Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa
File:                     3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (raw, json)
Hash identifier:          s5oM/YKgACeZENr2SH18ungMSV8453Z2MUy+KChUs/I=
Subject key identifier:   D9:ED:E3:E1:44:17:99:18:72:A8:EB:E4:F0:D6:47:B2:F7:0F:77:E3
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       0B4F64356E5D75F0CCEFBF8851817F312560D071
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa
Signing time:             Wed 04 Feb 2026 22:51:38 +0000
ROA not before:           Wed 04 Feb 2026 22:46:38 +0000
ROA not after:            Wed 03 Feb 2027 22:51:38 +0000
asID:                     53154
IP address blocks:        186.209.224.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4f:64:35:6e:5d:75:f0:cc:ef:bf:88:51:81:7f:31:25:60:d0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Feb  4 22:46:38 2026 GMT
            Not After : Feb  3 22:51:38 2027 GMT
        Subject: CN=D9EDE3E14417991872A8EBE4F0D647B2F70F77E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:65:66:ff:52:9a:fa:a9:93:c4:64:ed:f2:
                    6d:49:f7:e7:28:0f:78:97:fd:a1:e2:fd:e8:01:66:
                    25:d1:22:1f:97:64:b1:99:3e:78:90:c6:f5:fd:4f:
                    0a:dc:b2:ec:95:6b:d8:49:a6:7a:d5:33:ab:2d:5e:
                    bd:f3:2d:2f:ef:15:6c:ec:01:1c:6e:f1:25:4f:3a:
                    a2:4d:00:83:74:54:9f:e3:9e:5d:c3:07:a7:c7:a1:
                    50:7e:c9:69:4c:60:b3:86:45:8f:62:fc:ce:7d:ff:
                    f4:00:c8:99:71:37:9a:84:42:f2:16:95:0a:59:4d:
                    c2:37:e2:6d:6c:33:b0:bf:36:09:d6:be:79:1d:e8:
                    99:62:0d:a2:ea:bd:09:c2:9e:56:43:7f:5b:63:2a:
                    be:48:b6:ae:5e:47:17:a2:c7:1e:24:2c:54:16:eb:
                    28:6b:69:ce:80:97:7b:09:b1:d0:e3:60:6b:9c:c5:
                    4b:f0:1a:c0:37:4e:6c:25:ae:79:8a:e1:61:c0:f3:
                    ed:4d:02:b9:c0:e2:fa:eb:bb:8a:36:ac:74:9b:83:
                    e1:31:5e:a6:78:4c:33:5a:08:97:26:c5:0a:19:52:
                    b5:22:73:ce:49:6a:a4:54:cf:52:31:01:46:a8:e0:
                    c3:c1:bd:55:24:1f:64:b5:97:c6:17:8e:e7:13:e9:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:E3:E1:44:17:99:18:72:A8:EB:E4:F0:D6:47:B2:F7:0F:77:E3
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:68:4f:d8:f8:a4:5f:f6:54:da:de:70:c9:69:c4:f7:2c:2f:
         42:a4:47:c1:c3:f8:55:f5:f6:8c:08:d6:0c:66:05:2c:0e:c3:
         f6:63:ed:60:f9:6d:8c:c5:c1:df:5e:c1:7f:e3:94:8a:51:e2:
         00:2d:6a:91:2b:81:90:8d:37:b0:c0:5b:06:b8:8c:71:b7:64:
         eb:94:f8:ca:83:7d:de:09:b8:24:a3:be:c4:cb:da:4e:8c:5b:
         a6:7c:e0:e1:eb:65:7a:43:0c:89:a4:4d:0e:37:12:b5:ba:63:
         29:9e:1e:40:fa:2e:f8:7d:43:0a:0b:4c:c0:e5:c4:ca:af:35:
         ce:b8:11:5e:88:69:f9:1f:c4:52:2d:b5:a9:0c:f7:1f:a7:59:
         71:49:15:2e:e7:0e:37:87:ac:f4:34:72:22:9e:92:7b:00:da:
         40:6e:42:88:8a:ed:96:84:2a:0d:52:05:41:10:8a:6f:49:78:
         d3:47:0d:88:b0:1a:02:8d:13:54:6c:a0:1f:9f:45:4f:31:6d:
         d3:77:d8:bc:ca:e3:ee:2e:61:8d:69:f6:d4:90:71:77:56:8a:
         2a:bc:87:84:0e:41:ad:66:8e:fe:d8:2c:31:d4:99:02:e3:ac:
         25:d4:40:4c:71:f0:0b:bc:af:ef:51:79:d9:76:3a:e4:11:a8:
         66:88:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:55:12 2026 by rpki-client