Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (raw, json)
Hash identifier:          lESWfIuS0/7DdwwRVznbL8aH90q1F4GnN4pKfgpJvg0=
Subject key identifier:   D2:56:E6:BE:44:6A:55:C1:AA:08:3D:33:C3:E4:01:47:2B:3B:64:A4
Certificate issuer:       /CN=B11BE6CAB53FC4E28CBCD5946DDCED24099FF940
Certificate serial:       EB01109415A971ACB61FD0DA42C7C81A138AEB
Authority key identifier: B1:1B:E6:CA:B5:3F:C4:E2:8C:BC:D5:94:6D:DC:ED:24:09:9F:F9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
Signing time:             Thu 05 Feb 2026 20:36:50 +0000
ROA not before:           Thu 05 Feb 2026 20:31:50 +0000
ROA not after:            Thu 04 Feb 2027 20:36:50 +0000
asID:                     270915
IP address blocks:        201.140.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            eb:01:10:94:15:a9:71:ac:b6:1f:d0:da:42:c7:c8:1a:13:8a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11BE6CAB53FC4E28CBCD5946DDCED24099FF940
        Validity
            Not Before: Feb  5 20:31:50 2026 GMT
            Not After : Feb  4 20:36:50 2027 GMT
        Subject: CN=D256E6BE446A55C1AA083D33C3E401472B3B64A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:02:0d:9d:cf:c0:15:72:28:82:d6:3f:02:
                    dd:e7:2f:e3:5c:10:1c:8b:e9:3e:82:ba:f7:e2:85:
                    75:f3:5c:cb:4f:44:e5:0b:5c:aa:f7:f8:da:4a:b0:
                    30:6d:c0:06:74:7d:f1:6a:82:2e:23:f9:6d:83:c6:
                    5f:49:f8:6b:47:50:f0:2a:c0:46:f4:8a:b9:ae:40:
                    69:06:7b:ba:65:bd:54:97:2e:b6:40:9f:95:9a:ff:
                    ef:20:63:43:46:81:7f:b2:a8:62:56:0c:78:0a:9b:
                    db:dc:4b:02:3a:26:5e:e6:4e:45:3f:1d:8e:8e:63:
                    d2:b5:aa:85:ea:76:d7:9f:bc:97:d8:90:1f:77:6f:
                    33:8a:1e:5f:db:4c:3a:bd:b2:28:dc:c9:5e:6a:b7:
                    cd:6d:10:b9:fd:ae:08:6a:8a:a2:70:a9:e5:9c:5d:
                    be:d2:1f:d9:57:49:e1:fc:e1:8d:98:bc:9a:03:cb:
                    ee:76:a5:02:8d:87:3a:a3:e5:9a:b6:f6:c3:5f:2c:
                    35:57:fb:22:10:62:73:b6:b5:a4:06:53:97:dc:e4:
                    20:18:a7:39:a8:f2:6f:69:97:9d:ea:ed:1f:3a:e8:
                    5c:38:ad:5a:46:74:1b:ec:9f:39:d7:b0:f4:6d:07:
                    bf:bd:6d:88:62:8b:fc:8b:4e:6e:dd:2d:41:f4:02:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:56:E6:BE:44:6A:55:C1:AA:08:3D:33:C3:E4:01:47:2B:3B:64:A4
            X509v3 Authority Key Identifier:
                keyid:B1:1B:E6:CA:B5:3F:C4:E2:8C:BC:D5:94:6D:DC:ED:24:09:9F:F9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B11BE6CAB53FC4E28CBCD5946DDCED24099FF940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:f9:81:4d:ac:d5:59:80:84:fa:4f:a9:75:ef:97:8b:72:8c:
         34:2a:0f:e2:9c:3b:9b:51:24:67:f0:ba:ad:7e:e9:1b:52:a0:
         f7:82:ec:40:b1:02:15:e3:fe:6a:9a:03:08:26:0e:34:27:f6:
         71:34:84:c9:61:e4:73:bc:29:7c:68:98:50:63:87:bc:1c:e7:
         19:56:cb:0d:79:71:93:87:ce:86:8c:52:55:9b:e2:01:54:53:
         2b:76:fa:ad:1f:84:ce:ad:a0:20:e5:40:4e:18:75:6f:fb:f7:
         52:7a:e9:7e:0c:69:3e:a1:61:12:63:6d:90:8d:2d:a4:62:51:
         81:c6:ab:cf:17:7b:88:36:7b:3b:91:87:c5:9f:b5:b8:fb:79:
         ca:5d:87:f0:aa:47:76:1e:c1:85:94:52:f7:5a:72:3e:df:47:
         c6:e7:1d:6c:52:28:f4:a3:28:ab:b9:60:d8:20:d1:92:5d:f1:
         d8:c2:ef:3b:2b:9b:bf:32:70:f9:7d:86:42:c1:99:cb:9f:6b:
         de:ea:64:02:d1:8c:3f:96:40:e8:66:52:a7:64:26:4d:c7:33:
         c6:e7:db:96:ba:74:1b:5c:3a:b7:31:00:dc:ef:e8:66:37:28:
         e0:30:77:d4:2b:30:44:38:5e:a3:43:07:5d:71:e3:ff:39:08:
         ae:ee:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:39:37 2026 by rpki-client