Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa
File:                     3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa (raw, json)
Hash identifier:          I0nH6WNoZYq6vD9CdUZFNk3vEWMtpdxvWUjlGcJsQo4=
Subject key identifier:   03:26:A5:83:B2:B8:B9:EE:6C:FA:E2:41:A5:CA:89:4C:E7:01:53:FE
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       031A9A10DE889BFF2545F3E88E71A0A31236F567
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     61918
IP address blocks:        170.150.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1a:9a:10:de:88:9b:ff:25:45:f3:e8:8e:71:a0:a3:12:36:f5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=0326A583B2B8B9EE6CFAE241A5CA894CE70153FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:a3:ba:2f:62:98:4d:28:f0:70:9b:01:b7:
                    6e:21:36:bb:81:b3:02:95:04:29:81:e8:ff:e5:c0:
                    04:57:46:90:c4:ca:74:53:6a:c1:c9:a1:42:90:fa:
                    96:ec:93:9b:5c:f1:db:38:03:07:9c:9e:5e:7b:5a:
                    40:6b:e2:2d:1c:f2:5e:7c:cc:2b:76:5d:e4:6d:82:
                    67:47:37:f0:86:c1:87:ee:8c:0d:6d:6b:cb:4a:0f:
                    6c:03:bd:3f:86:86:9a:bb:8a:c7:a5:88:92:04:d2:
                    7e:ae:38:90:d1:9c:fb:f9:09:b6:ec:37:fc:c3:a8:
                    65:f4:b0:b7:5c:d3:b1:cb:45:39:1a:04:ed:26:b3:
                    71:80:cc:de:62:c4:a2:2b:2c:10:87:2b:1a:d2:d6:
                    a0:f4:42:dd:22:e0:74:8c:ea:44:8e:1f:59:8d:67:
                    90:62:47:0b:30:24:58:ae:b4:39:9c:2a:e9:8b:1c:
                    f8:3b:1d:41:6c:ba:6a:ae:2e:4c:b7:99:01:3e:04:
                    de:82:99:e2:04:93:a2:b7:b4:ee:32:71:93:95:c1:
                    92:f3:49:07:15:d3:90:27:55:91:ca:79:8c:c4:20:
                    5f:09:58:5d:f5:26:d9:3d:09:01:8b:13:96:26:78:
                    26:7b:0f:a7:25:68:62:15:6d:86:6d:a6:d1:69:01:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:26:A5:83:B2:B8:B9:EE:6C:FA:E2:41:A5:CA:89:4C:E7:01:53:FE
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137302e3135302e3233342e302f32332d3233203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:6b:da:cf:57:be:35:15:48:0e:ed:35:ad:df:86:9e:e6:
         47:eb:a8:8e:4b:b3:8b:fe:df:6c:d7:2c:a4:8f:e3:56:87:cf:
         43:99:32:3e:77:29:99:6a:f6:8d:0b:eb:4d:79:13:67:84:d5:
         83:00:76:9c:ec:cc:55:db:de:3a:40:f0:c8:fe:15:df:e9:41:
         76:78:c3:f7:ce:af:6c:e0:e6:8e:1e:53:fa:5f:55:bc:6b:e0:
         b9:87:5c:db:00:31:eb:f6:8a:12:ae:47:5e:21:cc:40:ca:84:
         9f:b7:e6:b3:3e:eb:50:2d:df:67:17:90:fd:42:00:bc:c3:ae:
         31:a7:06:e4:09:50:34:d4:56:8c:fb:d1:97:3f:ed:90:64:61:
         4a:8a:c3:ae:7e:c4:c1:68:c6:81:4b:f7:fb:23:dc:e3:b1:71:
         22:4d:1e:b6:6e:bd:94:d9:f5:15:72:20:21:c5:dd:69:ba:46:
         19:57:bc:8d:77:17:ef:8e:bb:3a:bc:c1:4f:44:e2:b9:39:68:
         a9:71:f3:57:7b:de:be:49:99:62:d2:11:6c:a8:a5:66:1e:59:
         20:96:71:0a:b5:6c:31:c9:fb:d6:9e:0a:15:9a:81:6e:96:07:
         2c:62:69:e9:68:46:ff:64:81:a8:0d:2f:0c:ed:c5:f5:5c:fe:
         cb:5a:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:59 2026 by rpki-client