Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa
File:                     3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa (raw, json)
Hash identifier:          I/xnq0bsZM2KCqDQuEwyR/TUNXt4kaaRIw7Q1uq0nSQ=
Subject key identifier:   A6:E4:63:D2:7E:61:4E:BC:EC:88:16:CE:80:A2:68:C7:3C:A9:E8:29
Certificate issuer:       /CN=650CDA051146F7753756149BDB6B92197765D95E
Certificate serial:       6F4F830679AA2156FD3B29EC7520A5BC74D79C8F
Authority key identifier: 65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     270272
IP address blocks:        200.115.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl
                          rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4f:83:06:79:aa:21:56:fd:3b:29:ec:75:20:a5:bc:74:d7:9c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650CDA051146F7753756149BDB6B92197765D95E
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=A6E463D27E614EBCEC8816CE80A268C73CA9E829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:16:d3:79:ed:b1:24:b8:1f:1a:c6:9b:a4:
                    62:65:2a:9b:13:3c:ed:4f:73:d6:17:71:d4:33:b7:
                    a9:c8:69:41:9b:66:f6:48:45:21:67:4f:c6:97:1a:
                    83:cb:53:ec:29:81:8f:9a:c4:88:74:25:03:d6:c4:
                    27:01:f9:97:d2:e6:4c:cc:60:3c:1c:a1:12:77:3d:
                    cf:63:10:18:66:ce:d1:43:7c:c4:16:a4:0c:61:f5:
                    37:c1:03:60:96:2d:08:aa:a3:26:72:ac:af:26:3f:
                    84:a9:bd:2a:f3:74:e0:40:af:a6:7f:7b:eb:48:41:
                    ef:8e:9f:8c:08:00:ec:3a:90:c9:e0:9b:3f:85:a8:
                    23:c0:0f:22:b0:10:f9:8c:d9:12:13:c2:95:23:71:
                    a6:6a:e0:7c:e6:9d:0f:ba:6d:3f:30:08:81:06:f0:
                    98:e0:da:0c:21:c1:b0:1f:95:29:ec:62:1f:af:1c:
                    8e:55:6b:6a:59:21:70:c6:6e:3f:29:c8:d8:03:f7:
                    69:83:a4:03:06:b3:43:fd:2d:4b:ff:53:6c:5d:0c:
                    f2:9c:cd:76:94:0d:0c:e8:9c:f8:0c:c0:61:13:09:
                    32:16:84:b7:98:d8:f8:1e:ed:de:29:50:c1:7a:78:
                    1e:32:1c:e2:a2:70:56:61:b8:55:8d:f0:5a:50:0c:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E4:63:D2:7E:61:4E:BC:EC:88:16:CE:80:A2:68:C7:3C:A9:E8:29
            X509v3 Authority Key Identifier:
                keyid:65:0C:DA:05:11:46:F7:75:37:56:14:9B:DB:6B:92:19:77:65:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/650CDA051146F7753756149BDB6B92197765D95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/650CDA051146F7753756149BDB6B92197765D95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AduLpg4NXUgAxVoqwBpmJnKk438AxboeUM1KPRyZV7qf/1/3230302e3131352e3132342e302f32322d3234203d3e20323730323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:35:24:2e:1a:b8:07:f1:7f:d3:b6:be:c9:4d:3e:30:59:ca:
         54:0d:a5:8a:4c:e8:ac:c5:b1:a6:6d:bb:15:b3:dc:d4:c6:e7:
         eb:eb:1c:36:a7:d4:90:4c:1f:22:a6:d6:dc:9c:dd:6d:14:5c:
         3a:23:99:9a:b0:55:9a:6a:3b:f1:ea:75:2e:72:a1:92:07:bb:
         32:52:74:f7:57:af:90:09:20:81:01:a7:2f:fe:05:ea:be:d9:
         33:f0:05:ce:75:d4:a9:0d:b4:72:71:0a:ca:ca:d7:98:c3:b2:
         bd:6a:b4:ed:73:78:2d:32:7f:64:5c:de:aa:50:e8:85:d2:c7:
         c9:a0:60:3b:f6:15:ab:80:ea:91:58:6a:89:70:59:59:e0:f6:
         83:5b:d6:d4:fd:93:23:b4:e7:3a:0b:c4:ff:56:8e:e6:cd:07:
         69:b7:be:91:8e:e2:e6:33:47:81:f6:d3:dc:7c:d7:f0:a2:92:
         68:5e:7a:86:12:28:8b:cc:5d:aa:58:71:57:5c:0f:99:4f:4c:
         de:fb:25:18:6d:35:ac:31:99:1a:cd:f4:73:16:a8:ff:39:c8:
         1d:8e:95:98:02:33:4a:41:13:97:7f:34:7e:e7:1a:d9:a1:b5:
         ff:ea:7b:37:80:6e:d5:5e:18:8a:72:83:78:ed:61:54:00:cd:
         45:8a:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:02 2026 by rpki-client