Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235332e302f32342d3234203d3e203631363633.roa
File:                     3137302e3135302e3235332e302f32342d3234203d3e203631363633.roa (raw, json)
Hash identifier:          g/HWvmNQZ4CnNGh7Cw7CCRTo6EIFAmxeAndCZuBFU6E=
Subject key identifier:   13:B2:E3:B1:48:67:88:80:EA:A3:3F:D5:60:C2:5E:35:6A:DD:F9:41
Certificate issuer:       /CN=A4613102C06DD4600B98177DD43712196340E623
Certificate serial:       63851BF4183501E163D568441A22EDAA638ABA5F
Authority key identifier: A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235332e302f32342d3234203d3e203631363633.roa
Signing time:             Wed 04 Feb 2026 12:35:25 +0000
ROA not before:           Wed 04 Feb 2026 12:30:25 +0000
ROA not after:            Wed 03 Feb 2027 12:35:25 +0000
asID:                     61663
IP address blocks:        170.150.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl
                          rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:1b:f4:18:35:01:e1:63:d5:68:44:1a:22:ed:aa:63:8a:ba:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4613102C06DD4600B98177DD43712196340E623
        Validity
            Not Before: Feb  4 12:30:25 2026 GMT
            Not After : Feb  3 12:35:25 2027 GMT
        Subject: CN=13B2E3B148678880EAA33FD560C25E356ADDF941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:7e:49:03:45:09:8f:fc:25:d1:01:0b:6a:
                    f5:ea:65:b6:4b:5a:05:ce:09:8c:aa:07:b0:32:ac:
                    87:a3:01:14:f6:a2:4f:67:db:e9:10:90:d9:d5:5d:
                    e9:99:4b:9b:2f:39:d4:9f:d9:e4:9b:b1:6f:63:6e:
                    8f:67:36:e1:0e:ef:95:a9:9b:ae:07:6a:a0:16:d8:
                    18:99:8d:26:18:4c:30:10:16:15:fe:dd:54:82:9a:
                    d1:fb:9f:3f:93:a0:25:81:7e:fe:11:23:99:48:50:
                    6d:d5:72:94:4f:db:fa:0d:f6:59:b2:01:33:16:26:
                    a6:ff:ab:fa:f3:42:63:3d:82:ee:5b:19:83:84:08:
                    d0:aa:e5:df:58:6d:01:13:4c:c1:52:60:12:59:60:
                    11:87:83:c8:03:8a:86:49:a8:65:45:74:1f:81:53:
                    69:73:7b:78:a5:ff:ce:46:b7:fb:2b:21:f8:5c:a4:
                    5a:af:6d:ce:40:35:c7:e1:e6:09:9b:a5:fd:fd:15:
                    73:94:c7:f6:53:04:11:56:49:c5:fc:2c:db:30:a6:
                    f4:66:94:a2:11:49:33:a3:b2:14:2e:bf:35:e4:cb:
                    94:ab:ff:70:f8:4b:06:ea:d5:e5:5b:05:78:72:23:
                    0b:c3:37:bb:ff:8a:d9:69:fe:8b:ec:b1:4b:38:de:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:E3:B1:48:67:88:80:EA:A3:3F:D5:60:C2:5E:35:6A:DD:F9:41
            X509v3 Authority Key Identifier:
                keyid:A4:61:31:02:C0:6D:D4:60:0B:98:17:7D:D4:37:12:19:63:40:E6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/A4613102C06DD4600B98177DD43712196340E623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4613102C06DD4600B98177DD43712196340E623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SsJDXMb9d9qSW9Kz9SFgg8Ddfopf9HQqkySEkjGHAfj/0/3137302e3135302e3235332e302f32342d3234203d3e203631363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:91:61:06:d8:31:e8:b0:74:96:cb:c4:19:6c:75:81:45:1a:
         43:f4:4a:ff:21:60:49:b5:be:36:c7:70:d0:6c:30:f9:9f:38:
         a0:05:a5:88:39:68:30:de:4e:eb:f7:8d:b5:ed:3f:56:c5:b9:
         ad:78:22:3b:06:d0:9a:76:a0:57:fe:30:36:c4:15:14:14:41:
         6c:b5:76:45:29:87:ac:fe:fd:22:27:f1:32:99:c1:1f:e4:41:
         64:5b:83:e9:c4:97:61:aa:6c:36:8b:34:4b:12:d7:e3:f4:75:
         0d:8b:32:d0:ed:c9:33:1c:99:b4:f0:02:f0:e4:32:77:bd:f6:
         17:e8:c6:cf:a2:43:50:fc:83:c8:45:db:a6:4d:a6:e9:fe:ca:
         9c:a5:99:3d:a6:a1:05:00:6a:d2:ce:ca:de:33:75:e5:79:c0:
         0c:ea:43:57:96:7f:63:33:1a:de:59:48:42:05:ba:b6:a2:f3:
         54:9c:b0:92:c0:53:47:66:96:47:34:5d:f8:50:79:fa:f5:cf:
         bd:f6:10:dd:9e:36:8c:e6:46:10:e9:9b:b1:64:f5:79:8a:e3:
         83:bc:29:52:34:90:53:da:b0:e2:f7:dc:cc:1d:64:34:e9:84:
         ba:24:3d:fd:3d:d6:94:29:d1:f9:21:89:d3:68:94:ce:6f:01:
         07:6c:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:47 2026 by rpki-client