Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
File:                     3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa (raw, json)
Hash identifier:          O4Lnv+fUZ2wky7BEiL4gZFmBQzTpz6bX1o5rua7QxnM=
Subject key identifier:   F6:60:AA:AF:FA:25:1B:D8:8D:F1:0E:6E:1F:21:42:13:17:50:AD:97
Certificate issuer:       /CN=73E65EE174B429E845F371CDDD00B81BC489A017
Certificate serial:       63DD29491615BCF57DED61228ABBAC751D10ABEF
Authority key identifier: 73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     270540
IP address blocks:        189.85.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl
                          rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:dd:29:49:16:15:bc:f5:7d:ed:61:22:8a:bb:ac:75:1d:10:ab:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E65EE174B429E845F371CDDD00B81BC489A017
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:3d:1c:75:44:ae:ce:7d:03:b5:d7:ee:2c:
                    1d:ee:c0:05:c2:44:ed:db:bd:ea:cf:bf:2b:b6:e6:
                    71:ba:1f:b0:94:a3:b2:94:3b:5d:02:6c:cd:51:a2:
                    e1:c3:f9:a0:d2:fd:31:d4:b9:0b:55:67:2c:e5:2c:
                    4c:f8:ae:84:89:f7:99:49:99:11:c6:38:d9:b1:37:
                    b5:ad:ca:c9:23:a7:60:07:81:79:f2:49:4b:72:74:
                    25:e3:fb:ff:3b:8d:32:0f:a5:75:38:bc:5b:a6:0c:
                    6f:fd:a9:86:d7:b9:e2:28:6a:a5:47:b9:05:5f:f6:
                    dc:d6:16:51:e6:86:50:0f:bb:c0:7e:1d:be:12:20:
                    6c:80:ad:f3:cb:21:ac:b5:d1:00:dc:1b:60:8a:5c:
                    5e:6e:16:1c:c8:df:be:ed:b5:87:b0:ca:70:36:b8:
                    ce:64:47:08:f5:2b:d9:d9:15:c3:fb:8c:08:66:fb:
                    7b:87:42:03:f2:bd:bf:e0:bb:89:22:d3:0c:93:0b:
                    25:f4:b3:db:1f:0a:7e:e7:2c:1b:dc:7e:b4:8d:d3:
                    3c:b8:f2:b6:14:f3:67:06:14:42:c8:98:70:18:92:
                    be:e4:88:67:7f:03:da:05:b8:43:c4:be:50:83:33:
                    47:15:de:06:a2:dd:77:14:2d:2f:48:15:53:1b:93:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:AA:AF:FA:25:1B:D8:8D:F1:0E:6E:1F:21:42:13:17:50:AD:97
            X509v3 Authority Key Identifier:
                keyid:73:E6:5E:E1:74:B4:29:E8:45:F3:71:CD:DD:00:B8:1B:C4:89:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/73E65EE174B429E845F371CDDD00B81BC489A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E65EE174B429E845F371CDDD00B81BC489A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/snFV25XvGkaJxiuUEY188QhAXiw1KPoveBPm89bsVw1/1/3138392e38352e3131322e302f32322d3234203d3e20323730353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:04:73:98:ef:84:dd:bd:32:06:c9:83:6f:21:6f:3b:07:
         08:f9:02:5d:3f:60:9e:d7:5f:0d:d6:0d:ce:1f:18:2f:1f:4d:
         dc:25:fe:93:8f:c6:bf:0b:2e:13:a9:df:4c:ad:b2:c0:e6:7b:
         2a:d9:ec:a2:0e:4c:b5:d4:ca:55:1b:5d:b3:d7:be:69:01:8d:
         d9:c0:da:e0:6a:d9:49:06:56:bb:c8:c7:4d:3e:a5:3d:fa:81:
         7e:8a:1d:66:bf:f2:87:86:aa:f8:2c:34:81:cb:5a:4a:52:c3:
         c0:e3:a1:23:df:97:a6:94:c0:54:1e:66:76:01:a7:6e:de:6a:
         14:6a:06:e6:c4:a5:5c:26:6a:99:f9:4d:6b:31:f9:6a:fc:6b:
         31:a3:37:e0:b9:56:fc:81:11:6a:57:c3:a8:4f:f3:15:a9:8b:
         b0:c4:d3:66:d6:7a:32:31:da:7e:6d:1f:a9:5e:f8:6c:79:13:
         df:b4:de:4e:5d:a4:dd:27:9b:04:d4:1d:0f:d0:02:48:6b:3b:
         7d:30:f0:df:e2:cf:d1:a2:b9:e6:1f:90:ef:45:9d:af:71:80:
         a1:97:ee:42:b9:fd:cd:8d:c8:f9:8a:4b:47:6d:7d:3a:d0:e8:
         61:78:db:02:cd:87:95:a5:2e:2a:2a:71:f0:16:ee:70:17:20:
         30:41:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:29 2026 by rpki-client