Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa
File:                     3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa (raw, json)
Hash identifier:          5mZRdHH/g9PNa6K9YzEqJgHgswq7LrafMRABZKl6n1g=
Subject key identifier:   D4:94:A5:1F:B6:B0:C8:1F:E2:ED:4A:4A:3A:B5:3B:05:F8:27:B2:69
Certificate issuer:       /CN=8B5B625A528EC464925ACB69248E90494483E3F7
Certificate serial:       F893959AAFA9C71FE43BF834A9F227AE777546
Authority key identifier: 8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa
Signing time:             Wed 04 Feb 2026 23:06:12 +0000
ROA not before:           Wed 04 Feb 2026 23:01:12 +0000
ROA not after:            Wed 03 Feb 2027 23:06:12 +0000
asID:                     265081
IP address blocks:        170.233.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl
                          rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:93:95:9a:af:a9:c7:1f:e4:3b:f8:34:a9:f2:27:ae:77:75:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5B625A528EC464925ACB69248E90494483E3F7
        Validity
            Not Before: Feb  4 23:01:12 2026 GMT
            Not After : Feb  3 23:06:12 2027 GMT
        Subject: CN=D494A51FB6B0C81FE2ED4A4A3AB53B05F827B269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:e0:31:03:76:83:c8:40:b8:fe:2a:b9:1d:
                    e1:f0:f9:de:cb:ab:57:fc:c1:33:91:82:89:72:9c:
                    65:5a:da:28:ce:bf:7a:98:70:13:65:ca:a9:de:df:
                    0c:28:30:5a:8c:c5:27:1f:2f:f7:40:20:26:91:ce:
                    35:db:78:57:2b:2f:22:fc:bf:0a:21:fc:23:6c:57:
                    77:3c:1d:57:8e:7d:d4:2e:b3:c4:ef:6d:43:d5:d5:
                    ad:29:1e:e4:7e:95:31:6c:e0:9a:4f:f8:1a:e8:3c:
                    c1:91:37:15:79:37:50:1c:09:ad:92:2d:29:e8:49:
                    e3:b1:d8:09:3a:01:30:c4:05:75:aa:ed:22:56:2e:
                    3d:9c:62:d9:e8:35:c7:b7:d4:44:82:bb:87:21:c9:
                    e9:23:c1:7f:30:fb:8e:9d:38:d4:32:68:62:63:aa:
                    31:30:70:24:3f:0b:40:84:93:af:85:0d:5b:3e:9a:
                    16:5e:b1:0f:ee:10:83:b6:e8:61:38:a8:08:d8:bd:
                    12:d0:08:90:b6:23:41:ea:46:06:2b:1d:3c:ae:b1:
                    f9:c7:75:32:a3:df:b6:e0:f3:17:18:6d:77:31:75:
                    de:85:83:07:1f:da:16:80:92:5c:9e:21:ff:97:ff:
                    2b:54:e2:ed:32:44:9b:e1:cb:97:f0:0e:de:7b:3b:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:94:A5:1F:B6:B0:C8:1F:E2:ED:4A:4A:3A:B5:3B:05:F8:27:B2:69
            X509v3 Authority Key Identifier:
                keyid:8B:5B:62:5A:52:8E:C4:64:92:5A:CB:69:24:8E:90:49:44:83:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/8B5B625A528EC464925ACB69248E90494483E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B5B625A528EC464925ACB69248E90494483E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDnccpefUxaPCQHpPT6UUUwunvngfSGs22W3kMadeCFW/1/3137302e3233332e3138302e302f32322d3332203d3e20323635303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:7b:23:7d:68:b1:da:18:b9:64:20:f4:da:66:ec:28:e3:9a:
         84:fc:8d:f1:07:00:6c:a3:80:bd:56:4f:a6:bc:6b:70:38:5a:
         4f:56:a0:50:67:9b:2b:76:00:79:4b:d1:6c:16:e5:6c:11:d9:
         39:a1:d1:b9:3e:58:25:a5:e1:58:c1:71:d4:0f:b6:ca:fd:b4:
         cc:b6:30:d8:20:60:f4:ae:bf:8a:ad:cd:df:fe:dc:1b:f7:11:
         46:8d:9c:fa:b0:d4:f2:fc:2d:a3:9a:6b:62:77:03:de:9e:97:
         64:d5:40:a2:7b:5b:f8:b7:e5:65:19:f4:1c:0e:41:fb:90:fe:
         a9:e0:5e:3e:17:b4:ab:08:56:23:92:e0:17:de:76:66:f9:fe:
         47:a0:29:ec:65:ee:33:99:a8:83:5d:d6:7b:2b:a9:70:c8:fe:
         c2:d8:8c:03:8c:c6:61:0a:ff:d9:7e:d1:2a:ea:22:df:c8:47:
         41:44:58:d5:ea:26:90:dd:6c:31:1e:7a:c8:93:c2:21:24:86:
         cf:4c:e5:6c:c7:0a:11:00:f9:31:b8:b6:14:57:2d:f0:fb:46:
         be:f7:5f:7e:40:38:9d:5b:c5:01:a3:bb:7d:b6:62:e6:df:45:
         10:8e:6a:63:1e:b5:88:57:86:8f:9d:b5:c6:8d:bd:21:3f:68:
         6d:b0:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:45:49 2026 by rpki-client