Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3234203d3e203238313834.roa
File:                     3138392e38392e37342e302f32332d3234203d3e203238313834.roa (raw, json)
Hash identifier:          OPeZ9yvaFXeHIBD+EfsjWPVgCCApKZ0tb/j48QxypZQ=
Subject key identifier:   DC:80:5E:94:BC:04:29:DA:FD:5D:57:85:D3:CD:2A:F8:7C:06:C7:79
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       3766A434BBD3A1074B82953ABFC660CC46A9D732
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3234203d3e203238313834.roa
Signing time:             Thu 29 Jan 2026 12:12:53 +0000
ROA not before:           Thu 29 Jan 2026 12:07:53 +0000
ROA not after:            Thu 28 Jan 2027 12:12:53 +0000
asID:                     28184
IP address blocks:        189.89.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:66:a4:34:bb:d3:a1:07:4b:82:95:3a:bf:c6:60:cc:46:a9:d7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan 29 12:07:53 2026 GMT
            Not After : Jan 28 12:12:53 2027 GMT
        Subject: CN=DC805E94BC0429DAFD5D5785D3CD2AF87C06C779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:af:55:0a:ea:18:58:d4:6d:7e:94:e4:0a:
                    e4:22:14:70:a1:88:f6:9b:8f:77:fa:1b:7b:3a:4d:
                    34:04:97:20:5e:54:2a:9f:64:7d:e1:e7:66:36:72:
                    d3:2e:33:e8:fe:41:24:87:f2:5c:d2:5a:23:a6:1a:
                    98:d3:1c:ff:4a:d7:22:06:fd:fd:90:89:8b:b9:6d:
                    7c:f8:9d:a3:e0:ef:2f:15:6b:26:ed:82:a4:ea:03:
                    b9:d7:51:26:76:2a:05:69:23:1d:9f:93:a4:61:78:
                    e7:da:5e:82:9a:5f:f4:eb:37:7e:ab:a2:f1:a7:fd:
                    87:9e:14:1c:f6:e2:f2:2b:a1:f9:d7:7b:8d:74:a8:
                    7c:98:4d:10:af:28:13:ab:b9:df:41:5e:f5:97:94:
                    32:c1:52:98:0b:99:0b:0d:46:af:c6:fe:b3:74:45:
                    a4:cf:c1:10:8f:f6:fc:5e:bb:ee:17:5a:af:2e:67:
                    37:36:b3:1b:50:4a:ff:b6:88:06:c8:37:55:05:c6:
                    ba:3c:55:9a:97:db:33:c0:66:e1:dd:68:db:9f:43:
                    88:8a:99:cf:6e:e4:a0:c8:61:61:14:2d:ad:fa:36:
                    f9:4b:b5:11:5b:71:cf:e2:35:a3:18:ee:aa:d5:6c:
                    e1:02:a6:e4:a0:dc:ff:bd:62:6d:fb:22:60:1c:c3:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:5E:94:BC:04:29:DA:FD:5D:57:85:D3:CD:2A:F8:7C:06:C7:79
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37342e302f32332d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:33:34:4e:0a:b4:6b:71:44:ed:ab:cd:af:6a:9e:98:2e:
         83:26:48:ec:a2:c5:0f:2e:85:2d:d4:4b:87:63:77:3f:16:57:
         fd:05:45:41:5a:3d:6f:8e:0a:36:ac:08:2e:04:6b:0b:72:4d:
         37:7b:b0:94:22:12:f3:98:04:8d:be:33:6e:29:0e:9e:8a:a9:
         3a:bc:27:fc:c2:80:9f:c0:7d:8c:a6:16:ff:f8:bc:a7:51:fe:
         1d:be:b5:91:aa:de:8d:52:1c:05:bb:6c:9e:05:73:ef:b1:0d:
         2f:e4:0f:e0:da:78:0d:44:a9:01:31:e0:58:ec:e8:22:f1:97:
         0a:58:64:77:b0:13:52:b3:df:3c:d8:8c:1a:b9:25:c6:04:e1:
         90:12:36:61:db:02:fe:af:54:f7:ab:07:54:49:ba:53:b3:56:
         63:5b:8b:7b:af:4b:ba:b8:cb:54:2b:5a:a7:29:97:d5:8f:65:
         6b:d2:17:0b:0b:32:1f:c4:b0:60:11:10:fe:c3:21:15:74:82:
         44:e2:26:4e:5e:17:fd:0d:5c:93:53:d2:9c:b8:f9:b7:0e:da:
         b7:c5:c2:99:dc:34:6b:e9:b4:c6:ab:41:92:b7:32:c9:ae:2a:
         0f:47:9e:2b:4f:d4:89:50:95:e7:b3:b2:52:32:d3:3c:46:44:
         77:d5:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:57 2026 by rpki-client