Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
File:                     3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (raw, json)
Hash identifier:          Wl3NM8LcidtB9ABien1wpKt4MxmMwZ7mN01Y9qxRLP8=
Subject key identifier:   CC:A2:FB:87:78:C9:8D:AA:9C:A4:EA:46:50:16:9D:29:8A:32:9C:9A
Certificate issuer:       /CN=2AADFACED9C75E320914697A02E254A3D463839A
Certificate serial:       3524A643918FB6BF3D282B4E8944C17B35B6F113
Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa
Signing time:             Thu 05 Feb 2026 08:40:37 +0000
ROA not before:           Thu 05 Feb 2026 08:35:37 +0000
ROA not after:            Thu 04 Feb 2027 08:40:37 +0000
asID:                     53120
IP address blocks:        187.111.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl
                          rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 12:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:24:a6:43:91:8f:b6:bf:3d:28:2b:4e:89:44:c1:7b:35:b6:f1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A
        Validity
            Not Before: Feb  5 08:35:37 2026 GMT
            Not After : Feb  4 08:40:37 2027 GMT
        Subject: CN=CCA2FB8778C98DAA9CA4EA4650169D298A329C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e3:0a:c7:ef:8a:3a:8e:62:e6:42:9a:7c:ea:
                    1d:0f:d4:4f:31:28:8a:34:6d:a2:db:77:b2:59:73:
                    cf:fa:80:53:aa:dd:ac:5e:bf:51:79:45:c5:81:7f:
                    08:5d:40:68:9e:13:35:b2:88:1b:56:e9:88:dc:77:
                    a6:54:d1:5f:60:96:38:4e:cc:47:b8:bf:dc:4b:3b:
                    60:fc:39:a3:f7:2f:e1:0e:36:49:9f:29:fb:d9:7f:
                    5e:2f:75:5e:15:d7:73:d8:03:37:ae:4f:ef:81:b9:
                    78:5f:f5:61:ba:fb:5f:18:e8:91:c7:fd:25:cd:33:
                    de:46:95:3f:d0:4f:e3:f3:22:72:60:3f:1c:cb:75:
                    b7:7a:0f:c1:ed:72:47:f0:fe:d6:a1:03:7c:58:87:
                    30:92:06:e6:27:d3:44:5a:42:69:bc:38:36:99:c3:
                    50:76:37:83:1c:48:3d:19:5a:f0:51:c0:3e:a7:f9:
                    7d:75:02:bc:fd:73:a5:7a:16:72:01:c1:ab:c3:ef:
                    54:22:13:bd:c4:14:83:51:84:f1:60:04:7c:c0:aa:
                    3f:3b:6c:29:af:ba:3f:69:03:3c:eb:85:23:12:aa:
                    9a:c7:a2:b2:27:db:06:f9:d7:d3:6a:4e:69:5d:97:
                    29:df:8e:3b:9e:c0:27:b3:38:f6:a2:6b:cd:78:84:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A2:FB:87:78:C9:8D:AA:9C:A4:EA:46:50:16:9D:29:8A:32:9C:9A
            X509v3 Authority Key Identifier:
                keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/3138372e3131312e31362e302f32302d3234203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:5e:eb:6e:0e:bf:04:90:16:a6:55:d1:0a:4c:94:9c:c4:10:
         51:a7:26:3b:f2:b9:ed:22:31:81:60:6d:6e:87:71:7b:9d:7a:
         58:e7:ec:0d:02:da:83:40:ed:3e:1a:0d:d9:56:8e:c0:d2:24:
         fc:5e:1f:28:3a:e2:ed:64:8a:1d:13:b5:9a:80:e5:dd:e6:db:
         47:1a:69:16:e6:3c:2c:64:46:9f:f6:f1:3c:9e:12:23:78:97:
         ed:e1:0d:ff:6c:2a:27:c5:33:1f:58:39:f7:90:69:a6:60:05:
         ef:00:99:00:29:78:05:17:ac:44:15:44:2c:63:b3:c3:de:f6:
         1c:d9:b4:9c:5a:c5:3a:af:d6:e5:d5:8a:92:23:66:aa:b1:4d:
         5b:25:20:a1:3c:54:cf:1c:d6:61:d5:67:fd:da:7c:47:c2:73:
         86:17:2f:10:c3:97:55:53:49:9b:18:77:18:52:70:29:0d:fd:
         cc:c0:aa:e0:60:d8:6b:50:fb:94:2a:96:d5:20:c7:ee:d6:b8:
         8e:a2:da:7a:e0:bc:09:5d:4c:d6:c4:a1:02:d4:22:42:eb:0f:
         76:cc:b9:d0:b1:87:1a:ce:11:65:f3:99:48:a8:ce:47:ec:a4:
         1b:87:f4:c2:09:0c:50:2e:8e:db:c5:bf:d4:ea:36:26:f9:78:
         ee:c0:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:11:23 2026 by rpki-client