Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa
File:                     3230312e32332e3132382e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          BQ7B3Y7cEwOkrd5vmJWM+J4J8Lyc3gmmUhJtGGKpJ/U=
Subject key identifier:   46:84:8F:3C:78:9E:61:14:E1:48:E2:60:93:4E:B9:18:BF:67:BD:63
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       1AF457A1BE35FCA60E76B16E6D533A30DD36446A
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 06 Feb 2026 02:48:51 +0000
ROA not before:           Fri 06 Feb 2026 02:43:51 +0000
ROA not after:            Fri 05 Feb 2027 02:48:51 +0000
asID:                     22689
IP address blocks:        201.23.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f4:57:a1:be:35:fc:a6:0e:76:b1:6e:6d:53:3a:30:dd:36:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Feb  6 02:43:51 2026 GMT
            Not After : Feb  5 02:48:51 2027 GMT
        Subject: CN=46848F3C789E6114E148E260934EB918BF67BD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:7b:5b:c3:9a:c6:ff:5e:54:89:3f:a7:25:
                    e7:c7:35:03:dc:e4:d9:e8:8c:64:9e:d8:56:d4:02:
                    c0:a2:17:2a:9e:34:53:1f:92:31:9a:ce:9c:ac:03:
                    59:b4:83:d3:c9:f7:4b:a1:97:14:a9:8d:24:b2:eb:
                    e2:2e:68:60:e6:20:58:43:11:95:91:40:d9:60:d3:
                    b7:c0:f9:d5:cb:ac:53:31:e4:7f:bb:b5:71:20:82:
                    ca:00:c7:b2:0c:d5:7d:30:19:9a:b9:82:d2:dd:68:
                    ab:0f:d1:f5:e3:81:0f:21:7d:d5:f6:47:35:77:2b:
                    46:ce:d9:50:79:44:f5:28:98:93:28:19:df:80:04:
                    ba:22:1a:e2:50:52:06:a4:7a:fd:33:92:09:0e:b5:
                    5b:01:75:c3:26:81:44:2e:bc:a8:d5:3b:c3:b2:82:
                    db:3e:ee:ee:97:45:17:cd:f0:4d:b8:4f:98:75:25:
                    fc:6e:bb:4f:ce:a6:2d:17:b0:36:af:4b:10:bd:ea:
                    4f:6e:cc:4f:a6:54:77:50:63:fb:b4:9d:60:15:48:
                    26:47:67:cf:64:a4:91:19:5f:c6:c1:46:c3:d7:14:
                    00:ca:7e:0b:31:83:53:b3:99:e9:ed:64:5e:4c:14:
                    ac:b4:ea:d5:0e:69:12:d5:d9:da:81:6d:15:b2:3f:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:8F:3C:78:9E:61:14:E1:48:E2:60:93:4E:B9:18:BF:67:BD:63
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230312e32332e3132382e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:2b:d1:43:78:18:70:70:46:11:0d:5b:8c:10:f7:4b:18:6c:
         b1:36:c3:2e:08:0f:2f:ce:18:6a:eb:3e:c2:57:0f:7c:aa:f5:
         b3:ad:e9:61:ad:32:16:c4:44:32:a0:d9:49:fa:b1:af:d0:23:
         45:6a:90:7c:16:b3:9c:30:a9:12:b7:ae:1f:f5:e9:72:a0:e0:
         10:9a:95:c7:da:a6:df:56:31:00:ba:51:3e:41:3b:a6:94:fb:
         58:43:dd:74:bc:8f:86:29:d8:c1:b4:12:dd:e0:c6:ec:48:27:
         59:54:1b:82:93:60:45:df:5e:4d:6e:3d:cf:a4:91:1a:0a:87:
         0e:d9:c0:76:45:ec:13:f2:62:d1:2d:d3:cb:c4:ca:66:cc:05:
         f1:1b:b8:99:d3:03:4a:e4:bc:10:5b:9b:21:ce:f8:9d:59:1b:
         0c:2a:4a:32:59:01:ad:cc:2c:39:db:bc:d8:6c:c3:2d:cd:4e:
         aa:92:d0:8c:32:33:7a:51:d6:9c:d9:c1:62:73:ca:84:65:7b:
         df:52:72:96:3b:c0:df:f2:e9:dc:fb:79:2b:7e:af:aa:12:30:
         9c:9f:1c:bc:c1:e3:1d:93:98:58:99:e3:08:82:73:aa:16:97:
         07:1f:2b:cf:61:48:75:d6:52:46:9d:61:d4:59:d2:59:9b:f7:
         ef:67:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:19 2026 by rpki-client