Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa
File:                     3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa (raw, json)
Hash identifier:          xUWcFgNmtUbfargq2Bq9WzgQnZD3LZB/fVSxHc8933o=
Subject key identifier:   48:5C:D9:3C:A9:C0:2C:06:0B:D0:93:F5:CA:ED:8D:A1:D2:82:66:02
Certificate issuer:       /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
Certificate serial:       59FA30804D6D2C13CC1C4558EFDF274988CBB831
Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa
Signing time:             Thu 05 Feb 2026 13:08:33 +0000
ROA not before:           Thu 05 Feb 2026 13:03:33 +0000
ROA not after:            Thu 04 Feb 2027 13:08:33 +0000
asID:                     61812
IP address blocks:        201.159.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl
                          rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fa:30:80:4d:6d:2c:13:cc:1c:45:58:ef:df:27:49:88:cb:b8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
        Validity
            Not Before: Feb  5 13:03:33 2026 GMT
            Not After : Feb  4 13:08:33 2027 GMT
        Subject: CN=485CD93CA9C02C060BD093F5CAED8DA1D2826602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:c8:42:31:ef:df:9b:37:b2:e2:d0:ff:cb:
                    02:33:6b:2f:b6:91:f0:9a:39:2c:f4:90:f2:28:db:
                    f9:61:0b:ea:ec:0a:12:6c:4c:7d:49:3e:09:88:a5:
                    8d:a3:66:60:85:5d:31:ac:27:92:db:9f:b0:af:ab:
                    58:fb:06:10:ac:22:fd:e4:a5:1b:7a:00:0c:35:e6:
                    69:c5:c2:ed:fa:66:aa:23:0f:dd:e7:ae:9d:d8:cc:
                    83:f7:42:28:15:94:01:7d:68:0f:76:8f:c7:6a:d6:
                    57:4c:34:04:23:5d:15:d0:34:34:dc:bd:ce:92:9c:
                    32:55:76:30:06:db:8e:31:08:69:e9:94:3b:c7:dd:
                    03:f7:f0:bb:ad:89:ea:fd:60:df:be:50:07:66:76:
                    d9:ed:38:0f:7d:d7:29:bd:83:43:75:8d:7e:15:41:
                    25:8b:64:5b:ee:94:f5:5c:d3:cd:04:4c:a3:cf:51:
                    e2:e3:8a:a5:59:ac:eb:3d:99:0a:92:04:cb:13:b8:
                    76:97:36:4c:52:f0:d2:2b:7c:e8:6d:3d:54:76:e9:
                    c1:3e:ae:2f:4f:2e:bd:29:5a:54:8e:92:95:59:e1:
                    81:d9:53:7b:21:04:d9:f8:4b:12:2d:b1:a3:59:b6:
                    fc:3d:aa:30:5a:d3:62:01:9d:57:c9:c3:ec:e8:2f:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5C:D9:3C:A9:C0:2C:06:0B:D0:93:F5:CA:ED:8D:A1:D2:82:66:02
            X509v3 Authority Key Identifier:
                keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3230312e3135392e3132302e302f32322d3234203d3e203631383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:e8:33:a3:47:a1:9f:7b:a5:54:70:9c:8d:d7:84:d1:58:
         90:69:6f:fb:ca:55:12:60:7c:5e:55:dc:7d:f6:26:9a:76:67:
         39:09:51:a5:a7:78:2e:8e:c5:b5:79:1d:97:7a:fd:e1:92:7f:
         c4:f0:72:14:37:13:b8:3c:eb:03:c5:ff:71:59:c4:13:88:f4:
         37:c9:c4:f0:d6:a1:3b:2d:ad:c9:90:7f:06:2d:10:c0:0d:b0:
         a5:8f:81:83:31:a1:17:68:8b:ed:8b:09:7c:02:cf:37:a9:83:
         b6:0f:e0:50:c4:2a:b3:ef:c7:22:8b:e0:c4:cd:8c:35:73:89:
         4e:eb:72:13:78:02:5f:7b:e6:e7:03:f4:85:d7:45:25:87:fe:
         8e:12:2a:94:af:d1:6e:93:5d:8d:a4:70:7b:62:80:3e:38:12:
         e0:9d:f1:5d:4f:35:89:54:fc:8a:00:a1:5b:05:d7:04:82:89:
         ee:06:1c:92:4f:d2:c0:42:43:e1:76:ff:a5:d0:ce:c2:3d:b3:
         c1:e6:fc:74:70:5f:a9:45:96:22:f7:6f:e3:17:14:c0:ca:5a:
         19:58:b3:9d:4f:1a:47:3b:83:4d:6d:d1:61:32:cc:61:ae:50:
         41:d9:c1:d0:58:85:96:0a:a7:b9:44:d3:01:05:77:19:7e:f0:
         5f:bf:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:39:43 2026 by rpki-client