Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa
File:                     3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          7nL+gduQvzp8ML+OYxNOPJAkK8qY68P253Z1nez8wpE=
Subject key identifier:   FD:F5:2F:E9:B3:74:6B:96:E5:FD:F4:E6:EE:10:5F:CE:A1:5B:B3:4B
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       1FF22BC57E1347208C357635A60D99BE8B0B82D9
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa
Signing time:             Thu 19 Feb 2026 14:28:01 +0000
ROA not before:           Thu 19 Feb 2026 14:23:01 +0000
ROA not after:            Thu 18 Feb 2027 14:28:01 +0000
asID:                     52573
IP address blocks:        186.250.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f2:2b:c5:7e:13:47:20:8c:35:76:35:a6:0d:99:be:8b:0b:82:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Feb 19 14:23:01 2026 GMT
            Not After : Feb 18 14:28:01 2027 GMT
        Subject: CN=FDF52FE9B3746B96E5FDF4E6EE105FCEA15BB34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:7e:fc:ae:18:a3:de:1a:98:96:92:0f:14:
                    4e:f6:89:f7:2b:a2:a9:28:f8:0f:49:19:30:4f:87:
                    cd:49:9c:68:db:37:03:ab:68:c6:a8:cc:ec:32:f7:
                    99:20:82:30:79:38:7f:dc:bf:82:9f:64:3f:31:60:
                    b6:fe:41:ea:86:7c:4d:58:f2:7d:27:34:43:8d:f1:
                    bd:fe:73:20:92:76:83:fe:c6:c1:b5:ba:3b:de:9c:
                    48:6a:c3:7e:95:f9:45:f8:65:f1:89:8d:51:11:c9:
                    39:1c:cc:cc:5a:f4:ce:df:68:62:80:eb:de:a3:ca:
                    88:a9:78:18:79:5f:03:cf:83:b6:ea:5e:cf:b6:9f:
                    2c:23:28:1f:4d:ba:77:57:eb:8b:b8:31:c9:87:ad:
                    e0:97:60:6b:67:00:f7:49:6f:e8:98:7a:a8:44:5a:
                    5b:05:10:f9:3e:5c:ce:f0:fc:ad:69:53:16:44:2c:
                    ba:d6:69:c5:5e:44:dc:b2:a8:9e:5f:7c:a2:c1:fd:
                    da:1c:31:07:09:7a:da:d1:68:53:b3:78:e0:cb:75:
                    62:de:25:b7:dc:a2:3a:de:71:60:28:25:4c:60:71:
                    ed:1d:21:2f:2c:b9:34:e1:df:2d:7f:41:26:56:ea:
                    a4:eb:3d:d7:52:0b:f3:a8:e6:57:c2:25:de:82:0b:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F5:2F:E9:B3:74:6B:96:E5:FD:F4:E6:EE:10:5F:CE:A1:5B:B3:4B
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3138362e3235302e3235322e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:7d:8f:44:d7:2c:d0:d9:f0:60:f3:ff:be:e6:4a:4e:74:e2:
         0d:ba:9b:42:1f:29:e1:d5:e4:95:40:ce:cc:de:46:a3:69:c8:
         77:94:82:60:b4:ee:4d:1c:73:d5:ef:2d:b3:3e:ad:70:c1:ee:
         6b:00:6a:85:5e:a6:41:0c:37:b4:a8:d4:ef:e2:38:d7:8b:34:
         81:e7:06:32:d6:99:e7:fa:86:0b:d7:58:b2:87:82:8c:36:6c:
         11:fb:31:83:eb:14:eb:a7:5d:75:7c:fb:1f:66:f6:4a:cb:0e:
         46:06:49:3c:ec:c8:97:8e:61:aa:48:08:e3:19:62:ba:9f:ce:
         91:5b:0f:fd:2f:4a:e8:2b:ca:61:0b:12:3b:51:90:df:1a:45:
         4c:4e:06:51:23:ec:47:85:7a:40:31:30:9e:b6:c6:41:16:36:
         c9:20:a9:eb:cf:ba:ff:57:81:a2:2c:53:97:12:a7:38:8f:d3:
         7a:86:6c:04:f9:07:52:d6:84:8c:1f:48:59:5b:a2:0b:d4:bc:
         2b:ca:b0:c8:df:77:fe:4c:5e:bb:04:04:97:29:50:e0:5e:dc:
         6c:80:ed:b2:b1:e5:a6:3d:b4:4e:56:f4:b2:6d:ce:fe:ec:79:
         6d:1b:e8:4e:9b:9a:31:1e:5a:32:bf:f8:14:41:21:ee:a1:62:
         b3:c3:43:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 09:05:25 2026 by rpki-client