Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          mXpx1uGDapRWvP1/O1h2qGNcErrv0wgSgyCBUyUT3RU=
Subject key identifier:   63:41:D5:FC:56:97:E6:77:E6:5D:2A:99:60:87:6E:F5:2E:3D:D9:F4
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       18E08D4E2400D2358C091E323471E61C61372999
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa
Signing time:             Wed 04 Feb 2026 20:40:16 +0000
ROA not before:           Wed 04 Feb 2026 20:35:16 +0000
ROA not after:            Wed 03 Feb 2027 20:40:16 +0000
asID:                     271562
IP address blocks:        181.174.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e0:8d:4e:24:00:d2:35:8c:09:1e:32:34:71:e6:1c:61:37:29:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Feb  4 20:35:16 2026 GMT
            Not After : Feb  3 20:40:16 2027 GMT
        Subject: CN=6341D5FC5697E677E65D2A9960876EF52E3DD9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:39:14:52:f0:69:d5:8f:b6:d9:97:9c:62:
                    3d:c5:37:17:24:46:bd:57:fc:46:82:db:a3:f3:74:
                    2f:c7:1d:dd:33:c7:b7:c8:35:f0:cf:ec:bb:76:dc:
                    ef:bc:63:a2:d4:23:56:1c:dd:7c:c6:83:6a:eb:54:
                    7d:a9:15:24:5c:be:1e:e7:76:93:51:ef:00:3e:82:
                    2c:0e:b0:b3:0b:22:e4:a2:24:5f:e1:8d:67:84:f8:
                    d7:50:61:92:95:c1:c9:6f:10:07:0e:00:64:17:72:
                    3e:f5:c8:66:d1:5d:15:e3:4f:84:10:4c:4e:05:8a:
                    a8:92:80:30:25:d2:69:e5:86:fd:c0:ca:87:4a:af:
                    67:c4:d2:22:09:aa:bf:49:e5:0b:3c:52:25:d9:01:
                    89:15:aa:22:4a:75:cc:85:9d:60:e8:3e:cd:5b:77:
                    2f:1f:19:80:74:46:64:2e:22:f3:85:d4:9d:f2:d7:
                    bb:58:bf:0f:c3:98:1c:6f:6f:fc:52:ff:80:2e:9f:
                    43:98:32:16:e0:09:5b:31:05:a1:a8:55:d6:71:b9:
                    75:67:19:df:48:4e:b6:39:ce:80:cd:fd:f1:4b:c1:
                    e4:8e:19:f8:36:c0:88:7c:ff:c2:da:4e:4a:eb:91:
                    1c:92:3a:ee:65:78:32:01:ab:41:0a:03:b0:bd:e3:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:41:D5:FC:56:97:E6:77:E6:5D:2A:99:60:87:6E:F5:2E:3D:D9:F4
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232332e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b3:7a:2e:81:9a:78:11:31:22:c9:71:ba:88:cc:08:16:b3:
         7b:4f:8d:b7:bd:b7:23:0a:7b:4a:62:1b:91:0d:73:c8:86:49:
         4a:ba:4f:5c:4f:59:d3:88:b2:e1:c1:bf:6b:26:24:a2:28:79:
         6e:c5:34:8d:bd:cf:43:ca:36:39:75:97:9c:e8:c7:03:d2:28:
         0f:7d:46:95:12:a9:d0:fc:22:ed:26:0b:08:84:ed:58:2d:67:
         09:63:79:8e:b0:8d:29:12:c5:86:04:ae:fe:c3:e0:38:fc:f5:
         89:69:8f:4d:fe:4a:92:69:39:9a:db:6b:74:fc:84:39:34:18:
         21:d1:cd:4c:a7:2f:14:13:92:80:99:2d:e3:b0:ee:23:54:f9:
         78:d1:db:8b:2a:6b:73:cd:e7:45:80:1c:f2:ac:50:07:7b:ae:
         cf:22:36:a9:f9:4b:e1:c1:c0:7d:9c:fe:24:eb:3d:d6:79:35:
         d9:6c:c8:0e:95:ef:d6:c6:0d:84:0f:80:5a:fa:79:6e:7d:2b:
         21:a7:0b:f9:96:a1:29:a2:f9:08:9e:8b:74:5e:3e:a8:fc:94:
         e3:83:1f:9a:af:53:f2:58:f2:3d:e8:ba:92:0b:0f:86:0f:cf:
         01:7e:db:67:56:91:eb:22:40:22:4b:7a:4a:c9:53:da:fb:66:
         02:56:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:18 2026 by rpki-client