Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          e3auh8obEZOsXAdShSA8KxW/7avCY+8qQkaz8+ncUS4=
Subject key identifier:   02:6F:9E:FD:A2:7D:4B:A9:F0:DE:AC:A4:0C:B9:0A:23:E8:00:33:00
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       6C01ECCC5CECD770B70F5E410944B7F3076FBB67
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 05 Feb 2026 16:50:19 +0000
ROA not before:           Thu 05 Feb 2026 16:45:19 +0000
ROA not after:            Thu 04 Feb 2027 16:50:19 +0000
asID:                     263522
IP address blocks:        131.108.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 17:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:01:ec:cc:5c:ec:d7:70:b7:0f:5e:41:09:44:b7:f3:07:6f:bb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Feb  5 16:45:19 2026 GMT
            Not After : Feb  4 16:50:19 2027 GMT
        Subject: CN=026F9EFDA27D4BA9F0DEACA40CB90A23E8003300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3f:d3:cf:f1:95:1a:75:93:8c:fc:3d:22:f6:
                    3f:52:32:5c:6e:29:5b:f0:b1:a0:dd:29:40:eb:21:
                    cb:af:6d:fe:35:f6:f9:be:90:a0:a5:b6:f6:42:32:
                    e1:99:03:01:80:e9:b4:b5:4c:f6:08:42:9f:08:92:
                    2a:8d:38:29:ae:72:d8:78:9f:06:79:ee:07:eb:bb:
                    72:6e:a9:84:24:43:4b:f1:39:78:b9:de:c6:41:c1:
                    e4:e9:ca:e6:f1:5e:75:a1:84:6a:f9:e3:b3:73:74:
                    c8:f2:59:17:8d:fe:52:df:fd:86:11:50:97:f7:02:
                    72:a0:0a:ea:f9:87:5e:47:f0:2d:7c:84:17:15:a9:
                    1d:00:5d:5d:8e:cd:f5:6e:79:d8:60:ba:1f:4b:75:
                    8f:16:7d:cb:46:b6:79:d4:af:5f:7f:89:c8:10:be:
                    36:a3:2d:20:72:31:f9:58:e8:aa:4a:f9:a8:26:88:
                    61:5f:68:fb:26:c0:71:a7:f4:05:82:53:d0:41:87:
                    68:7d:f2:92:b6:3f:2a:ad:0b:c4:d5:95:75:04:a9:
                    80:e2:54:f9:47:05:d2:28:1e:5b:0a:c3:50:28:a5:
                    9f:6e:ae:d9:c6:42:19:fc:6b:80:94:bd:d1:c7:b8:
                    60:ca:8c:f2:85:ff:1a:cb:23:6a:1e:4d:e3:d5:dd:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6F:9E:FD:A2:7D:4B:A9:F0:DE:AC:A4:0C:B9:0A:23:E8:00:33:00
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232352e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:60:2a:1f:70:24:9e:1c:16:31:05:da:3a:66:7d:e3:a1:
         ba:ac:5c:f6:98:1a:9b:af:61:54:01:ac:c1:00:08:48:a9:21:
         ef:95:8a:b3:fa:5d:8e:dd:fa:cb:1d:e0:87:7a:c8:9d:a8:3b:
         3c:46:a3:dc:f7:39:53:61:28:50:e1:32:96:86:f2:48:52:4f:
         71:7f:7a:fa:56:e8:07:8f:80:4d:c0:13:80:9e:29:5c:1a:da:
         fb:93:ea:6d:c4:0c:2d:15:04:94:2e:92:43:18:1b:73:bb:f1:
         1f:5d:31:d1:98:12:cb:70:33:8f:4d:d8:75:65:36:b3:d3:c1:
         82:2b:60:b2:40:0d:e6:ea:6a:1e:3a:8e:70:d7:3f:57:a9:12:
         e2:7c:e2:d4:86:9a:c4:dc:15:a5:34:d9:f5:e6:30:fe:62:9a:
         ed:1c:ed:8a:2b:58:9a:32:95:69:e3:5e:cb:49:68:e5:78:f8:
         89:94:aa:b8:81:c2:2a:96:b3:2c:1e:13:d5:32:d1:5b:43:19:
         a0:c6:a5:b1:c8:e4:d4:c9:76:fb:4e:59:d0:40:31:5d:dc:38:
         57:f7:09:20:f6:1f:23:2c:a8:b5:66:e8:93:4d:78:67:5d:45:
         8e:0d:f0:a0:09:d4:58:c0:fd:24:57:0b:33:98:e1:b8:a0:09:
         24:9f:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:36:05 2026 by rpki-client