Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137322e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3137322e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          xr8GpUOi0XxtpJb+BjmfduTEhhq7ByAu4O7f+CKDLK8=
Subject key identifier:   E3:B4:7A:2B:60:36:B3:7A:AC:FA:B4:13:5B:44:05:E8:DB:F5:93:0C
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       755A7816FC689DCCD6FE217122839937BC9419EA
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137322e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 29 Jan 2026 16:18:12 +0000
ROA not before:           Thu 29 Jan 2026 16:13:12 +0000
ROA not after:            Thu 28 Jan 2027 16:18:12 +0000
asID:                     263508
IP address blocks:        191.243.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5a:78:16:fc:68:9d:cc:d6:fe:21:71:22:83:99:37:bc:94:19:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 29 16:13:12 2026 GMT
            Not After : Jan 28 16:18:12 2027 GMT
        Subject: CN=E3B47A2B6036B37AACFAB4135B4405E8DBF5930C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:41:e9:84:d1:34:b8:d7:98:95:fb:a4:f1:
                    8a:81:7b:9b:9c:64:09:1f:c6:c0:f4:f2:1b:bf:97:
                    34:5d:31:12:21:74:65:99:d9:0e:5e:1a:cd:a4:58:
                    a7:9c:ab:9d:4d:69:f0:2a:b2:45:72:95:3e:67:48:
                    9c:e5:ca:4d:25:f7:23:4b:64:ac:4e:e6:61:1f:fe:
                    f4:4d:53:3a:aa:55:fd:b7:05:1d:71:d8:e9:9e:98:
                    a2:f7:ee:1b:e2:40:19:a6:78:09:53:fa:a1:0f:b2:
                    6e:9e:f1:50:cb:4a:e8:16:11:8a:d9:09:d9:4f:75:
                    dc:45:75:82:12:09:e2:f8:b9:c3:06:b8:b4:35:07:
                    75:44:bb:71:4e:2d:4a:1c:c1:8b:a5:24:9e:47:db:
                    a6:70:8d:e8:d5:7a:e2:ab:c6:99:6d:d0:60:c0:c6:
                    68:73:37:8a:9b:34:88:e8:e0:d5:75:74:c0:1b:9c:
                    22:c1:bb:2c:1f:96:e2:8e:4b:53:d1:7d:e4:d0:4a:
                    0a:ad:65:0f:f8:e6:b8:bd:97:f4:f7:f9:ba:14:af:
                    3d:ea:9c:a6:c7:82:06:3b:4b:17:ca:ac:d1:6d:4e:
                    f1:86:39:40:7b:57:c8:29:5a:1c:c3:46:49:19:33:
                    79:05:60:5f:89:c9:95:c5:57:c2:ff:e0:f4:5d:4a:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B4:7A:2B:60:36:B3:7A:AC:FA:B4:13:5B:44:05:E8:DB:F5:93:0C
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137322e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:f3:6b:85:64:e9:42:32:98:b8:76:8d:0a:6c:6e:e6:f9:
         6d:f2:80:e9:6d:c6:09:68:ef:08:11:6e:66:9a:42:a2:6b:81:
         fd:5d:af:c7:64:dc:d3:00:67:54:11:7a:2d:1f:e9:49:3d:e6:
         1a:e3:3b:48:75:cc:81:8b:92:a6:61:b2:35:25:7b:3a:70:88:
         0e:44:3b:96:54:36:2c:f4:de:b0:eb:56:d4:e7:1c:ce:c4:ca:
         5d:c3:f5:2e:0c:7c:2f:e8:1a:fa:b6:ad:ff:e0:ee:1c:70:8e:
         9f:64:db:d1:8e:32:a7:f8:e3:b8:1f:ec:5f:92:e1:24:42:5b:
         3b:12:28:23:34:50:90:15:17:fe:f9:d4:98:b0:24:ba:7f:69:
         af:ba:14:cf:3c:2a:0b:20:9b:85:2f:f0:ae:30:4b:64:1f:06:
         87:a3:85:d5:f8:aa:0d:9a:61:46:63:91:e3:a6:a2:55:da:51:
         4f:40:a1:e4:e1:d8:7b:5d:49:2e:3f:55:55:ba:07:e4:65:aa:
         d6:b3:07:53:af:2d:a1:1c:d4:2f:e4:38:bc:29:0e:82:a3:f5:
         a1:85:f1:2c:8f:05:96:22:1f:a9:16:38:e1:dc:20:ce:eb:67:
         46:fe:4c:7a:9a:b7:d5:21:5d:76:18:fc:e8:3a:8a:77:6c:9c:
         d1:c3:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:53:38 2026 by rpki-client