Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
File:                     3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa (raw, json)
Hash identifier:          Z905rwS7mUUquB9YmwdK9oissLuNj0atGmapTMuoh2g=
Subject key identifier:   ED:1B:67:BB:BE:7A:54:10:C6:CF:C0:46:5C:FE:0F:44:49:F3:73:FA
Certificate issuer:       /CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
Certificate serial:       081EFA645C765ACAFC0CC4141D6F70557DCED9FB
Authority key identifier: 68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa
Signing time:             Wed 04 Feb 2026 19:28:46 +0000
ROA not before:           Wed 04 Feb 2026 19:23:46 +0000
ROA not after:            Wed 03 Feb 2027 19:28:46 +0000
asID:                     270811
IP address blocks:        200.219.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl
                          rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1e:fa:64:5c:76:5a:ca:fc:0c:c4:14:1d:6f:70:55:7d:ce:d9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876A918DB59AE677BB1F068BBB1EC6A5E0C6596
        Validity
            Not Before: Feb  4 19:23:46 2026 GMT
            Not After : Feb  3 19:28:46 2027 GMT
        Subject: CN=ED1B67BBBE7A5410C6CFC0465CFE0F4449F373FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:b2:c2:da:b0:bb:e8:98:60:a0:c0:0e:be:
                    16:b6:43:83:9a:ba:e3:82:d1:17:2b:5c:95:f0:d4:
                    af:68:c5:97:61:d7:88:e4:49:e7:8f:93:26:0e:1a:
                    75:7f:8f:61:f6:6c:0a:5a:3c:1f:2a:91:19:df:c9:
                    19:e0:83:1b:7f:9d:78:b4:08:25:f8:1a:f0:08:56:
                    bd:4d:a0:e7:01:7e:3d:a5:6e:0a:01:59:26:03:0f:
                    1f:dd:79:19:dd:67:2a:b2:44:34:c2:1f:4e:4e:e9:
                    10:b3:63:87:7e:3f:db:43:8c:7e:9e:d7:31:5b:dd:
                    ce:13:37:73:5b:23:67:38:c3:03:ab:41:c8:0a:d2:
                    e8:1e:e0:14:98:09:9a:04:16:a1:a0:bf:f2:7a:84:
                    f9:19:b6:8e:d6:47:de:3a:c7:82:b6:1f:07:21:d0:
                    f4:ef:9d:ef:51:35:59:e7:a9:53:25:f8:5f:4c:ca:
                    3e:d9:bd:6d:0a:97:ed:8b:99:4a:60:81:a3:70:f0:
                    88:9b:f5:37:a8:14:f7:4e:a6:9a:70:97:d0:11:e3:
                    9f:be:f4:36:ab:df:11:ac:98:30:32:e8:7d:4e:b4:
                    42:50:81:57:f2:ca:b1:91:3c:14:b0:58:c7:ab:b9:
                    4d:fd:86:68:a2:49:86:11:10:77:c3:b6:94:ce:df:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:67:BB:BE:7A:54:10:C6:CF:C0:46:5C:FE:0F:44:49:F3:73:FA
            X509v3 Authority Key Identifier:
                keyid:68:76:A9:18:DB:59:AE:67:7B:B1:F0:68:BB:B1:EC:6A:5E:0C:65:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6876A918DB59AE677BB1F068BBB1EC6A5E0C6596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/1/3230302e3231392e32302e302f32342d3234203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:93:d3:1b:36:a0:e2:e1:8d:72:c0:62:9a:ed:6f:8d:42:77:
         c6:1e:22:39:cd:8a:d8:2c:5f:bc:dd:de:dc:76:bc:55:38:52:
         dd:53:9f:8b:fc:3e:74:41:d1:83:d5:15:88:b0:d2:13:2d:76:
         17:56:ae:44:cc:ef:49:c2:09:0f:0d:23:b4:29:ce:7f:54:9a:
         cf:c5:be:f7:62:31:2a:97:64:81:be:f9:12:e5:c2:d5:72:5e:
         d3:26:db:cb:66:0c:75:c0:44:34:35:4d:d3:4a:69:d6:55:7e:
         c7:97:3c:78:aa:9d:bf:61:7c:70:1c:1a:18:97:d8:d1:33:1c:
         ac:0f:d3:07:68:68:90:82:70:4f:f1:07:6e:0a:c5:64:5b:10:
         44:4e:5f:1e:cc:be:10:64:ad:b5:8a:63:77:01:01:cf:22:8f:
         2d:a2:2f:9e:18:fa:fd:a1:b3:9f:dd:c4:01:c1:e3:58:48:1b:
         23:d4:b1:5c:60:98:ae:bd:cf:9a:74:4d:4c:6e:c6:ea:c6:16:
         e4:56:4a:7a:0f:45:02:01:0a:b7:1c:ef:4c:44:1b:b6:31:1b:
         31:3a:79:18:cf:53:92:ff:dc:74:37:96:eb:65:cb:a1:02:09:
         5e:b2:e4:1c:64:fe:aa:da:1f:ad:9f:71:0f:f8:7d:4e:c9:44:
         bd:8a:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:32 2026 by rpki-client