Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138372e31392e39362e302f32302d3234203d3e203238313330.roa
File:                     3138372e31392e39362e302f32302d3234203d3e203238313330.roa (raw, json)
Hash identifier:          FdHO8n/Cw9Tf5Q6J4PKxz18H6a7RJMaFmJr1S1UfhUA=
Subject key identifier:   72:DB:78:34:F8:A7:4A:6F:2D:BD:9B:EE:AA:D0:24:F2:1E:AB:D5:4E
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       2BB81CE99E22412C4AE9143365B86626DD599DD0
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138372e31392e39362e302f32302d3234203d3e203238313330.roa
Signing time:             Thu 05 Feb 2026 08:16:45 +0000
ROA not before:           Thu 05 Feb 2026 08:11:45 +0000
ROA not after:            Thu 04 Feb 2027 08:16:45 +0000
asID:                     28130
IP address blocks:        187.19.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b8:1c:e9:9e:22:41:2c:4a:e9:14:33:65:b8:66:26:dd:59:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Feb  5 08:11:45 2026 GMT
            Not After : Feb  4 08:16:45 2027 GMT
        Subject: CN=72DB7834F8A74A6F2DBD9BEEAAD024F21EABD54E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:fd:ac:23:79:2c:da:81:72:ff:ac:69:19:
                    98:8a:9c:fc:c0:30:34:f1:3b:d8:75:40:53:7b:be:
                    bf:b3:bc:5c:7f:d1:cf:78:ed:3a:38:fd:35:36:6f:
                    10:fd:f9:e6:80:68:ff:23:b1:3c:ba:d8:ba:9a:2c:
                    59:e1:4a:62:62:8a:cf:25:fa:b5:f0:86:02:86:3c:
                    e8:23:85:8e:29:10:32:91:18:89:ef:34:3c:31:b4:
                    03:03:cb:72:69:23:dc:1c:8e:a1:f8:84:fa:e1:2d:
                    73:cd:97:ea:26:74:6d:8b:d5:c8:f9:37:30:e7:9e:
                    3f:56:df:13:35:c1:19:98:5c:42:cd:a4:dc:59:dd:
                    7d:c9:f2:af:40:97:57:a9:01:89:4c:03:07:01:bc:
                    a3:30:d4:b0:3b:ec:77:43:ae:72:10:9c:9f:c6:93:
                    ff:a7:cd:71:74:06:7b:b1:97:b8:47:68:09:6b:a2:
                    07:9e:10:d7:49:3d:c4:f5:b5:52:c1:66:b7:2a:33:
                    ea:c7:10:fa:22:92:7b:9c:b2:98:c1:44:21:da:9d:
                    ca:e6:b6:72:9f:31:77:28:d1:4f:4d:5d:5d:9a:39:
                    d1:f4:c2:8e:4e:d8:9d:ee:18:db:52:09:ef:22:9d:
                    02:d3:93:81:f8:82:a1:3a:96:66:ea:4b:53:55:92:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DB:78:34:F8:A7:4A:6F:2D:BD:9B:EE:AA:D0:24:F2:1E:AB:D5:4E
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3138372e31392e39362e302f32302d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:31:1c:ec:e0:fc:ab:e3:5e:b9:30:c5:cc:37:63:ca:a3:6e:
         fc:cf:e0:81:9c:31:17:e4:8a:3e:a1:a5:dd:d3:df:28:fb:46:
         36:03:b6:62:1c:0c:a0:13:6a:e2:c6:aa:85:6f:94:46:f4:a4:
         36:89:35:00:ce:df:fd:ac:19:36:f4:54:05:81:9b:17:4f:bf:
         28:59:d8:55:b9:f1:f5:04:d7:93:61:30:8e:2d:21:d7:7b:c7:
         1c:7c:19:4f:5a:85:5a:9e:31:e3:24:42:0d:6c:0c:8a:2f:10:
         ae:8d:44:b7:f0:1d:60:74:50:94:f0:43:4e:18:61:cc:09:17:
         0d:e3:a4:5e:b6:2f:3a:55:77:ac:34:20:5c:e6:0f:bd:df:c8:
         b1:41:22:86:fe:f4:e4:8d:b9:0e:6c:89:42:cd:34:e7:b8:01:
         0b:56:3f:b0:ac:9f:f1:46:e9:53:d7:de:c5:81:3b:85:ed:36:
         12:40:31:1b:27:ea:e0:31:b7:8d:f9:6a:a9:57:05:20:2e:31:
         4c:5a:62:09:92:ba:81:2b:34:f0:04:07:d4:21:46:03:95:51:
         6f:57:8a:4d:d9:a8:cf:8a:55:82:14:21:a0:a1:3e:2f:6e:a3:
         e1:f5:f2:08:72:74:a6:c4:8b:e0:10:49:cc:29:de:22:15:b3:
         ec:79:77:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:57:00 2026 by rpki-client