Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
File:                     3230312e37312e36342e302f31382d3234203d3e203237363532.roa (raw, json)
Hash identifier:          E25DmfEKyRYSubgkB3HE+jBmhe8dE/IB55Lvqo8IsEI=
Subject key identifier:   1A:6B:5A:DF:C8:A0:B2:48:CD:35:B6:52:32:F9:3E:A0:53:07:A1:8B
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       3BF17EB3CDD91E15D2C31249D7247C497DE244EB
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa
Signing time:             Wed 04 Feb 2026 20:00:18 +0000
ROA not before:           Wed 04 Feb 2026 19:55:18 +0000
ROA not after:            Wed 03 Feb 2027 20:00:18 +0000
asID:                     27652
IP address blocks:        201.71.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f1:7e:b3:cd:d9:1e:15:d2:c3:12:49:d7:24:7c:49:7d:e2:44:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Feb  4 19:55:18 2026 GMT
            Not After : Feb  3 20:00:18 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:b8:b9:43:b5:84:85:71:96:91:db:d3:5b:
                    93:4c:c3:f2:a8:d4:22:b3:7f:c6:9f:94:97:f4:f4:
                    7b:3f:15:1d:bd:e4:f2:51:a7:e5:a2:51:c2:3a:92:
                    51:5e:58:12:ba:d1:23:f9:ff:7d:34:81:66:f4:b9:
                    cd:1a:b3:4d:7d:7f:52:32:ba:f7:df:f0:ab:db:db:
                    92:bf:d8:e7:6f:af:7b:8e:61:04:a0:e7:d7:91:c9:
                    76:5f:1a:28:69:1f:4f:3c:30:6a:b8:e5:90:26:a0:
                    41:c5:d5:1f:c2:19:58:c3:5d:5e:08:b4:2c:d0:92:
                    c2:c3:0f:f0:9e:a1:c1:5c:19:e6:15:80:e6:79:57:
                    91:16:f4:71:ed:7b:ea:02:2c:83:e6:be:d2:0e:d0:
                    c9:c5:95:80:88:ea:18:28:5b:46:f3:6e:7a:5a:4a:
                    bf:df:07:88:68:27:57:45:cd:5a:7d:2c:6d:21:83:
                    93:d3:78:fe:86:e5:6f:20:3e:42:7f:4a:e2:74:b5:
                    68:6e:0a:58:75:28:e5:3e:22:76:76:1e:f7:8e:f0:
                    5a:4e:b4:77:ba:bd:88:c2:ae:41:56:28:51:c0:ba:
                    b9:74:4c:50:48:11:91:50:d7:08:a4:f5:19:48:1d:
                    11:a2:e3:7f:d5:05:1f:65:e8:3a:91:9d:cb:06:f3:
                    16:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:5A:DF:C8:A0:B2:48:CD:35:B6:52:32:F9:3E:A0:53:07:A1:8B
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e37312e36342e302f31382d3234203d3e203237363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:cb:c8:fb:a3:d7:1e:9f:ba:aa:b3:0b:f8:68:a9:51:6d:
         98:c3:f3:9c:72:5a:a2:c1:d9:e9:bf:a6:f1:55:10:51:52:d7:
         fa:85:22:b3:e7:4b:4e:96:9e:f6:5b:b3:73:0f:65:f7:8e:48:
         e5:1e:bd:02:22:18:e0:56:7d:a5:91:a9:da:94:28:ed:4f:2e:
         63:36:ff:d1:f3:25:93:f8:cb:1b:fc:22:32:fe:de:59:fc:b7:
         b0:99:ff:79:b8:35:d2:72:0b:ea:37:9f:09:e5:af:42:29:8f:
         1e:aa:95:0d:d6:7f:7a:fe:90:6b:6b:29:c5:68:60:49:84:f6:
         e7:28:f8:f2:9c:5f:46:40:36:fd:7f:72:67:26:2d:4d:27:1c:
         bb:dd:96:ed:6e:28:ff:9a:f1:5c:be:d4:a9:2e:81:f6:d9:66:
         c0:bf:6e:6b:31:38:94:d0:89:8f:11:b7:66:cb:d0:92:58:b7:
         14:5c:78:60:0c:f1:05:70:22:86:78:03:e3:00:f5:37:1c:7f:
         5f:a7:d0:71:3c:fe:c9:d3:1f:df:cc:49:38:39:38:70:96:be:
         af:ba:7e:88:c9:14:53:e1:7d:d8:34:c7:d1:42:20:65:42:2d:
         c0:ef:1a:09:64:6d:d1:c1:82:7f:38:2f:03:90:54:a2:60:cb:
         5c:9d:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:20:57 2026 by rpki-client