Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa
File:                     3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa (raw, json)
Hash identifier:          2/1ljMvhbJlktYy8q2cmnl5SBvYtKfIMTBB/yd9ks1M=
Subject key identifier:   65:34:B9:95:17:A6:40:49:F4:C1:1B:A4:34:5F:33:3C:1A:F6:65:5C
Certificate issuer:       /CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
Certificate serial:       1B601D6E9C54E087B75341CCB40E032B1EDB1B79
Authority key identifier: D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa
Signing time:             Wed 04 Feb 2026 22:28:53 +0000
ROA not before:           Wed 04 Feb 2026 22:23:53 +0000
ROA not after:            Wed 03 Feb 2027 22:28:53 +0000
asID:                     61951
IP address blocks:        201.219.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl
                          rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:60:1d:6e:9c:54:e0:87:b7:53:41:cc:b4:0e:03:2b:1e:db:1b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3986442AB630E9BA4980A2F9EF2013033EF9C17
        Validity
            Not Before: Feb  4 22:23:53 2026 GMT
            Not After : Feb  3 22:28:53 2027 GMT
        Subject: CN=6534B99517A64049F4C11BA4345F333C1AF6655C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:e6:e4:0f:79:58:68:b7:32:04:ae:80:fd:
                    18:ce:42:04:0e:8d:9c:6b:1a:4e:80:70:85:c6:9a:
                    9f:e5:55:a5:b3:8f:32:83:bf:1a:8d:14:23:d4:20:
                    fe:87:46:58:0f:2d:74:e4:26:c3:c2:ff:42:68:3f:
                    4e:9f:df:15:15:df:8d:b7:66:58:44:e5:13:b4:a0:
                    c2:da:f2:5d:91:d5:e9:2b:0d:20:df:f0:3a:7e:14:
                    1d:87:f9:4d:57:cf:ed:bb:9d:fb:66:2f:61:19:36:
                    a4:f3:c6:bb:bf:8d:af:71:ba:88:cd:e7:58:d1:a7:
                    57:c6:af:44:f0:65:5e:54:75:46:76:6c:96:a9:70:
                    b5:93:1a:d8:f4:2f:78:1a:81:4f:f7:67:a5:fe:7b:
                    85:55:59:0a:fc:b2:78:6e:56:89:70:15:e2:70:d3:
                    5f:e8:95:bf:0c:aa:9d:79:50:6a:c4:80:dc:9c:cf:
                    e4:8d:14:9d:7c:8c:b7:48:a4:2f:bd:f4:77:b0:5b:
                    b0:aa:40:9e:80:ef:f3:bc:30:e1:5b:8a:2c:01:94:
                    6e:3a:db:1f:5e:15:d3:29:53:6a:61:d2:ae:7d:53:
                    22:bc:39:70:eb:84:1e:61:e6:3c:54:ed:cd:c2:9d:
                    8d:38:3d:b8:88:90:c0:4a:b4:b0:b1:96:e7:c5:32:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:B9:95:17:A6:40:49:F4:C1:1B:A4:34:5F:33:3C:1A:F6:65:5C
            X509v3 Authority Key Identifier:
                keyid:D3:98:64:42:AB:63:0E:9B:A4:98:0A:2F:9E:F2:01:30:33:EF:9C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3986442AB630E9BA4980A2F9EF2013033EF9C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6LuXPyyMDMpPr1sBWZFJ4Rv5PybbDW6iSNcF3eJhJ8N/1/3230312e3231392e3235312e302f32342d3234203d3e203631393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:b0:7f:3d:0e:bf:90:81:38:60:a9:5c:53:fe:38:3e:ac:
         c3:6b:6c:85:e5:65:f0:61:d1:9b:6a:ea:ad:96:7c:f5:4f:74:
         2a:58:ed:d8:1d:e4:3e:78:a2:af:3a:0f:bb:56:84:14:65:5b:
         58:d1:ee:88:27:cf:65:f1:00:d2:cf:0b:b5:77:87:2b:1f:bd:
         bd:3d:9b:57:2c:4c:2f:99:cb:e5:60:8a:5b:4e:ed:8f:08:4e:
         25:6b:c0:c1:79:b1:56:ef:d6:ef:75:6e:0d:69:a3:81:e9:24:
         42:31:5e:58:0a:a8:03:bd:49:0c:05:bd:be:4b:12:de:63:d8:
         64:bf:04:a2:70:1b:4b:25:00:ac:04:c0:f4:9b:fe:37:96:df:
         94:cf:2f:df:bc:3e:f5:8a:07:5f:19:3e:8d:c2:e3:02:0e:6f:
         08:25:be:7b:c8:36:4a:dd:a8:d9:af:11:0d:6a:f6:2a:d4:7f:
         11:95:a9:e4:de:a5:8a:0b:68:05:1d:bc:66:11:c8:91:8f:de:
         51:12:6a:8b:81:fe:84:be:00:31:9c:35:9a:47:f8:42:e9:12:
         08:e0:0d:4c:5d:3a:6e:51:da:c3:8f:46:a2:2f:7c:2f:33:2b:
         12:82:b6:e7:2a:2f:06:2e:67:cf:c6:a5:82:da:c7:72:53:7b:
         13:6e:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:20:36 2026 by rpki-client