Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234382e302f32322d3232203d3e203631393531.roa
File:                     3230312e3231392e3234382e302f32322d3232203d3e203631393531.roa (raw, json)
Hash identifier:          LpjZIzPYqcmfHD87ofG0nQF2D9nPPg61qWPVzabc520=
Subject key identifier:   77:43:93:BA:E9:E5:92:7A:6C:E0:07:06:D0:28:70:03:FC:B2:C9:41
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       0A21F169AE4AF425313657AFA6F21F71900C5D2C
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234382e302f32322d3232203d3e203631393531.roa
Signing time:             Wed 04 Feb 2026 22:28:53 +0000
ROA not before:           Wed 04 Feb 2026 22:23:53 +0000
ROA not after:            Wed 03 Feb 2027 22:28:53 +0000
asID:                     61951
IP address blocks:        201.219.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:21:f1:69:ae:4a:f4:25:31:36:57:af:a6:f2:1f:71:90:0c:5d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Feb  4 22:23:53 2026 GMT
            Not After : Feb  3 22:28:53 2027 GMT
        Subject: CN=774393BAE9E5927A6CE00706D0287003FCB2C941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:62:fd:76:f5:9f:1a:bd:33:32:84:14:02:18:
                    46:41:4d:26:0f:8f:c4:29:02:43:50:76:83:40:5a:
                    06:72:bd:40:40:ad:6f:1b:19:89:7f:c3:7a:3f:8b:
                    7d:c5:fa:f4:df:19:cf:8b:27:60:c9:de:0f:5d:69:
                    ce:5f:3b:12:f4:4a:32:72:48:97:5e:29:9b:79:7a:
                    05:f2:40:b0:d7:0c:c9:45:a7:11:c1:76:66:02:34:
                    10:fd:e3:4b:d7:c7:e0:11:e9:01:c0:c3:bc:3c:6f:
                    24:a9:31:ad:9d:e7:93:0b:1f:ec:8f:8d:fb:6c:ac:
                    c1:1c:da:0c:06:4a:f2:a9:07:6c:d7:08:2e:b6:1e:
                    43:8e:4a:45:4d:04:49:5c:9f:00:87:cf:b3:4a:6c:
                    ba:e3:5b:91:4e:24:62:39:71:13:3b:11:c0:14:2b:
                    a9:04:13:2b:ff:a6:e8:9e:f1:05:e3:c4:ca:d4:eb:
                    c2:aa:c9:c7:0f:92:3e:06:c7:91:3e:7f:f2:c2:63:
                    44:ae:77:3c:7d:28:6f:9b:9b:4a:b5:47:bc:65:92:
                    23:7a:95:9b:35:a1:2e:f9:de:f0:47:9c:b5:dc:a0:
                    b5:b0:e4:da:71:47:df:af:11:35:28:a8:77:3e:fc:
                    07:73:3a:97:52:09:b0:05:c1:61:e1:46:35:8c:62:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:43:93:BA:E9:E5:92:7A:6C:E0:07:06:D0:28:70:03:FC:B2:C9:41
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234382e302f32322d3232203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:35:de:9c:cf:df:1f:56:38:78:e4:8b:65:d8:df:7e:6b:b1:
         84:b0:76:1e:4e:0d:bc:76:69:1a:f8:ae:e2:08:d2:3f:9e:b2:
         70:98:c5:2b:9b:2b:9a:47:66:2d:be:0a:d5:29:4a:b8:f1:a2:
         d0:83:04:d8:fa:79:cd:06:8b:a3:1d:9a:b3:6d:68:56:f0:c3:
         b5:38:48:f6:10:d7:f5:d1:45:75:8f:e8:24:a0:a7:f6:a5:bc:
         51:67:2e:ad:9d:fa:41:83:5e:3d:de:7e:21:c4:63:0e:f9:c5:
         c5:71:b5:44:27:57:8b:2a:61:92:06:79:77:85:bb:27:73:60:
         90:63:2e:08:33:21:ed:9c:1f:7d:30:6e:0e:65:05:2a:07:26:
         fa:91:a5:43:22:08:ff:de:cc:46:6b:e9:6f:7b:ff:f3:f2:11:
         12:57:35:ee:84:20:28:c6:fa:52:54:21:9c:81:b8:72:60:3c:
         e7:ae:02:d8:d5:0e:19:38:42:e1:c3:bc:ea:40:00:e3:23:75:
         03:46:2a:eb:f4:46:3d:90:74:ea:c3:af:93:c8:82:d5:57:83:
         0f:6a:7c:a6:e4:20:3f:79:fb:1a:dc:3b:50:3e:21:48:30:03:
         3a:2d:9f:80:76:1a:62:b4:b6:20:30:c8:bf:e6:c2:cb:23:27:
         c7:96:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:28 2026 by rpki-client