Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa
File:                     3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          hlglT70JWTjZVd8Ylq/RBVIE6kZPQLYY4qp+r/iKy9E=
Subject key identifier:   2A:14:C3:BA:15:D7:EF:3B:2B:EB:AB:D1:C7:2B:DC:E9:4F:E5:A9:EF
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       6D0711CB4570CCC5C41D74850FA1BE5FEFF1BA64
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa
Signing time:             Wed 04 Feb 2026 22:00:29 +0000
ROA not before:           Wed 04 Feb 2026 21:55:29 +0000
ROA not after:            Wed 03 Feb 2027 22:00:29 +0000
asID:                     263649
IP address blocks:        170.150.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:07:11:cb:45:70:cc:c5:c4:1d:74:85:0f:a1:be:5f:ef:f1:ba:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Feb  4 21:55:29 2026 GMT
            Not After : Feb  3 22:00:29 2027 GMT
        Subject: CN=2A14C3BA15D7EF3B2BEBABD1C72BDCE94FE5A9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:74:08:d3:8d:f9:0e:06:0a:d9:94:71:fd:
                    f8:d0:42:17:19:66:be:30:e9:b7:c6:8c:fb:13:8b:
                    ed:82:5f:a6:18:dd:54:f5:76:c7:85:5d:bc:f2:04:
                    e5:64:61:4f:ad:6f:0f:c8:80:c7:bc:27:6a:2a:19:
                    9c:56:cd:26:bf:f8:b9:0d:fc:1e:3b:c8:37:27:4a:
                    99:65:27:09:89:94:8f:15:a7:62:6e:44:46:2a:8f:
                    e5:d6:dd:7d:a0:f4:fc:71:92:55:7e:5c:df:b3:ad:
                    4b:05:45:81:f4:01:f1:31:41:8c:cb:2c:ff:cb:d8:
                    0f:f4:51:3c:e0:c4:bf:28:72:36:61:c0:b1:91:43:
                    2d:3f:7e:26:f6:17:c7:a9:6b:a8:51:a0:a4:09:63:
                    c6:03:20:56:eb:bc:bd:62:c9:59:7c:37:4f:23:c6:
                    b5:eb:d9:cc:89:34:b7:ec:b9:85:84:f7:e9:a0:0d:
                    9d:d7:99:30:c3:d2:16:af:29:3e:01:7d:fb:77:09:
                    2c:7e:c0:a4:c1:fa:3a:53:9b:33:b1:6a:fc:0a:de:
                    2b:c4:05:2b:95:7d:52:ba:a4:6f:5a:8f:e0:73:ff:
                    60:45:c6:91:89:5e:19:0f:1b:9d:3a:bc:e7:24:50:
                    66:69:3f:d0:c2:b5:bc:1d:9f:c0:03:94:18:08:50:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:14:C3:BA:15:D7:EF:3B:2B:EB:AB:D1:C7:2B:DC:E9:4F:E5:A9:EF
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137302e3135302e38342e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:87:35:69:8c:c1:ce:68:cd:ce:b2:ba:37:12:90:0f:04:
         2c:e2:24:42:b7:a6:6d:8e:45:8e:f2:6e:94:f4:c4:85:1a:88:
         2b:4a:1d:8c:18:05:db:eb:36:45:2d:8f:4e:b0:92:6b:32:b7:
         d2:e7:f6:ed:54:1b:65:a1:e9:4a:b3:10:40:e9:b4:3d:e2:19:
         67:0e:5d:1e:34:96:fa:11:b3:2d:9c:96:f7:b4:86:f1:53:71:
         77:a6:0a:d8:30:53:8c:97:71:03:9a:ca:b4:67:d9:44:e7:ab:
         25:32:de:f5:0f:8c:92:c9:15:a5:a1:99:b6:f7:f4:6f:59:5c:
         ca:55:35:43:42:8a:80:8c:dd:1d:e7:2e:2b:b0:02:54:54:88:
         88:da:67:19:ec:e6:f4:d7:fd:6c:07:c2:db:fb:b9:d4:6e:97:
         36:7f:8f:ae:ae:b6:3f:c4:22:2f:c1:5e:9f:16:fc:35:fe:9f:
         10:32:59:3b:03:34:60:d3:31:cc:85:38:58:c7:97:95:a3:63:
         67:50:00:ce:3a:ae:6d:28:b9:a8:23:64:b7:ef:44:7b:f2:b4:
         a6:fb:0b:6f:04:5d:51:b9:8f:d6:55:00:68:37:80:ae:15:6d:
         b2:87:04:3b:eb:b0:75:7d:f2:1c:6a:1c:fb:46:af:09:44:c3:
         8f:29:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:22 2026 by rpki-client