Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
File:                     3138392e38392e36342e302f32302d3230203d3e203238313834.roa (raw, json)
Hash identifier:          kVvBY9Y6jhSWtJqBgAMulS0e3JsWb3O1bptIPEw/Wno=
Subject key identifier:   A6:C2:F6:24:AF:E3:AF:6C:A9:59:C3:0E:B4:E5:11:A4:EE:04:C4:29
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       582722A62D65AE5D376DD3036ECB17CF29E46547
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa
Signing time:             Thu 29 Jan 2026 16:58:27 +0000
ROA not before:           Thu 29 Jan 2026 16:53:27 +0000
ROA not after:            Thu 28 Jan 2027 16:58:27 +0000
asID:                     28184
IP address blocks:        189.89.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:27:22:a6:2d:65:ae:5d:37:6d:d3:03:6e:cb:17:cf:29:e4:65:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan 29 16:53:27 2026 GMT
            Not After : Jan 28 16:58:27 2027 GMT
        Subject: CN=A6C2F624AFE3AF6CA959C30EB4E511A4EE04C429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c3:b9:00:98:2c:99:8b:a1:40:ea:fb:cc:d2:
                    63:55:d9:2e:2d:c5:84:e3:6b:d0:d3:f3:24:7a:0a:
                    c8:d9:e5:34:20:e5:25:ab:13:38:95:5f:7c:05:f6:
                    2f:48:69:8f:ce:9d:df:1f:0b:de:ef:5d:d5:af:78:
                    23:43:ee:e5:65:5e:ee:09:08:bb:51:72:94:d2:c8:
                    2e:de:45:9a:64:ad:77:ae:54:bd:71:ee:91:15:0b:
                    68:1d:fe:16:51:9d:26:39:f8:1c:fa:d7:82:08:5d:
                    6c:de:1c:b6:6d:5b:39:62:8b:19:61:c1:1a:fb:46:
                    17:8b:0b:02:ab:3f:26:52:6c:6b:f7:f6:96:ea:4a:
                    0f:38:a5:3d:5a:dd:e0:cb:08:81:06:66:9d:a0:e9:
                    44:f9:61:ab:f7:ba:55:0e:cb:f4:c9:24:0b:25:ca:
                    8b:86:86:a5:50:17:83:9b:e9:81:13:22:ba:12:40:
                    32:bf:82:be:22:cc:3a:3b:08:54:cb:50:04:36:70:
                    e7:6d:f7:a5:58:80:91:38:6a:20:d3:d2:fb:ab:fd:
                    d3:8f:f3:f8:b2:ef:5c:ae:99:2c:0c:21:12:4b:67:
                    9d:95:ee:22:df:4e:6f:5b:a4:9e:a5:46:03:84:59:
                    28:80:fc:b0:1c:c5:bd:53:3c:d4:02:30:cb:29:4e:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C2:F6:24:AF:E3:AF:6C:A9:59:C3:0E:B4:E5:11:A4:EE:04:C4:29
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32302d3230203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:a6:f1:2b:8d:63:8a:27:cc:4a:1e:71:43:3a:fe:21:94:c2:
         56:a7:25:6a:9e:9f:b2:57:45:af:d6:00:9b:c3:5f:4f:f8:3c:
         98:cc:c4:b7:8c:a5:e0:50:38:33:c2:bf:03:fe:45:9f:16:e3:
         ef:f1:e6:9a:19:f9:4d:9a:c3:d4:ce:ce:f7:8e:ee:34:3a:a8:
         19:5d:84:ca:aa:8f:a2:0b:2f:b6:42:91:b7:a2:47:d5:56:76:
         70:fa:60:f1:bc:21:c4:5c:f0:a1:ee:3d:12:9a:fa:4d:cd:3b:
         1b:95:e1:3f:94:4f:2a:ae:e9:0d:0a:fb:1b:fe:e0:d3:a2:9b:
         4d:a4:f8:43:37:c7:42:fc:bd:5c:05:99:e8:3c:44:22:24:76:
         17:a0:a0:cf:a2:02:f7:8d:24:85:33:0b:69:91:18:49:6e:95:
         ab:a0:3a:5b:b3:7c:a5:e9:d6:a4:7d:21:3e:da:f7:af:8d:83:
         25:1b:9d:ab:ce:15:24:a6:20:e7:1f:16:77:a8:e4:cc:0d:af:
         b2:73:8e:68:d2:7b:f1:a7:03:8a:88:94:9d:80:95:3d:d2:ec:
         d7:4b:78:18:42:68:9e:f3:f0:85:6b:44:f7:18:0a:c4:4d:ca:
         33:c3:c6:12:97:49:50:e2:19:b6:97:bd:fb:cd:57:62:e7:a1:
         04:ab:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:25:12 2026 by rpki-client