Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          A99F9sZJFNXogJTy6mEN1rFOKrnPMvciVClV5WDGGyU=
Subject key identifier:   26:E6:2A:0D:7F:D0:3E:2D:98:A8:22:3E:88:63:64:8B:F2:4A:46:3C
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       45DF6B9211508E8801B87F4FF5523E5A5A9A7929
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa
Signing time:             Mon 02 Feb 2026 12:28:50 +0000
ROA not before:           Mon 02 Feb 2026 12:23:50 +0000
ROA not after:            Mon 01 Feb 2027 12:28:50 +0000
asID:                     264036
IP address blocks:        143.137.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:df:6b:92:11:50:8e:88:01:b8:7f:4f:f5:52:3e:5a:5a:9a:79:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Feb  2 12:23:50 2026 GMT
            Not After : Feb  1 12:28:50 2027 GMT
        Subject: CN=26E62A0D7FD03E2D98A8223E8863648BF24A463C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:6b:83:74:83:9b:59:28:3f:c9:77:18:55:
                    e0:ef:e3:c3:9e:c1:fb:bf:f0:36:f5:a7:c9:52:bb:
                    9c:19:c9:75:66:2e:73:54:7b:ea:8d:c1:29:38:14:
                    8f:e7:e1:b6:ea:2c:91:a8:ee:bb:50:20:58:3a:fa:
                    d8:1c:36:67:13:8f:e0:0d:a3:6c:20:fa:09:ef:9c:
                    dd:73:c3:81:ce:68:a0:89:03:98:d6:c0:cc:d7:82:
                    ba:b8:18:55:2c:fe:c4:e7:d8:0f:9b:c6:3b:10:19:
                    79:7e:28:3d:a3:e8:15:3b:95:a0:b4:3d:b6:16:89:
                    ce:60:b8:97:8e:3b:6d:ca:ea:1b:a5:ef:93:86:1e:
                    f1:db:b1:36:9d:df:36:e5:45:e4:0a:5b:88:48:a6:
                    b5:12:ad:58:1b:9a:ea:0f:33:be:99:7a:26:97:16:
                    23:a5:ed:56:b3:6e:65:dc:a1:63:2f:bf:8c:bc:7e:
                    af:d8:ce:cd:6f:06:f2:6c:16:97:af:62:c4:58:8a:
                    9b:12:d7:31:69:80:d9:87:30:1b:1a:7b:71:f2:d7:
                    9f:a7:24:92:e5:e2:b4:75:59:2c:a2:00:1d:28:9c:
                    ae:c2:24:9e:67:90:ec:8d:9e:a5:a9:36:e3:a8:04:
                    1e:83:65:10:0a:f8:ee:1f:70:d9:c5:59:a0:f0:44:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:2A:0D:7F:D0:3E:2D:98:A8:22:3E:88:63:64:8B:F2:4A:46:3C
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:8b:f5:4b:c0:29:87:e2:14:55:2d:a9:93:7e:83:b3:91:
         af:66:79:f2:1f:e7:5e:38:8e:4e:59:c7:b0:28:cd:09:e4:a4:
         3c:cc:b2:69:77:9e:5a:b4:cf:1e:3d:ab:37:15:f3:45:14:d1:
         07:d9:0e:97:03:3d:08:bd:c4:98:79:be:bd:78:bc:3d:66:43:
         fe:a3:0d:1b:0d:f5:5e:63:93:96:82:ed:ce:05:8d:21:99:9c:
         8a:dd:3d:00:8f:25:bb:f9:ec:9c:81:de:b3:76:58:62:2b:c5:
         5a:b7:77:7a:3a:ec:1d:39:b4:1b:ae:45:50:6b:b8:c3:39:87:
         9f:6f:a2:6b:b4:4c:34:78:0e:e9:5b:34:c7:c8:04:a2:96:b0:
         d8:80:f1:e7:b0:09:59:95:c4:fd:dc:02:c9:c5:86:09:89:5f:
         ae:fd:e6:42:ac:23:19:10:1c:1b:28:e0:f7:72:67:28:0e:cb:
         3c:94:b2:b1:45:ce:ba:fd:8b:b3:26:20:4d:5f:44:9d:5a:0c:
         5d:b8:2c:55:27:8b:5a:72:d8:6c:d6:71:38:44:91:aa:22:bd:
         f9:0a:56:8b:75:ef:12:b7:d3:f6:3d:33:8c:98:c3:06:eb:1e:
         7c:14:54:f4:d3:7f:37:ce:46:03:7d:6f:a3:05:fb:da:11:f5:
         f7:ab:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:20 2026 by rpki-client