Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          BYb/e6Y30leIGJEfWlxe9saDNWstLyVBGMDKfEkjWiE=
Subject key identifier:   5C:F8:D2:86:1A:65:8A:DD:AC:E3:34:0C:7A:39:B5:F6:B0:39:07:E9
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       13D3519613F99A2C65A32A19628E0CF95B313914
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa
Signing time:             Wed 04 Feb 2026 22:28:54 +0000
ROA not before:           Wed 04 Feb 2026 22:23:54 +0000
ROA not after:            Wed 03 Feb 2027 22:28:54 +0000
asID:                     61951
IP address blocks:        201.219.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:51:96:13:f9:9a:2c:65:a3:2a:19:62:8e:0c:f9:5b:31:39:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Feb  4 22:23:54 2026 GMT
            Not After : Feb  3 22:28:54 2027 GMT
        Subject: CN=5CF8D2861A658ADDACE3340C7A39B5F6B03907E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:6f:23:aa:fd:90:0f:1f:99:22:c8:07:79:
                    4c:84:5a:a4:a2:bf:c7:53:4a:3c:8a:4c:58:67:8c:
                    85:ea:d9:1f:0e:c2:5e:01:4c:f4:d2:2f:df:b0:f4:
                    84:2e:fb:92:09:1a:10:a0:fa:47:c5:b7:78:13:bd:
                    d5:a5:0c:80:e6:c5:56:fe:33:e9:64:35:c4:e2:76:
                    a2:eb:6f:6a:88:7c:98:63:da:e7:26:17:57:74:7c:
                    39:77:0d:5d:75:e0:1b:92:98:7f:eb:e9:cd:f7:da:
                    c0:8a:20:ee:5e:ff:bb:c5:3d:0e:bb:fd:6a:80:fc:
                    d5:30:c4:b1:e2:c4:f4:2f:f4:cb:d9:bd:0c:41:96:
                    61:d2:cc:f8:c8:dc:83:7c:2d:8f:1e:67:8f:34:27:
                    df:18:f9:7c:f2:f9:3f:5d:52:bb:49:c7:83:ba:52:
                    9b:e3:f8:b3:cd:66:66:e9:e8:2b:7f:a0:ea:5f:e1:
                    36:37:1d:1f:ad:40:e7:5a:e0:f1:5d:2e:ba:13:0b:
                    bf:9e:76:aa:d6:7d:0c:67:3a:01:14:d5:65:03:be:
                    96:92:f8:9b:e1:68:a2:63:9c:a2:17:76:9b:52:af:
                    b1:cf:82:88:c1:be:61:cf:9f:43:fd:6a:74:39:83:
                    5f:a7:5f:5e:50:78:f0:f1:ec:b9:80:62:b1:32:00:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F8:D2:86:1A:65:8A:DD:AC:E3:34:0C:7A:39:B5:F6:B0:39:07:E9
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3234392e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:90:17:92:59:47:e6:80:ca:66:2c:e9:f2:2b:9d:59:91:6d:
         7f:68:78:8a:ec:e2:f9:90:ca:cf:fe:91:fd:98:a2:f1:c6:b7:
         ba:06:03:9e:c8:fd:3f:ce:8f:2b:09:39:79:9e:5e:be:fd:e8:
         c2:f2:6a:ff:25:20:6c:9c:b9:6f:02:d3:19:1e:0a:fe:87:71:
         ad:e7:88:f4:c2:8f:3d:78:8a:96:bb:05:62:03:f4:4f:35:f2:
         03:9b:b1:92:98:47:67:b6:23:61:98:54:a3:5d:69:ed:55:f1:
         0b:87:49:ac:19:90:06:d3:a7:6c:8d:ca:78:fd:25:1d:41:e9:
         72:92:29:f8:cf:19:fe:12:c1:8f:9d:b6:99:a2:6f:82:29:84:
         a8:90:94:5b:f2:62:dd:a5:19:47:c7:0f:4a:c4:ac:25:a9:35:
         6f:82:92:a7:a8:da:94:04:d6:6c:5b:50:70:bc:7d:c5:0e:f7:
         e1:18:26:bd:76:08:20:86:e5:0c:0d:e9:a2:ce:b1:ff:8c:4b:
         ce:af:b7:32:14:d3:d1:1e:ca:48:b6:8d:48:ce:1d:08:5b:71:
         ed:1c:a5:c0:04:31:46:0b:dc:59:5d:1d:d7:c7:41:6f:7f:3f:
         77:f6:49:37:c3:bf:03:0f:62:80:a7:9e:b4:77:bf:53:0e:df:
         44:b3:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:13 2026 by rpki-client