Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
File:                     3133312e302e3131362e302f32322d3234203d3e203631383834.roa (raw, json)
Hash identifier:          icGSvapgXAcyqsPwLWmHofXavMO/LICJmdCJRMB6688=
Subject key identifier:   01:6D:D3:9F:FF:5A:FE:D0:BC:3D:25:1F:93:28:93:EA:EA:88:85:18
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       5760F3B0DF55C1DD2FFAE9BC57928BDD349ACF61
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
Signing time:             Thu 05 Feb 2026 19:23:11 +0000
ROA not before:           Thu 05 Feb 2026 19:18:11 +0000
ROA not after:            Thu 04 Feb 2027 19:23:11 +0000
asID:                     61884
IP address blocks:        131.0.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:f3:b0:df:55:c1:dd:2f:fa:e9:bc:57:92:8b:dd:34:9a:cf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Feb  5 19:18:11 2026 GMT
            Not After : Feb  4 19:23:11 2027 GMT
        Subject: CN=016DD39FFF5AFED0BC3D251F932893EAEA888518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:6d:44:b0:ec:ad:54:0d:2a:e3:ec:91:63:
                    9c:20:21:22:92:ad:94:46:29:c1:6c:31:0d:c8:d5:
                    99:a6:fd:2c:88:5c:aa:fc:26:39:71:aa:b7:6a:45:
                    56:55:eb:73:b8:8e:ec:86:a1:a1:74:6a:7b:04:9e:
                    1a:18:d0:ff:da:50:3d:d4:71:36:6e:ba:aa:52:18:
                    ec:94:27:e4:34:f0:4d:7f:94:8c:48:a5:2b:ab:b0:
                    d7:9f:13:87:34:38:eb:b3:f4:e4:90:38:9d:ce:c6:
                    0b:3d:75:b0:30:7c:67:de:fe:7a:a1:3c:79:a4:12:
                    40:0b:1c:fb:e9:cb:18:8d:9f:e5:e4:30:9a:a6:7a:
                    66:09:1a:78:22:9f:d4:93:a9:e3:6d:0d:db:fe:33:
                    f4:76:2b:cd:02:ac:05:99:b1:36:f1:c9:08:36:25:
                    1d:1b:83:76:9d:5e:fe:6b:99:81:95:34:91:24:94:
                    47:9f:54:f9:0f:79:ed:d2:45:0a:93:56:01:64:a1:
                    c7:d2:64:9f:6c:22:6f:bc:34:19:2e:da:c5:d2:1a:
                    d5:17:4a:b3:6d:4f:eb:b3:7e:08:44:aa:ed:8e:67:
                    46:31:56:a9:98:1f:a3:f7:5f:b3:1d:44:43:ee:18:
                    ae:3e:f2:f0:92:1d:d4:af:f3:b9:bd:1d:ac:eb:b4:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:D3:9F:FF:5A:FE:D0:BC:3D:25:1F:93:28:93:EA:EA:88:85:18
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:09:95:d0:1c:ed:77:b6:51:b6:4e:db:90:76:7c:63:ca:
         e6:c4:27:b3:70:77:2e:9c:82:9c:19:32:18:d4:fc:3f:8f:4d:
         c2:e0:80:05:31:d1:18:8c:4e:5c:04:0d:d6:ef:c0:03:9f:d9:
         33:a4:98:15:71:72:16:2d:61:40:8e:c6:47:bd:86:f3:fa:8e:
         1c:22:83:c0:3e:54:93:9a:31:16:f3:aa:83:6c:f2:1d:e2:1c:
         a6:62:38:76:e6:7a:99:1c:ae:a6:2e:fa:7c:b1:67:b3:1c:d4:
         82:f0:88:26:25:2d:1f:23:fe:f3:8a:b8:7e:72:af:27:6f:9a:
         59:68:eb:62:c4:14:6b:44:77:25:40:a1:d1:df:cc:bd:da:c6:
         53:bf:33:64:a5:1b:fe:e0:09:c0:a4:5d:3e:29:ce:86:77:6e:
         e5:75:e2:8f:1f:dd:1b:3c:ea:68:6a:f0:79:de:bf:b9:ab:2f:
         cb:9d:14:2a:47:ac:07:cd:a6:02:16:d7:c2:d0:45:08:4f:4e:
         ee:cd:e8:f7:26:b5:ad:59:c2:f6:46:e8:98:9d:9f:03:6d:e8:
         db:3b:24:25:90:14:31:13:bf:ce:0a:4e:24:bc:ea:f0:b0:63:
         f1:8e:0e:1f:c4:09:b8:23:89:57:05:15:0d:03:f7:18:19:5b:
         f3:fb:a1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:01 2026 by rpki-client