb:22:b3:f0:b2:61:2e:27:f0:f2:d5:74:2c:
                    67:c2:32:f2:f5:e7:e2:db:21:90:3c:02:c8:33:52:
                    b4:25:c1:e0:cb:24:5b:94:d2:6a:ae:b7:26:68:e9:
                    8c:68:fd:e6:c7:4a:f3:63:67:d2:c3:b9:26:81:44:
                    5e:f6:2c:d5:48:d4:e4:0c:67:b8:fa:5e:01:12:0c:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:51:DA:2F:9E:54:BF:CA:4A:8F:BE:85:A1:E9:35:56:46:5B:C7
            X509v3 Authority Key Identifier:
                keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3139302e392e37382e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:af:31:25:29:57:a3:68:0b:41:77:48:1e:c8:4b:50:1c:b9:
         9a:e7:54:f8:f0:fd:3e:95:2a:12:4b:5b:6c:18:27:0d:1b:9a:
         01:3b:75:7a:61:0a:ee:89:aa:a9:ab:33:f4:2f:79:a6:69:d6:
         d4:be:24:63:a8:4e:af:43:91:ad:4c:08:6f:10:53:1f:3d:82:
         88:0a:be:9f:5d:62:94:eb:1f:1b:9e:47:63:37:2d:04:9f:28:
         29:f3:66:ef:f4:72:4a:fc:ad:3e:dc:60:6d:e0:73:52:4e:79:
         53:d5:80:ee:ae:ad:f4:7a:d2:50:19:55:db:5a:72:a5:2a:ed:
         ef:87:b4:de:07:e6:5d:46:f4:88:d8:24:a1:c1:83:53:25:42:
         7d:17:30:b1:b3:83:ea:14:12:1f:b9:4d:c1:ac:8a:e3:64:8c:
         7e:3b:86:d3:e2:dc:82:3c:84:78:6d:9b:e5:db:60:2a:00:cb:
         e4:16:39:1d:57:fd:4d:92:17:1b:8f:5e:c9:21:c9:01:07:20:
         2e:8b:df:8b:a2:d3:89:df:0d:d5:99:65:9f:91:98:48:77:da:
         04:fa:42:72:06:f5:6a:54:93:c0:2e:8f:d7:a7:9c:96:bf:fc:
         b0:2a:e9:73:c7:26:8a:dd:ea:57:0e:a0:c5:da:ea:be:44:25:
         63:10:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:25:49 2026 by rpki-client