Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          Fw4Gxp3JFNbSYCgnV4fI3fLGqx7UuheLZCetQmFrYzg=
Subject key identifier:   A0:09:47:09:EA:0C:F6:89:2E:7B:44:67:17:7D:E9:95:CE:D4:F3:52
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       6E74C828511C53CF89033234BC2599C8C481B512
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa
Signing time:             Mon 02 Feb 2026 12:28:50 +0000
ROA not before:           Mon 02 Feb 2026 12:23:50 +0000
ROA not after:            Mon 01 Feb 2027 12:28:50 +0000
asID:                     264036
IP address blocks:        143.137.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:74:c8:28:51:1c:53:cf:89:03:32:34:bc:25:99:c8:c4:81:b5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Feb  2 12:23:50 2026 GMT
            Not After : Feb  1 12:28:50 2027 GMT
        Subject: CN=A0094709EA0CF6892E7B4467177DE995CED4F352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:a7:3b:dd:b8:4d:4c:31:ad:a5:97:b0:52:
                    22:53:34:e0:85:57:75:27:e4:1a:eb:6a:7f:e1:5b:
                    d3:c7:88:18:1b:94:ec:26:45:98:9a:67:91:bd:1d:
                    6c:0c:33:6a:b8:b0:f3:89:ab:05:61:df:19:86:8b:
                    81:6a:c1:0b:2e:a5:35:59:ce:52:d7:fa:c2:76:a5:
                    37:f6:bc:77:60:36:3e:c4:b5:18:fc:6f:ae:71:35:
                    84:7a:c1:d8:a5:5d:a9:e5:60:a1:2c:cd:96:c6:31:
                    8e:d2:ba:6e:4e:e1:5c:93:88:a4:3e:b9:0c:aa:19:
                    96:ed:f8:af:20:82:22:ef:fc:1d:0d:ad:a6:4a:64:
                    4b:38:50:9b:8a:96:6c:3a:2c:69:e1:2a:23:04:1e:
                    9a:93:ca:f5:b8:fb:58:a2:15:53:79:7a:0e:88:9f:
                    6d:08:e5:3a:ba:09:d8:00:46:c6:52:b3:3d:c7:b3:
                    29:47:65:5d:57:61:1a:15:f9:a8:5f:6d:4e:9d:c4:
                    86:15:63:67:24:8a:dd:dc:6f:6c:84:5c:40:40:79:
                    79:aa:65:af:e2:09:63:01:9f:e2:fd:5a:5a:80:33:
                    6d:03:25:b8:65:20:95:8c:06:50:ac:00:a8:86:4a:
                    4b:e1:3c:30:2c:39:62:b9:0c:5d:e5:16:9c:20:cf:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:47:09:EA:0C:F6:89:2E:7B:44:67:17:7D:E9:95:CE:D4:F3:52
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:1d:14:67:0c:3a:8b:c8:0d:ae:a5:70:74:51:ce:21:21:
         4a:cd:ae:40:20:f6:d2:a4:38:76:1b:3b:3b:0e:be:4f:43:75:
         a8:e1:ef:97:cb:52:ea:25:6c:3e:ee:09:21:33:19:55:d0:29:
         d1:a5:f5:51:c2:98:b4:24:58:3a:50:6d:94:ce:40:a6:fa:35:
         e6:ae:77:ec:03:e6:2a:f8:1c:4d:12:ad:09:ec:28:ae:bb:ef:
         96:18:22:02:0c:25:b7:5b:fd:5d:1f:e7:61:cb:08:0c:95:fc:
         d1:e0:ac:18:36:e4:19:d0:52:88:f4:fb:06:e1:0d:21:b8:8a:
         d0:08:a5:fb:39:a0:a9:9e:95:4d:d5:b8:d0:8f:52:23:cb:a4:
         22:59:21:45:e0:89:5d:f7:58:e2:70:01:48:94:4a:00:f5:57:
         5c:d7:54:e4:9b:99:9a:88:23:0b:e3:6c:4b:19:6d:8e:9c:79:
         4e:54:63:95:f1:d7:cf:db:97:77:a0:dc:71:83:0d:70:72:9d:
         f6:ea:7e:ef:1b:50:47:31:3c:05:f7:77:b7:d4:45:28:de:a5:
         ff:23:93:ab:b4:e0:5a:c6:e5:6b:e7:d3:08:38:c2:2f:38:3b:
         ad:d3:fc:bc:3c:4e:f2:aa:21:e1:e6:2f:9e:27:27:3f:4d:54:
         0e:d5:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:05:47 2026 by rpki-client