Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa
File:                     3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa (raw, json)
Hash identifier:          +xlVwABihPRkagS7eJ/2qaed2YEvuSHiB1M6iXuJFlM=
Subject key identifier:   34:74:92:14:55:B1:57:34:01:B0:D5:9C:49:3A:25:93:B3:66:AB:92
Certificate issuer:       /CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
Certificate serial:       2F21EF74CDAD5ADC88206905CE1F6723BA9DA104
Authority key identifier: 51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa
Signing time:             Thu 05 Feb 2026 22:46:29 +0000
ROA not before:           Thu 05 Feb 2026 22:41:29 +0000
ROA not after:            Thu 04 Feb 2027 22:46:29 +0000
asID:                     267511
IP address blocks:        201.182.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:21:ef:74:cd:ad:5a:dc:88:20:69:05:ce:1f:67:23:ba:9d:a1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
        Validity
            Not Before: Feb  5 22:41:29 2026 GMT
            Not After : Feb  4 22:46:29 2027 GMT
        Subject: CN=3474921455B1573401B0D59C493A2593B366AB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:c4:b8:d7:58:64:b7:83:27:66:2a:33:06:
                    16:1e:d1:70:a0:b9:ba:94:f7:d4:d1:7e:05:69:29:
                    2b:e3:7f:3e:c5:09:e3:16:d8:bb:52:71:27:8a:ed:
                    72:a5:8c:63:3e:25:2f:9c:97:b0:55:3a:81:e9:7b:
                    aa:57:a4:d0:82:fc:86:d7:a0:df:2a:f6:fb:65:f6:
                    1e:e1:7b:c1:1c:4b:3c:7b:92:7f:a1:5f:ab:dd:d9:
                    84:33:ad:c3:83:9b:63:a2:c6:1d:22:ca:fd:59:ab:
                    33:21:83:ac:f0:c8:34:81:46:00:be:99:72:ba:b8:
                    ab:75:c1:5d:6a:53:53:0e:b8:20:63:fb:6e:32:39:
                    ef:f6:d0:0b:eb:e2:32:8e:01:67:6b:88:90:28:38:
                    7a:38:16:34:2f:1f:eb:8a:8b:2f:34:46:0c:67:3f:
                    d4:87:67:d5:9b:e5:5a:6f:99:29:0c:f0:b6:c7:64:
                    78:d9:10:17:2a:85:d6:9b:2b:e0:dd:ca:02:f7:90:
                    03:9b:6f:f8:cf:26:96:e1:69:fe:e3:29:3b:6c:94:
                    b6:af:57:ca:7c:c7:c8:99:b9:29:7e:ee:da:f8:5d:
                    ab:1d:94:18:d7:f2:09:dd:3c:9b:ae:35:60:10:c9:
                    43:0a:9a:45:c4:c4:c0:a7:92:1e:44:1f:91:f1:a2:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:92:14:55:B1:57:34:01:B0:D5:9C:49:3A:25:93:B3:66:AB:92
            X509v3 Authority Key Identifier:
                keyid:51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/3230312e3138322e3130322e302f32332d3234203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:f2:0e:1c:dd:09:50:3f:c3:7d:c4:71:a5:c5:7a:6e:7f:
         f1:94:3c:df:ef:a3:a9:b6:f0:a0:44:db:e1:a1:ce:51:1c:53:
         cf:4a:57:e5:21:5f:c9:a7:83:dc:54:f6:d6:3b:71:9b:c1:69:
         3e:68:00:43:da:5c:c4:49:64:34:86:08:55:da:64:f5:ae:cd:
         54:fb:93:e9:78:a1:6b:aa:66:4a:24:4f:ed:b2:7a:27:6a:ad:
         c6:b5:93:97:27:59:cc:90:49:66:ec:c9:69:37:11:3a:54:e6:
         9a:d8:3e:71:cb:9a:a4:60:5c:c4:d4:d3:0d:47:13:c0:a1:bf:
         9c:f3:9c:d3:24:70:17:bc:76:8e:37:46:b6:76:de:0e:6c:d8:
         e3:dd:aa:1f:69:04:df:d9:96:1f:7a:2e:74:a1:ac:88:08:3a:
         5e:15:c2:d7:6f:0a:8e:25:1e:ed:5d:39:08:da:ad:90:93:13:
         c8:ed:46:46:a4:5c:71:a1:ab:6e:e2:56:d6:0e:f0:0d:53:31:
         d2:0d:ac:a5:a7:9a:4f:6d:34:29:cc:2a:79:c1:b3:ea:2a:1d:
         8d:05:ce:f2:6e:e8:77:d3:ca:45:1f:6b:0d:e9:a2:40:d9:71:
         9b:00:59:ac:be:13:de:23:df:3b:53:0d:53:10:ea:8a:10:96:
         04:4a:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:21:36 2026 by rpki-client