Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa
File:                     3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          EHTmfoFRiEE+T9V6SHt8IyUSwAY4otUKzeBu6eT+3vQ=
Subject key identifier:   23:F9:DC:25:28:8E:5A:FE:64:48:3E:AD:59:F4:D1:8F:AC:C2:32:88
Certificate issuer:       /CN=5E82705FF857324984E1087AAFCCE6BD46657C71
Certificate serial:       141EED8FC3A3DE625D04C1F62D31D6C75843AD77
Authority key identifier: 5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa
Signing time:             Thu 08 Jan 2026 14:33:24 +0000
ROA not before:           Thu 08 Jan 2026 14:28:24 +0000
ROA not after:            Thu 07 Jan 2027 14:33:24 +0000
asID:                     263450
IP address blocks:        168.232.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl
                          rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1e:ed:8f:c3:a3:de:62:5d:04:c1:f6:2d:31:d6:c7:58:43:ad:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Validity
            Not Before: Jan  8 14:28:24 2026 GMT
            Not After : Jan  7 14:33:24 2027 GMT
        Subject: CN=23F9DC25288E5AFE64483EAD59F4D18FACC23288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:36:17:f6:4a:c6:19:4b:f3:bb:e1:b4:05:
                    35:b0:17:d0:13:c7:59:5e:d6:c8:ef:2c:bd:9a:c7:
                    9c:b0:9d:0a:25:fd:76:ac:c6:cc:ca:b8:3c:8a:d8:
                    b1:4f:63:2e:a4:80:1e:c1:1f:c6:4c:e7:ed:6d:9f:
                    4c:af:fc:aa:70:47:cc:09:1f:31:40:5f:c6:87:5a:
                    3d:67:d6:00:ce:73:d5:44:d7:5f:6a:31:e5:47:da:
                    79:b6:6b:d2:6f:81:25:2e:48:e7:82:9e:33:f4:b4:
                    41:35:48:44:9d:56:a9:8d:28:69:d7:63:98:28:3d:
                    07:4a:d2:16:8c:04:de:fe:4d:17:b3:5a:ec:ee:eb:
                    e4:39:d0:71:a4:0e:4f:26:7f:80:6c:3b:15:58:49:
                    eb:59:be:b2:88:a2:39:48:0d:98:16:ff:fe:ba:4a:
                    7c:a6:a4:0b:f4:32:49:f0:74:2e:b6:cd:bf:1b:a2:
                    e4:99:bb:8b:fc:e4:48:7a:cf:a6:80:7e:25:e6:ae:
                    b0:37:bf:30:9a:4e:85:12:b7:3d:1d:c9:92:c8:fb:
                    56:7d:3b:ae:14:59:e7:42:02:2b:e3:fd:e0:61:b9:
                    3f:4b:f4:8c:ca:48:43:96:41:82:b9:3a:2a:85:43:
                    36:10:fb:72:63:53:b6:a3:71:e2:b8:1c:65:dc:70:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:DC:25:28:8E:5A:FE:64:48:3E:AD:59:F4:D1:8F:AC:C2:32:88
            X509v3 Authority Key Identifier:
                keyid:5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:43:ac:9e:89:06:36:91:2e:fc:b3:dd:b4:57:7c:a8:e5:47:
         e3:39:ab:db:e8:7c:c4:ca:18:dc:3f:46:3a:13:ad:d2:e3:49:
         81:80:05:44:6c:30:3d:4f:13:89:84:ad:b6:1a:96:1b:91:fd:
         86:28:ae:f2:51:83:24:bf:14:3f:24:57:80:cf:d7:84:6b:62:
         96:d1:c1:40:c9:dc:1d:a1:ee:93:0e:eb:e8:b1:e4:46:4b:1a:
         32:5e:a0:a7:0a:52:72:9c:54:ab:b9:f8:bb:ce:95:8d:8f:a4:
         56:54:6f:31:ec:43:6b:19:28:7d:f0:2c:07:09:81:85:81:f3:
         78:ad:e1:df:90:18:98:70:d4:14:f8:cf:fe:8e:31:a4:a8:18:
         9b:47:46:d3:a0:8c:04:dd:33:4d:ec:95:f6:75:e6:05:4f:76:
         be:c6:3b:d7:a5:da:fb:90:b2:5b:87:f8:44:38:26:44:5c:d2:
         7a:c6:8f:68:88:a5:de:c9:eb:c2:d2:01:5c:64:c0:57:6f:3e:
         be:e5:79:0a:aa:12:d7:93:19:ff:aa:66:f1:98:6f:40:b3:a1:
         9d:cf:eb:03:8f:c9:3a:24:4f:d2:25:58:94:5a:60:f9:15:76:
         72:49:30:94:b1:3b:c7:1b:bb:c4:80:a1:ae:66:73:3a:f8:15:
         fb:1e:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:19:43 2026 by rpki-client