Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/3138372e38362e3234302e302f32302d3234203d3e203533303732.roa
File:                     3138372e38362e3234302e302f32302d3234203d3e203533303732.roa (raw, json)
Hash identifier:          jirMAjIqTDPQhE/Wgd/GJlnj6ZCPYs+tFfpFqpZntEw=
Subject key identifier:   C9:1D:C2:87:94:36:4B:EC:42:F5:32:ED:5A:51:7A:87:46:39:76:4B
Certificate issuer:       /CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768
Certificate serial:       42F3420137D9457B5CABE60AE5BAFD1DD4C3828D
Authority key identifier: EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/3138372e38362e3234302e302f32302d3234203d3e203533303732.roa
Signing time:             Mon 16 Feb 2026 19:21:26 +0000
ROA not before:           Mon 16 Feb 2026 19:16:26 +0000
ROA not after:            Mon 15 Feb 2027 19:21:26 +0000
asID:                     53072
IP address blocks:        187.86.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl
                          rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:42:01:37:d9:45:7b:5c:ab:e6:0a:e5:ba:fd:1d:d4:c3:82:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768
        Validity
            Not Before: Feb 16 19:16:26 2026 GMT
            Not After : Feb 15 19:21:26 2027 GMT
        Subject: CN=C91DC28794364BEC42F532ED5A517A874639764B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:31:86:c7:11:92:cf:9c:71:39:1f:96:c7:
                    69:37:e7:ae:90:ec:3d:2b:e4:db:f3:cf:6f:6d:9d:
                    61:3b:b6:8a:a7:f3:ff:f3:31:81:19:03:86:e6:44:
                    51:0c:b1:3d:44:d7:da:6e:ec:69:db:00:8e:ce:f4:
                    36:d3:fa:49:a4:88:a8:b4:2b:bf:90:e4:f7:f9:ab:
                    c1:9e:c1:17:a9:6e:ae:76:c9:69:d4:3f:e1:68:f5:
                    a4:8e:33:f7:0d:05:cf:08:73:4e:75:78:45:0d:95:
                    2a:16:c9:fc:df:6d:fa:de:86:1f:1a:b4:28:b3:a1:
                    2f:0f:a1:a5:f8:a9:97:bd:3c:e3:6e:56:f6:af:e5:
                    44:ca:e5:df:57:65:cc:1d:8e:ce:e7:c9:d1:89:25:
                    a5:98:00:be:5b:03:d0:a1:54:64:33:57:db:bf:0f:
                    a3:92:75:42:5c:e0:a5:a6:22:32:f0:20:c7:59:02:
                    10:71:62:0a:5b:66:76:af:71:6c:41:2f:27:28:2e:
                    55:3f:a2:53:5a:ab:8a:02:1c:a7:4b:69:06:47:a0:
                    17:78:24:65:24:f5:78:a8:35:35:e3:80:14:33:68:
                    a1:2c:0b:91:d7:91:fd:d3:37:39:ae:fa:d7:9a:60:
                    b9:f2:80:f0:b2:4f:e2:a1:bc:15:db:59:a9:c1:00:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:C2:87:94:36:4B:EC:42:F5:32:ED:5A:51:7A:87:46:39:76:4B
            X509v3 Authority Key Identifier:
                keyid:EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/3138372e38362e3234302e302f32302d3234203d3e203533303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:5a:d7:2f:a4:c0:1d:48:3a:3a:bc:d6:1f:f6:a5:12:dd:d8:
         b3:5f:26:dd:28:dc:a9:cb:82:08:69:79:a6:61:e8:04:6b:74:
         10:3e:d2:9f:e4:16:f2:7f:08:9f:f2:c4:9f:e4:2a:fb:85:25:
         c7:cf:b2:73:0d:56:bd:44:4a:4f:4f:39:fc:62:55:c6:42:b7:
         16:4c:df:a9:05:d5:19:28:af:d3:e6:dd:41:be:c2:62:e4:af:
         9b:94:52:e9:f1:c9:82:40:e9:c8:08:c9:00:a9:b7:79:0f:1d:
         e8:c6:e9:4c:60:fe:f2:81:f1:63:e7:a2:fe:e1:ce:af:53:73:
         3b:7d:09:99:bb:b5:c2:a5:4a:2c:90:b8:96:3f:bb:78:2d:27:
         92:f4:9e:f5:b6:f1:74:63:ea:85:f4:8f:d0:85:73:09:31:fe:
         15:21:de:da:5f:8e:5c:9e:57:1e:bd:d4:91:c9:86:b9:c1:7a:
         ad:0b:28:b4:0b:02:d9:37:77:3c:a7:9c:68:32:91:0d:6d:5c:
         eb:b7:6f:d8:fe:d4:63:c4:d7:c2:c9:18:61:23:75:f9:7d:da:
         7c:70:15:59:ce:77:89:2d:80:06:8f:83:d3:92:a3:e1:ef:66:
         22:64:07:bd:9e:ee:3f:16:49:e3:9c:36:a9:5b:45:cd:67:35:
         8d:ac:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:49:09 2026 by rpki-client