Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/3230312e35342e3230352e302f32342d3234203d3e203238363134.roa
File:                     3230312e35342e3230352e302f32342d3234203d3e203238363134.roa (raw, json)
Hash identifier:          1qx+cMftOqfmxfwCUkKu32TtM2FbZUvsbuEp9rR7NBs=
Subject key identifier:   4B:E9:2C:50:98:AC:DD:12:9C:A9:27:48:CF:D1:AD:5D:E1:8B:0D:4F
Certificate issuer:       /CN=35248DE460997A8581D1487D69B81A4E42C335CA
Certificate serial:       6F624AE97DAC669130583D305153E22B81F41483
Authority key identifier: 35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/3230312e35342e3230352e302f32342d3234203d3e203238363134.roa
Signing time:             Fri 13 Feb 2026 16:54:12 +0000
ROA not before:           Fri 13 Feb 2026 16:49:12 +0000
ROA not after:            Fri 12 Feb 2027 16:54:12 +0000
asID:                     28614
IP address blocks:        201.54.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.crl
                          rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:62:4a:e9:7d:ac:66:91:30:58:3d:30:51:53:e2:2b:81:f4:14:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35248DE460997A8581D1487D69B81A4E42C335CA
        Validity
            Not Before: Feb 13 16:49:12 2026 GMT
            Not After : Feb 12 16:54:12 2027 GMT
        Subject: CN=4BE92C5098ACDD129CA92748CFD1AD5DE18B0D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:4f:6d:e5:43:98:a2:0e:49:5b:00:63:48:
                    1b:cf:d3:14:fa:63:3c:98:37:96:81:0b:e9:78:41:
                    5f:35:41:47:42:dc:48:10:70:b5:b3:d4:22:1e:93:
                    7d:3b:26:a3:9e:62:c0:88:25:4d:b1:59:65:9f:29:
                    c4:58:e4:55:29:c9:38:09:25:d3:74:42:57:4a:06:
                    89:65:7f:9a:d4:9c:7e:e5:94:06:a2:83:dc:e4:58:
                    4f:46:6b:a5:c4:00:d2:9c:a6:f2:ff:ef:9e:67:3f:
                    38:d1:f6:ee:1b:38:c8:63:5a:7f:32:75:a4:71:13:
                    d0:99:86:7b:d2:48:ab:fe:9e:38:48:58:51:f1:51:
                    3e:26:e2:6d:3c:08:9e:49:aa:b2:d4:62:07:27:8b:
                    af:09:2b:1a:ec:d5:57:f4:41:f8:07:68:01:65:fa:
                    92:46:fd:f4:f4:35:b4:62:50:ab:a1:1c:07:de:c7:
                    88:0c:a6:5b:4b:91:6f:63:b9:2c:b6:29:92:84:3a:
                    63:67:b4:5b:49:c2:5c:59:50:53:76:63:af:70:cf:
                    a8:d5:b9:f2:e6:42:7b:5c:d2:8e:5a:13:a1:1c:f8:
                    e2:15:a4:4b:0d:60:0d:a3:87:96:3e:fb:27:31:d2:
                    05:19:8d:4a:5a:ff:9e:95:f4:22:13:61:d2:0c:92:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E9:2C:50:98:AC:DD:12:9C:A9:27:48:CF:D1:AD:5D:E1:8B:0D:4F
            X509v3 Authority Key Identifier:
                keyid:35:24:8D:E4:60:99:7A:85:81:D1:48:7D:69:B8:1A:4E:42:C3:35:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/35248DE460997A8581D1487D69B81A4E42C335CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35248DE460997A8581D1487D69B81A4E42C335CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mjfsoNSv6ZwzyhVwSHNu7MAGVK6Nzf7UW7BY5QiJmqd/0/3230312e35342e3230352e302f32342d3234203d3e203238363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:15:45:99:03:ca:a9:69:10:8c:4a:e2:71:93:d2:b9:2b:ed:
         ad:17:c9:9a:bd:a2:15:e3:31:db:7d:0b:18:09:9c:67:88:02:
         f5:8c:70:12:7a:9c:5e:80:0c:2c:ff:06:97:1a:94:0b:c7:0f:
         1c:b8:de:7e:82:d4:ef:0e:f5:40:ed:51:65:eb:a5:50:f2:1a:
         90:3d:e8:e7:c8:3d:80:d5:35:26:21:c4:4c:7b:7c:34:b2:e8:
         bc:df:ae:43:3b:70:7b:67:9e:5a:dd:26:1f:09:52:7b:fc:73:
         9d:36:00:d2:b6:dc:01:dc:59:58:ae:c6:18:08:d0:8a:89:a2:
         8c:07:12:c8:a7:df:59:2b:71:b5:23:e3:44:61:49:b2:7e:c6:
         7b:68:ea:b6:6b:a2:57:d4:a3:de:cf:fc:2e:40:4d:38:59:6c:
         bc:0c:0d:95:2b:ec:8b:e1:bf:0a:26:d2:b4:6a:f1:a1:58:8e:
         77:92:0b:64:b5:b7:1c:16:0f:9a:35:8a:e7:2f:82:0d:ea:57:
         ab:ae:96:b5:0f:1b:ad:04:21:56:c4:f9:17:ad:1f:e8:09:65:
         ca:81:51:66:9e:b7:6e:c6:65:95:7c:c5:84:12:b4:ab:50:1f:
         d8:7f:1d:03:3a:3b:97:ac:46:52:2e:dc:e3:12:75:b7:33:0f:
         a2:ee:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:18:40 2026 by rpki-client