Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa
File:                     3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          9FuxKoWhYl1ixFherllOXF1tv/90wNeRgR2VBXCv/OM=
Subject key identifier:   0F:AB:75:8C:22:80:2D:58:C0:12:17:C5:2D:2F:C6:10:6F:B8:0C:3E
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       4A25B2CEB2E400E4FBF4ACA65F0BC8DA47BB833A
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa
Signing time:             Mon 19 Jan 2026 16:00:21 +0000
ROA not before:           Mon 19 Jan 2026 15:55:21 +0000
ROA not after:            Mon 18 Jan 2027 16:00:21 +0000
asID:                     265911
IP address blocks:        131.196.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:25:b2:ce:b2:e4:00:e4:fb:f4:ac:a6:5f:0b:c8:da:47:bb:83:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Jan 19 15:55:21 2026 GMT
            Not After : Jan 18 16:00:21 2027 GMT
        Subject: CN=0FAB758C22802D58C01217C52D2FC6106FB80C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:f4:d9:6a:9c:e5:a6:b8:c2:f5:7f:05:ce:
                    78:bc:63:3e:ad:4b:16:06:2f:d4:dd:5e:b2:d6:18:
                    69:9b:45:41:35:9e:fa:af:b0:92:d0:59:24:23:42:
                    ed:7f:d8:55:83:6e:42:f6:23:93:6c:de:24:04:db:
                    62:88:23:6b:32:34:b3:ff:96:96:b7:c3:d2:51:b3:
                    1f:50:79:b3:b0:c0:17:8f:65:f5:4c:50:df:a1:b8:
                    92:68:ed:4f:c1:35:3d:32:9e:12:17:eb:19:cb:00:
                    c7:67:a3:79:70:d7:e7:ae:60:15:d5:91:15:3f:72:
                    93:b4:0d:ca:61:01:0a:89:e5:b4:91:9b:0e:7c:2c:
                    f1:dd:9c:d0:3b:21:a7:0d:92:82:68:8f:0c:67:ff:
                    8b:fb:46:88:0d:09:c3:50:16:f4:66:6e:11:f3:b5:
                    c3:73:d9:4d:5f:94:80:8d:06:a9:28:75:9e:3e:99:
                    af:74:be:aa:ed:60:a4:49:21:e4:ec:ce:69:bc:ae:
                    ee:86:df:27:53:ce:95:8b:08:7c:f4:6c:18:55:d3:
                    17:f5:16:65:14:b7:b0:c7:82:85:05:87:c8:65:8e:
                    d5:bf:1a:85:af:dc:55:63:ab:ad:23:6f:d9:bb:00:
                    f3:58:e7:bd:84:12:1d:50:7d:92:12:e0:ca:78:1c:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:75:8C:22:80:2D:58:C0:12:17:C5:2D:2F:C6:10:6F:B8:0C:3E
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3133312e3139362e3134342e302f32322d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:6f:17:8f:3a:64:b7:9b:10:a8:e8:ca:41:3f:b2:3a:7f:8c:
         e4:45:f2:40:6b:a5:ab:32:9c:16:82:fc:c8:b0:0c:fe:0f:82:
         5b:27:92:bb:13:46:ea:ce:8f:bc:cd:f3:cc:a1:d5:39:9e:9d:
         b8:48:db:a8:92:95:aa:20:3d:bb:3e:a0:6b:41:c7:b6:5e:1e:
         6f:d3:6c:12:5e:5c:03:90:18:ea:62:31:36:51:dc:be:1f:24:
         1f:0d:04:45:75:1a:20:77:d5:7b:3c:7b:7e:8a:31:b8:c6:a9:
         f5:71:f6:b2:b6:6e:3f:e7:25:40:fc:12:ad:45:fe:a4:b6:fe:
         ee:2c:b8:6c:5f:46:55:c8:57:c0:33:81:ac:40:c7:a0:04:08:
         1a:c0:45:df:6c:d8:59:07:7b:37:c6:0a:06:18:7e:ab:74:58:
         e8:bc:36:6e:1f:1d:26:91:e6:bb:94:00:45:87:ae:a6:ae:b3:
         52:6a:a6:c3:58:2e:5e:39:ae:7d:a0:fb:ec:d0:43:6e:0f:da:
         1f:ee:bc:cb:4f:b1:bc:3b:45:dd:a5:2c:63:26:d2:36:76:6c:
         8c:d4:56:32:36:c2:f8:bf:67:a4:d8:8a:7b:55:8c:f2:39:56:
         25:f2:46:05:22:59:c6:6e:12:b0:17:4a:fb:fc:ba:39:0c:59:
         65:35:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:36 2026 by rpki-client