Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138372e34352e3137362e302f32302d3234203d3e203533303535.roa
File:                     3138372e34352e3137362e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          4wtYrZrRC6bfYtZ/lFLKk9aV6O1EHSbAlxmkSaYBl90=
Subject key identifier:   03:42:FA:25:65:B2:48:3E:03:FB:D4:E0:96:26:E1:8B:19:D6:BE:3A
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       04CB9BAFFC1E6BD06B16F948B504D6DDF436EEAA
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138372e34352e3137362e302f32302d3234203d3e203533303535.roa
Signing time:             Wed 04 Feb 2026 21:00:00 +0000
ROA not before:           Wed 04 Feb 2026 20:55:00 +0000
ROA not after:            Wed 03 Feb 2027 21:00:00 +0000
asID:                     53055
IP address blocks:        187.45.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:cb:9b:af:fc:1e:6b:d0:6b:16:f9:48:b5:04:d6:dd:f4:36:ee:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Feb  4 20:55:00 2026 GMT
            Not After : Feb  3 21:00:00 2027 GMT
        Subject: CN=0342FA2565B2483E03FBD4E09626E18B19D6BE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:3f:fa:39:b2:6c:73:4b:17:55:ca:4c:6e:
                    d0:2c:7b:87:a9:0a:0c:bf:31:a3:f3:a8:07:7d:6d:
                    1b:35:40:cd:fc:68:ca:46:1b:08:4d:a6:e1:54:84:
                    dd:ec:d6:5a:91:69:48:8a:7b:57:1c:e6:00:c4:3c:
                    8b:6b:c1:2b:e3:d0:67:35:3a:97:67:6b:8f:ef:75:
                    d0:02:fd:0d:2f:61:c4:40:e5:53:c4:41:e4:b9:4c:
                    c0:f3:d7:52:e0:28:9d:f0:f0:ef:71:a9:b1:5b:26:
                    c7:dc:e8:9c:9f:6e:5f:76:d4:a8:f1:80:66:53:a4:
                    3e:57:2a:20:af:d9:ec:df:26:c2:02:43:0e:2b:f7:
                    b2:ca:5e:b7:dc:3f:1e:f9:f5:54:00:28:60:05:22:
                    d3:68:2d:89:e8:d5:93:62:ca:cd:03:19:a7:55:26:
                    05:fc:83:d4:3e:8e:14:ec:d3:b2:03:ad:8d:8b:c4:
                    64:ef:ea:a1:48:f3:ac:79:3d:c9:68:51:76:e8:a2:
                    6f:3e:cf:e6:e3:54:4c:54:b6:e8:54:80:db:9b:ff:
                    0f:46:ea:cf:96:f8:a4:36:16:5d:b4:d2:40:60:5f:
                    9b:87:36:00:1a:5c:ce:12:07:7f:ed:0b:b4:19:26:
                    85:9e:ed:94:6c:de:d6:a3:80:b8:d4:1c:04:fb:81:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:42:FA:25:65:B2:48:3E:03:FB:D4:E0:96:26:E1:8B:19:D6:BE:3A
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3138372e34352e3137362e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.45.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:92:c1:45:c7:ac:2f:ab:72:c8:cd:ea:e5:27:1b:82:e4:1b:
         87:8f:e7:be:a6:98:a5:0d:fc:c4:0e:d4:f9:1a:33:23:49:a6:
         fe:1d:77:b2:92:a8:68:39:96:18:4d:73:04:27:c0:e9:dc:10:
         a8:76:01:46:fb:0d:7b:08:f3:63:44:9b:09:a1:c4:f7:95:a1:
         ae:a8:39:78:b9:8d:34:a1:d6:1b:bc:75:fa:f7:97:7e:44:94:
         b6:05:78:ca:cc:8d:bc:c8:31:d9:17:51:c6:cf:65:18:ad:16:
         ce:42:df:16:65:bc:89:33:b5:4e:9a:29:75:01:b9:ef:b0:66:
         23:12:79:51:30:80:5c:e7:b2:19:7c:d0:de:20:98:74:65:2f:
         05:2a:0a:bd:2a:38:f1:dd:e0:66:82:fe:c9:cc:89:98:f6:a3:
         64:92:07:25:e8:aa:57:9b:87:6a:b3:5f:b1:48:d3:f3:79:f2:
         d2:68:c3:85:19:46:7c:2f:d9:05:b6:2d:2f:ed:d2:e3:9f:c9:
         1d:9f:dd:02:79:d4:18:cd:88:fa:e5:af:38:0f:e0:d0:92:76:
         e3:94:4a:35:84:f8:f6:6c:6d:28:88:9c:35:7d:d1:4c:11:6e:
         e2:2e:6f:ca:d7:33:f1:03:04:72:36:ad:b3:b9:63:e5:77:89:
         29:4d:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:24 2026 by rpki-client