Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
File:                     3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier:          TYkFuf8SjQ3t06IS9rRZ02INSKe8xoCHE1pxNxqTj8E=
Subject key identifier:   96:23:70:95:2F:3C:8B:8B:6A:FB:33:92:7B:41:D8:C6:B7:B1:A1:69
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       5D10E0CBE0D174409F920C98CEDE8FC0BCD8A3D3
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa
Signing time:             Thu 05 Feb 2026 15:24:24 +0000
ROA not before:           Thu 05 Feb 2026 15:19:24 +0000
ROA not after:            Thu 04 Feb 2027 15:24:24 +0000
asID:                     53029
IP address blocks:        168.181.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:10:e0:cb:e0:d1:74:40:9f:92:0c:98:ce:de:8f:c0:bc:d8:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Feb  5 15:19:24 2026 GMT
            Not After : Feb  4 15:24:24 2027 GMT
        Subject: CN=962370952F3C8B8B6AFB33927B41D8C6B7B1A169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:06:2f:cb:c8:9b:4d:8a:ed:15:6b:8e:55:a2:
                    ee:b4:ce:d3:73:81:66:17:43:87:f2:e1:4a:4b:90:
                    3b:18:ef:a6:be:46:9a:d6:5b:58:d9:38:56:a2:d4:
                    d5:6d:3a:53:75:8c:4a:dc:59:ca:76:91:59:3b:35:
                    ba:35:f2:a2:bd:a1:0e:ff:87:be:56:7b:ef:29:ed:
                    ea:50:9d:82:84:ea:b4:5e:38:b9:5e:e1:24:2f:6f:
                    9a:06:27:68:b1:d8:c3:03:db:f7:71:49:4c:37:08:
                    b8:0e:f9:ab:a2:f8:34:4c:ab:45:db:92:4b:a5:d4:
                    e0:dd:ef:91:bf:27:45:f9:df:5d:8a:29:1a:68:cb:
                    ef:0e:b3:d1:62:28:ae:6c:48:81:2b:6c:80:ba:27:
                    54:29:b0:3a:bc:ae:44:fb:be:f2:44:11:15:4b:df:
                    70:d2:ca:b7:b8:55:79:7f:34:bd:8d:32:0d:84:de:
                    bf:32:ad:e6:cd:aa:0a:03:cd:bb:b2:b9:d6:24:11:
                    37:e8:7d:06:ad:a1:83:e3:13:e8:4b:31:42:13:13:
                    11:1b:dc:a6:00:b5:93:ae:65:23:01:de:f2:28:6d:
                    12:9e:4e:18:c4:cb:00:b2:64:fe:4b:05:f1:eb:ae:
                    9c:cf:fd:9f:43:a5:68:50:0b:26:fa:a4:4a:5b:ec:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:23:70:95:2F:3C:8B:8B:6A:FB:33:92:7B:41:D8:C6:B7:B1:A1:69
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3136382e3138312e34302e302f32322d3332203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:cf:68:8d:f3:69:2e:26:a2:bb:8e:99:fe:1c:70:53:1f:37:
         5c:e6:e5:05:a2:cf:50:cb:4b:67:c0:65:22:7c:96:db:0c:27:
         01:77:1c:f5:ee:69:75:1f:d0:79:8d:4d:11:da:cb:22:1c:d3:
         8a:ec:a8:dc:91:08:71:31:f6:dc:c3:dc:f7:76:56:18:a0:47:
         aa:8e:4c:fb:3b:89:fb:e7:ed:d5:c4:df:27:67:98:c1:62:a0:
         c4:89:c1:28:4b:4a:5c:ea:5f:5e:dd:b3:97:0a:d5:53:f9:3b:
         b4:39:a0:6d:fa:dc:43:e1:dc:c8:72:4d:35:d6:b0:66:a2:1b:
         d9:a4:41:e0:ba:8a:30:0b:ea:78:2f:cb:40:be:f3:d2:b1:81:
         fc:4d:ae:6a:ae:ed:b1:f8:e5:43:ae:7a:b8:16:89:d3:b0:75:
         31:dd:84:32:18:96:43:19:9c:1a:cc:c8:88:78:52:c9:bc:ca:
         b5:f9:d6:91:a7:22:04:37:de:d9:9d:f3:f4:ac:d2:c1:0e:97:
         16:fc:fe:6a:74:2a:f6:48:33:44:58:c2:3e:e6:61:df:d4:5a:
         07:c0:df:11:ac:57:e8:6d:bc:cd:8c:b2:a6:e1:fc:4e:ef:8e:
         11:97:62:50:90:7c:46:ed:ff:3d:5a:db:45:50:1a:d1:a4:78:
         92:0c:23:0c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXRDgy+DRdECfkgyYzt6PwLzYo9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC
NTAzMkZDMDAeFw0yNjAyMDUxNTE5MjRaFw0yNzAyMDQxNTI0MjRaMDMxMTAvBgNV
BAMTKDk2MjM3MDk1MkYzQzhCOEI2QUZCMzM5MjdCNDFEOEM2QjdCMUExNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUBi/LyJtNiu0Va45Vou60ztNz
gWYXQ4fy4UpLkDsY76a+RprWW1jZOFai1NVtOlN1jErcWcp2kVk7Nbo18qK9oQ7/
h75We+8p7epQnYKE6rReOLle4SQvb5oGJ2ix2MMD2/dxSUw3CLgO+aui+DRMq0Xb
kkul1ODd75G/J0X5312KKRpoy+8Os9FiKK5sSIErbIC6J1QpsDq8rkT7vvJEERVL
33DSyre4VXl/NL2NMg2E3r8yrebNqgoDzbuyudYkETfofQatoYPjE+hLMUITExEb
3KYAtZOuZSMB3vIobRKeThjEywCyZP5LBfHrrpzP/Z9DpWhQCyb6pEpb7G6NAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUliNwlS88i4tq+zOSe0HYxrexoWkwHwYDVR0j
BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW
RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG
QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzWnFFTXpDOXBtMkZoVjZacTJYck56SjFCdUJmNU5DOEZqNFg2S0JHVkZFLzEv
MzEzNjM4MmUzMTM4MzEyZTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMz
MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqLUoMA0GCSqGSIb3DQEBCwUAA4IBAQCjz2iN82ku
JqK7jpn+HHBTHzdc5uUFos9Qy0tnwGUifJbbDCcBdxz17ml1H9B5jU0R2ssiHNOK
7KjckQhxMfbcw9z3dlYYoEeqjkz7O4n75+3VxN8nZ5jBYqDEicEoS0pc6l9e3bOX
CtVT+Tu0OaBt+txD4dzIck011rBmohvZpEHguoowC+p4L8tAvvPSsYH8Ta5qru2x
+OVDrnq4FonTsHUx3YQyGJZDGZwazMiIeFLJvMq1+daRpyIEN97ZnfP0rNLBDpcW
/P5qdCr2SDNEWMI+5mHf1FoHwN8RrFfobbzNjLKm4fxO744Rl2JQkHxG7f89WttF
UBrRpHiSDCMM
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:57 2026 by rpki-client