Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa
File:                     3230302e3138352e36342e302f31382d3234203d3e203136363835.roa (raw, json)
Hash identifier:          Zg1AP3Z+1ZLcNVdsjLpg5fbkLwrQ2Fd4g5jMq2u7Ifo=
Subject key identifier:   59:CE:B3:04:B6:F9:11:E9:85:3B:AA:DD:E3:96:C3:5D:45:62:5E:25
Certificate issuer:       /CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
Certificate serial:       22C7B4F97BBD2B51A55E5AF82CD7A977FB0BBB68
Authority key identifier: 6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa
Signing time:             Wed 04 Feb 2026 23:57:06 +0000
ROA not before:           Wed 04 Feb 2026 23:52:06 +0000
ROA not after:            Wed 03 Feb 2027 23:57:06 +0000
asID:                     16685
IP address blocks:        200.185.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl
                          rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c7:b4:f9:7b:bd:2b:51:a5:5e:5a:f8:2c:d7:a9:77:fb:0b:bb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Validity
            Not Before: Feb  4 23:52:06 2026 GMT
            Not After : Feb  3 23:57:06 2027 GMT
        Subject: CN=59CEB304B6F911E9853BAADDE396C35D45625E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:cb:ec:40:5f:dd:d4:55:47:ff:b1:8a:fb:
                    f8:9f:08:66:b5:f9:0b:1d:a0:5c:77:70:24:e8:12:
                    4b:d4:02:a4:f5:7c:92:d3:f3:33:f4:58:e7:10:c7:
                    5c:fc:65:28:06:ab:62:79:ad:e3:2c:d9:a0:13:0a:
                    75:b3:53:d1:7c:1b:af:7c:a0:45:39:96:aa:4d:10:
                    6f:8c:2c:b6:34:8b:11:32:7b:f8:de:9b:f4:7d:da:
                    69:a6:02:c2:79:d5:23:4d:a3:bc:5b:62:ec:67:2b:
                    c0:10:d0:9f:cf:95:72:f7:27:23:d6:aa:31:96:05:
                    aa:1d:10:de:a7:7f:8c:5c:5b:bf:08:c6:14:7c:cd:
                    f6:6a:64:98:b6:37:f0:bd:26:d6:ee:cf:d6:e6:cb:
                    98:da:d7:a4:94:a4:4f:85:8f:dd:fe:56:ec:f5:cf:
                    30:c1:25:54:29:c0:8d:f0:ea:18:ac:0c:e9:b9:0e:
                    28:3c:a3:bf:ac:78:69:e8:67:b1:4f:b7:3f:c6:82:
                    b9:c2:97:bd:8c:50:88:bf:48:24:e9:c1:f4:06:2d:
                    1f:a4:b7:b3:f9:58:91:84:d6:db:eb:cd:04:38:18:
                    98:ee:90:e7:e2:e7:66:20:f0:4f:9b:33:85:ec:5f:
                    8c:c2:8b:f3:18:6e:c4:94:07:4e:ab:b0:2c:b6:b4:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:B3:04:B6:F9:11:E9:85:3B:AA:DD:E3:96:C3:5D:45:62:5E:25
            X509v3 Authority Key Identifier:
                keyid:6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         92:24:37:4a:8d:31:5d:42:d2:b2:2e:72:f5:71:d6:d3:a2:4a:
         b9:b5:bd:76:84:94:e5:7e:b6:0a:6d:de:85:6a:8d:d8:01:9d:
         d2:29:ca:b2:e6:a8:4b:dd:26:b0:c7:86:89:1b:de:1b:0f:05:
         bd:b5:2f:0d:96:88:21:36:d5:81:be:c1:06:87:de:05:9d:ff:
         7e:73:99:f5:44:7c:83:d5:5a:d7:76:5f:74:44:be:b5:0e:ed:
         bd:4a:7f:1e:82:e9:ca:67:86:d1:4d:76:ab:94:1e:84:fa:a4:
         a0:0c:91:b2:48:78:ce:46:69:76:2f:aa:9d:90:b1:07:9d:1a:
         17:79:62:89:28:6d:1f:a1:43:27:2d:eb:7f:f6:ab:89:e5:da:
         06:66:2a:d4:aa:56:70:3a:1c:11:1a:6c:7f:49:64:9a:d1:3e:
         7b:d3:0f:10:38:1d:7d:03:8f:c6:c9:43:9c:9c:35:f7:60:a0:
         97:66:92:4f:72:3d:0a:88:a3:82:c0:45:ca:63:ab:65:41:38:
         79:4d:ff:9f:53:a1:00:ef:3f:e8:4e:ae:1a:e4:6e:7e:f0:cb:
         7a:4b:f6:6c:d4:a6:df:fa:fc:1a:4b:0c:c2:ef:47:10:8c:52:
         a8:7d:52:ea:97:5b:44:01:c1:87:3e:20:8c:21:57:57:d3:3b:
         4a:7b:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:41:46 2026 by rpki-client