Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3133302e302f32332d3233203d3e20323633333332.roa
File:                     3139312e33362e3133302e302f32332d3233203d3e20323633333332.roa (raw, json)
Hash identifier:          gtZni+1SgAE4wf4Rwqh4YXk3YhCSxpxAhELrzsGMzMM=
Subject key identifier:   34:A3:1E:54:0B:1F:09:05:98:85:1D:1E:5D:31:80:D5:90:0F:5A:F5
Certificate issuer:       /CN=576E306418DEE08969A5316F2AE7499BED09EEC7
Certificate serial:       2C463471193226EAA9056EA306AA7BFDA58D4303
Authority key identifier: 57:6E:30:64:18:DE:E0:89:69:A5:31:6F:2A:E7:49:9B:ED:09:EE:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576E306418DEE08969A5316F2AE7499BED09EEC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3133302e302f32332d3233203d3e20323633333332.roa
Signing time:             Wed 18 Feb 2026 18:35:54 +0000
ROA not before:           Wed 18 Feb 2026 18:30:54 +0000
ROA not after:            Wed 17 Feb 2027 18:35:54 +0000
asID:                     263332
IP address blocks:        191.36.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/576E306418DEE08969A5316F2AE7499BED09EEC7.crl
                          rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/576E306418DEE08969A5316F2AE7499BED09EEC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576E306418DEE08969A5316F2AE7499BED09EEC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:46:34:71:19:32:26:ea:a9:05:6e:a3:06:aa:7b:fd:a5:8d:43:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576E306418DEE08969A5316F2AE7499BED09EEC7
        Validity
            Not Before: Feb 18 18:30:54 2026 GMT
            Not After : Feb 17 18:35:54 2027 GMT
        Subject: CN=34A31E540B1F090598851D1E5D3180D5900F5AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:99:54:76:fb:d5:2a:e5:93:13:46:50:b8:
                    23:b9:1e:91:68:15:c0:05:fe:0b:c8:b8:08:b3:8c:
                    e3:53:d8:10:ef:fd:ac:9d:20:d3:d6:62:e5:88:de:
                    d7:ef:ae:cf:80:e9:27:9e:5c:7e:62:01:be:c3:e4:
                    64:0b:fc:d4:66:67:62:c1:a6:05:05:c2:b7:b4:3c:
                    6d:51:c5:14:be:72:1e:cb:0d:c4:62:18:1a:f1:22:
                    f7:ad:b8:78:3e:25:51:a8:05:ac:93:b7:ac:0c:6e:
                    b2:7b:28:0b:2d:4d:3f:13:f5:4e:49:74:57:83:23:
                    72:14:28:88:03:8d:00:21:8c:d0:00:3d:34:3a:c6:
                    de:09:1b:d5:8a:18:5a:83:37:98:b9:80:37:1d:33:
                    f8:a6:40:21:eb:c6:6d:97:b6:85:c1:08:a4:85:d2:
                    c1:0c:8e:68:65:2c:8d:da:20:08:e3:20:d8:6d:9e:
                    30:82:7e:e5:db:ce:82:72:f0:25:7a:dd:51:42:42:
                    28:7e:b4:c2:91:5a:f5:3c:e0:49:18:44:d5:ff:6f:
                    52:70:f7:ce:77:f8:a7:a5:13:2c:a0:4a:aa:7e:ac:
                    14:ec:92:b2:61:b5:cb:f8:62:59:9f:6d:5f:02:d1:
                    d9:89:b8:aa:0f:8d:51:88:a2:87:bb:8e:73:e2:47:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A3:1E:54:0B:1F:09:05:98:85:1D:1E:5D:31:80:D5:90:0F:5A:F5
            X509v3 Authority Key Identifier:
                keyid:57:6E:30:64:18:DE:E0:89:69:A5:31:6F:2A:E7:49:9B:ED:09:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/576E306418DEE08969A5316F2AE7499BED09EEC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/576E306418DEE08969A5316F2AE7499BED09EEC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HePoM9r8cgCNfDE7Xhf2uvTxEX2MnEGPfhndYnNjznQK/0/3139312e33362e3133302e302f32332d3233203d3e20323633333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:1e:33:c1:3d:c8:ca:67:8c:16:77:ca:2a:34:25:a1:01:11:
         55:3e:b7:8d:b6:cb:d1:e8:ac:df:b0:20:bb:97:d6:3a:cd:57:
         de:33:0f:bf:f1:d0:0a:c1:55:2d:0c:45:37:2a:f7:2f:75:ad:
         97:ac:a3:5b:00:c8:ae:fc:8d:a2:37:fd:c8:20:c5:e2:00:aa:
         34:7b:9a:33:47:d8:10:28:05:e1:78:f9:15:66:8f:d3:c0:9f:
         23:69:2a:f8:91:90:23:55:67:70:eb:0a:06:df:5f:8e:ec:9e:
         0c:2d:6b:78:4b:5e:7b:c2:ce:39:29:d1:f6:da:14:89:16:38:
         8d:f3:00:50:c0:93:13:79:ae:5b:90:62:e6:b1:3f:10:cf:20:
         93:a6:79:00:a8:69:ca:5c:18:40:00:58:9d:1b:62:3a:87:55:
         5c:ea:d2:19:fd:e9:be:8a:2f:01:95:38:bf:0d:69:36:e0:0f:
         12:88:87:f5:d6:27:26:7e:3a:90:ad:c4:a8:2d:f4:89:da:86:
         b4:76:04:41:72:87:4b:07:4f:ed:40:8b:8b:3e:f8:da:65:e5:
         41:91:28:7a:61:d4:39:90:74:d7:a4:17:94:95:61:bd:bd:f7:
         6b:7b:dd:35:0a:12:70:c5:5e:1e:04:1e:d9:c0:e5:df:33:e9:
         23:ad:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:47 2026 by rpki-client