Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa
File:                     3138372e3130392e31362e302f32302d3232203d3e203533313132.roa (raw, json)
Hash identifier:          FYhc78pucaw7SWoWpYl3wU+LRvVHKLb5YpVZDFro0IM=
Subject key identifier:   44:FB:33:D9:F5:85:DB:00:99:9F:FD:C2:F1:1A:D7:F3:1D:77:A1:77
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       068B93CA01F727E2CA878DD2DB40FE8BEA93FCD6
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa
Signing time:             Thu 05 Feb 2026 11:02:33 +0000
ROA not before:           Thu 05 Feb 2026 10:57:33 +0000
ROA not after:            Thu 04 Feb 2027 11:02:33 +0000
asID:                     53112
IP address blocks:        187.109.16.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8b:93:ca:01:f7:27:e2:ca:87:8d:d2:db:40:fe:8b:ea:93:fc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Feb  5 10:57:33 2026 GMT
            Not After : Feb  4 11:02:33 2027 GMT
        Subject: CN=44FB33D9F585DB00999FFDC2F11AD7F31D77A177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:46:74:9f:47:3a:04:7a:87:60:41:73:6d:
                    9c:c9:b3:42:08:14:8e:c4:c3:2d:c6:43:a4:03:0c:
                    f2:5e:f6:34:cb:7d:62:16:55:2e:75:78:81:00:57:
                    6c:c4:6b:ef:79:d0:db:a4:7f:ae:7e:d5:f3:8b:76:
                    6c:b6:34:fd:59:0e:6b:65:aa:5f:87:0d:4e:80:b6:
                    4f:6e:43:c4:5f:9e:b8:39:82:e0:55:88:31:85:b3:
                    0b:a7:07:aa:46:fe:9e:ae:67:1e:5a:f5:d8:d2:be:
                    d1:ef:2c:a8:11:0d:32:b5:7c:5f:64:73:f6:3c:e2:
                    72:c2:42:62:91:30:98:ee:5d:fe:3e:77:5e:43:a3:
                    39:8c:bb:95:96:a3:be:fc:a6:32:65:79:bf:5f:db:
                    94:ed:90:ab:14:45:03:1a:a9:f3:7c:df:27:d0:24:
                    31:4a:e1:bd:eb:9e:85:cb:a0:33:7e:44:de:d8:a4:
                    c7:c6:6d:41:94:a4:8c:ad:67:dd:8d:b2:4b:0e:33:
                    c6:4b:7f:b3:e0:4d:4c:84:0b:79:aa:d3:7e:83:9b:
                    8c:9f:2d:18:61:75:b2:64:4e:61:11:b0:8b:8b:00:
                    7f:73:05:09:da:69:9b:c8:2f:aa:46:13:23:aa:1c:
                    47:8e:72:e9:36:f4:62:0d:df:d8:be:f8:7d:50:44:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FB:33:D9:F5:85:DB:00:99:9F:FD:C2:F1:1A:D7:F3:1D:77:A1:77
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3138372e3130392e31362e302f32302d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:82:4f:31:2f:e1:ae:bf:10:42:3f:a6:14:91:80:8c:2a:e6:
         85:e0:03:c0:b3:28:a4:18:70:1b:76:bc:6c:2f:c4:d3:5b:0f:
         c8:ba:e0:cb:61:21:35:0b:02:31:56:32:28:8e:4b:d0:0b:4a:
         32:be:d4:e6:de:e4:1f:eb:6b:c1:10:e3:77:ce:18:38:6f:f8:
         82:49:8e:37:16:71:21:d6:98:b6:5d:8d:66:aa:3f:c4:7c:f4:
         7a:87:c9:da:39:d5:1b:8a:d5:90:11:62:4a:9d:20:61:ab:0c:
         65:e8:e3:60:18:19:98:f2:4e:15:a1:2f:82:a5:27:94:9b:5b:
         93:e8:2a:54:75:16:14:4a:1a:bd:b2:aa:43:af:b6:4a:e7:41:
         2a:7a:b6:e7:36:35:be:4b:63:ae:aa:32:e5:7d:e1:fd:d4:48:
         4e:52:46:68:a1:2c:2b:ad:ef:66:fe:14:c2:ee:a2:fb:30:d9:
         07:dc:72:cd:8c:6f:b8:65:a6:d6:36:83:e9:21:e4:81:8c:99:
         8d:c6:e1:3e:ba:7d:e9:4b:8e:ec:90:ef:2a:2d:67:0b:ef:3d:
         6d:75:a6:4e:91:9d:51:31:fa:5a:0f:d5:89:0f:bd:11:7a:74:
         4b:c8:ed:48:9a:a7:e9:9b:66:20:11:5d:35:89:6b:8f:1a:65:
         6c:89:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:53:28 2026 by rpki-client