Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa
File:                     3134392e31392e3230362e302f32332d3234203d3e203137323232.roa (raw, json)
Hash identifier:          a19N+tR3PE8wwMmSaS77WR7D7BRxLmqJD3S5YF2mppM=
Subject key identifier:   65:55:82:9B:74:F9:7C:F9:59:63:FF:F6:EB:93:D2:E3:5C:0B:60:6B
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       3EF2B398B2DD871DB1BC27AAC76608E6AFFB3BFA
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa
Signing time:             Thu 05 Feb 2026 15:40:37 +0000
ROA not before:           Thu 05 Feb 2026 15:35:37 +0000
ROA not after:            Thu 04 Feb 2027 15:40:37 +0000
asID:                     17222
IP address blocks:        149.19.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f2:b3:98:b2:dd:87:1d:b1:bc:27:aa:c7:66:08:e6:af:fb:3b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Feb  5 15:35:37 2026 GMT
            Not After : Feb  4 15:40:37 2027 GMT
        Subject: CN=6555829B74F97CF95963FFF6EB93D2E35C0B606B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:da:64:7a:5e:72:b0:35:d9:78:74:cb:7c:
                    70:90:c0:73:3e:98:84:50:5f:b4:1f:d8:a4:4c:46:
                    90:2d:8d:69:27:25:11:e1:47:2d:53:b3:ef:4f:5a:
                    b9:5c:a6:02:16:b2:3f:82:32:4d:91:da:86:b0:5d:
                    fd:ce:b0:dd:14:f9:e2:94:07:cf:2a:b7:ec:ba:28:
                    e1:f3:bf:b3:97:b4:80:ed:a0:fe:ee:2a:bd:4d:82:
                    c1:ef:a3:2d:7b:59:d9:80:56:4d:18:b8:6d:65:1a:
                    94:08:70:c0:21:c1:0a:0d:8a:25:be:24:07:88:32:
                    26:4b:77:9b:25:54:e5:53:f4:e8:46:d1:41:1b:f5:
                    06:22:aa:df:88:1e:20:e3:61:07:e5:99:46:0e:b9:
                    8b:34:81:52:4b:ac:2b:ba:59:9c:e2:38:90:e3:ac:
                    e7:45:79:4e:4e:9f:35:34:2b:b2:23:5e:13:0b:ac:
                    4c:20:d3:90:fa:83:1a:54:49:db:2d:de:81:42:9b:
                    12:0c:78:6f:53:40:78:2e:c9:33:df:fe:4d:3a:68:
                    72:69:bc:aa:4c:6e:63:eb:1c:76:78:f4:cf:ed:1c:
                    17:9b:a2:17:58:fc:9c:77:e9:c9:f6:88:66:93:08:
                    2f:ed:7b:06:64:41:e5:66:26:c3:36:23:1b:0f:3e:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:55:82:9B:74:F9:7C:F9:59:63:FF:F6:EB:93:D2:E3:5C:0B:60:6B
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3134392e31392e3230362e302f32332d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:6f:97:b6:f1:c8:20:f3:b0:9a:6c:4d:35:8d:c8:b5:0b:a8:
         aa:ac:3c:8b:82:32:3e:63:8c:d8:0c:0e:43:ec:4e:cf:8e:e8:
         57:06:0b:4f:48:5d:cc:cd:d3:d7:c1:8a:73:4e:68:ab:43:2f:
         ac:de:fe:b2:43:d1:97:c2:fb:06:fb:15:a2:fb:f4:bd:52:1b:
         65:f1:7b:7b:30:5b:63:f4:2f:f0:35:74:9a:32:32:92:41:39:
         ec:a5:b8:08:9c:4b:ac:f1:be:53:c8:29:de:32:8c:bd:e5:12:
         7e:12:d1:ed:fb:c4:70:52:86:02:5b:cd:c9:aa:4c:40:c0:69:
         33:58:0f:99:64:a1:d0:df:2b:ab:a2:30:86:57:0b:7e:80:66:
         0d:77:99:34:12:f2:23:4f:ad:bd:a6:41:ba:66:2b:f3:50:f6:
         a5:3a:6c:25:1e:e4:4d:87:34:ac:19:ae:18:59:4d:65:57:a5:
         03:78:c0:24:c1:ba:ad:73:8a:2d:e8:1f:ca:2e:df:ba:eb:e9:
         b2:6e:7b:df:61:bd:6f:c4:65:b3:cb:1e:9c:8e:f6:74:90:61:
         22:5f:6f:32:05:53:77:49:3a:63:09:4e:45:7b:15:50:ed:28:
         b7:35:b6:0c:22:bd:13:b7:51:86:36:2c:ec:4a:1e:13:fa:5d:
         c0:61:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:07 2026 by rpki-client