Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3133312e3130302e3139312e302f32342d3234203d3e203631363439.roa
File:                     3133312e3130302e3139312e302f32342d3234203d3e203631363439.roa (raw, json)
Hash identifier:          FwmzuJRXuQyuDLerUFjJrFNKhwHli0kdxFZXKhT5XGQ=
Subject key identifier:   A6:EB:FF:9C:F8:11:36:B8:AC:87:97:01:F3:18:F4:20:F2:62:E6:65
Certificate issuer:       /CN=FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B
Certificate serial:       3404F4F31A02FEF516ACF041C37E354C56287871
Authority key identifier: FA:0E:3A:26:9B:ED:C1:FE:8D:EE:E9:75:6D:C6:96:CE:EA:E9:75:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3133312e3130302e3139312e302f32342d3234203d3e203631363439.roa
Signing time:             Sat 31 Jan 2026 15:20:35 +0000
ROA not before:           Sat 31 Jan 2026 15:15:35 +0000
ROA not after:            Sat 30 Jan 2027 15:20:35 +0000
asID:                     61649
IP address blocks:        131.100.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:04:f4:f3:1a:02:fe:f5:16:ac:f0:41:c3:7e:35:4c:56:28:78:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B
        Validity
            Not Before: Jan 31 15:15:35 2026 GMT
            Not After : Jan 30 15:20:35 2027 GMT
        Subject: CN=A6EBFF9CF81136B8AC879701F318F420F262E665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:fc:80:12:7f:64:01:69:1e:ab:15:84:ad:
                    e2:28:c2:4e:34:4e:50:44:bd:88:9e:85:2a:ea:e8:
                    b3:04:19:dc:fa:39:74:32:be:86:f9:9b:38:b7:86:
                    ab:2f:fb:1e:98:19:c1:92:3c:cb:96:39:ea:a4:df:
                    15:cb:25:f5:c4:25:4b:f2:e3:43:6b:26:51:1b:39:
                    b3:55:67:06:ed:9e:8b:52:e8:f8:c0:9f:07:70:64:
                    fd:e8:34:62:ac:d9:c5:dd:56:a9:36:07:24:5e:15:
                    df:fb:52:a9:0c:6a:ab:80:a9:37:90:6b:00:74:ec:
                    30:5d:87:2c:37:e6:9e:c4:d5:47:81:65:39:20:92:
                    a2:f6:0e:0a:03:b9:77:82:d1:79:5f:48:05:bf:c0:
                    6e:af:b9:ec:26:5e:6b:dd:f1:f9:54:2e:27:d0:8e:
                    b8:2e:96:5a:59:f7:26:df:59:14:28:ee:04:c1:c7:
                    10:b2:00:bd:80:0f:e9:5d:b4:13:f7:fe:32:0e:a3:
                    73:f9:bc:a3:a5:cf:6f:17:8c:d5:60:74:67:28:21:
                    ea:2b:a2:5b:b0:d3:2e:1c:ee:ed:6f:2f:53:a3:bb:
                    5e:0e:4e:49:ae:b6:23:29:9b:9d:9c:d6:ac:cd:43:
                    4a:94:62:a9:46:89:b2:c4:5e:d8:16:cb:2e:19:38:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EB:FF:9C:F8:11:36:B8:AC:87:97:01:F3:18:F4:20:F2:62:E6:65
            X509v3 Authority Key Identifier:
                keyid:FA:0E:3A:26:9B:ED:C1:FE:8D:EE:E9:75:6D:C6:96:CE:EA:E9:75:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA0E3A269BEDC1FE8DEEE9756DC696CEEAE9759B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/0/3133312e3130302e3139312e302f32342d3234203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:18:dc:c6:72:d4:72:2a:85:05:a1:1e:6c:8e:7b:21:35:6c:
         03:2c:6d:c6:de:01:fd:fd:cf:c7:60:e9:82:3e:9f:0a:69:4a:
         94:cb:f7:4d:1e:14:a8:49:fa:11:71:7f:27:32:b5:41:4a:7e:
         6d:10:ac:e0:9a:9d:1e:5a:2a:05:ad:4c:a7:3f:38:64:5b:cc:
         0a:98:8c:b5:49:b9:ac:a7:2e:c5:30:db:b4:19:4f:19:b2:88:
         49:ae:0e:7c:92:38:bf:94:08:ef:99:87:f3:68:8f:43:82:d2:
         29:24:bf:de:4e:16:9b:06:cd:34:f5:88:6f:7c:b1:9a:97:64:
         77:6c:24:36:14:da:c2:ba:51:2e:db:4b:5b:d8:00:f6:44:f1:
         d7:fd:ee:ea:a2:1e:da:5d:2e:b2:39:fd:ee:0e:ac:40:ff:9d:
         e1:90:34:eb:f6:ac:41:7f:7d:e1:70:cf:6c:06:cb:0b:00:c0:
         3c:e2:a2:98:92:01:5f:58:0c:a8:63:93:7f:35:2f:a1:f0:3f:
         1f:fd:3a:af:ad:5e:b5:11:ea:1e:a7:9a:4c:e5:00:8b:6b:49:
         08:60:56:46:c1:60:26:01:5f:19:69:9c:a0:69:67:cb:5f:b1:
         59:5b:f6:e1:7a:f8:5b:ba:02:a1:0c:c9:58:8e:2f:41:82:93:
         e3:f5:a4:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNAT08xoC/vUWrPBBw341TFYoeHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEwRTNBMjY5QkVEQzFGRThERUVFOTc1NkRDNjk2Q0VF
QUU5NzU5QjAeFw0yNjAxMzExNTE1MzVaFw0yNzAxMzAxNTIwMzVaMDMxMTAvBgNV
BAMTKEE2RUJGRjlDRjgxMTM2QjhBQzg3OTcwMUYzMThGNDIwRjI2MkU2NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAPyAEn9kAWkeqxWEreIowk40
TlBEvYiehSrq6LMEGdz6OXQyvob5mzi3hqsv+x6YGcGSPMuWOeqk3xXLJfXEJUvy
40NrJlEbObNVZwbtnotS6PjAnwdwZP3oNGKs2cXdVqk2ByReFd/7UqkMaquAqTeQ
awB07DBdhyw35p7E1UeBZTkgkqL2DgoDuXeC0XlfSAW/wG6vuewmXmvd8flULifQ
jrgullpZ9ybfWRQo7gTBxxCyAL2AD+ldtBP3/jIOo3P5vKOlz28XjNVgdGcoIeor
oluw0y4c7u1vL1Oju14OTkmutiMpm52c1qzNQ0qUYqlGibLEXtgWyy4ZOARLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpuv/nPgRNrish5cB8xj0IPJi5mUwHwYDVR0j
BBgwFoAU+g46Jpvtwf6N7ul1bcaWzurpdZswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlZKZWZod0NuREJhaUVEYnVuN3JnUjJ6V3dYaTFxb2J6SGtaR2lKcTFK
SHcvMC9GQTBFM0EyNjlCRURDMUZFOERFRUU5NzU2REM2OTZDRUVBRTk3NTlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMEUzQTI2OUJFREMxRkU4
REVFRTk3NTZEQzY5NkNFRUFFOTc1OUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWSmVmaHdDbkRCYWlFRGJ1bjdyZ1Iyeld3WGkxcW9iekhrWkdpSnExSkh3LzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDZL8wDQYJKoZIhvcNAQELBQADggEBAJYY3MZy
1HIqhQWhHmyOeyE1bAMsbcbeAf39z8dg6YI+nwppSpTL900eFKhJ+hFxfycytUFK
fm0QrOCanR5aKgWtTKc/OGRbzAqYjLVJuaynLsUw27QZTxmyiEmuDnySOL+UCO+Z
h/Noj0OC0ikkv95OFpsGzTT1iG98sZqXZHdsJDYU2sK6US7bS1vYAPZE8df97uqi
HtpdLrI5/e4OrED/neGQNOv2rEF/feFwz2wGywsAwDziopiSAV9YDKhjk381L6Hw
Px/9Oq+tXrUR6h6nmkzlAItrSQhgVkbBYCYBXxlpnKBpZ8tfsVlb9uF6+Fu6AqEM
yViOL0GCk+P1pKY=
-----END CERTIFICATE-----
Generated at Thu Feb 19 00:10:16 2026 by rpki-client