Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa
File:                     3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa (raw, json)
Hash identifier:          femmjrxINKICKTll6FMqC12Rauoo6AiE33D5WwEPQAw=
Subject key identifier:   ED:1F:20:54:23:A3:40:94:BE:02:D5:C0:A4:DC:80:A9:DA:F7:B5:EF
Certificate issuer:       /CN=DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2
Certificate serial:       48DD258EDAE91333640A9C34098C65D7E83D68A7
Authority key identifier: DF:83:23:2F:CD:7F:AE:C8:A4:B1:93:B1:0B:AC:48:F6:CE:63:12:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa
Signing time:             Mon 09 Feb 2026 18:31:08 +0000
ROA not before:           Mon 09 Feb 2026 18:26:08 +0000
ROA not after:            Mon 08 Feb 2027 18:31:08 +0000
asID:                     52544
IP address blocks:        143.208.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl
                          rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:dd:25:8e:da:e9:13:33:64:0a:9c:34:09:8c:65:d7:e8:3d:68:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2
        Validity
            Not Before: Feb  9 18:26:08 2026 GMT
            Not After : Feb  8 18:31:08 2027 GMT
        Subject: CN=ED1F205423A34094BE02D5C0A4DC80A9DAF7B5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:93:19:81:ea:51:ae:21:29:36:a2:75:ad:
                    fd:92:d0:b5:8a:22:b4:f2:72:b6:9e:16:33:f6:d0:
                    fb:9e:a2:3e:d8:fe:2c:34:9a:90:e3:df:64:7b:59:
                    eb:e4:d2:ea:9c:2c:54:8e:29:b8:42:fb:83:5f:75:
                    41:1f:07:05:e5:db:6e:86:be:21:ab:b3:0b:ea:ab:
                    6f:26:d5:15:7c:cc:e3:d3:5f:55:77:06:61:f9:c8:
                    4f:9f:ee:f8:3b:90:6e:0e:d1:48:fe:02:d9:47:f9:
                    51:34:63:80:d4:86:da:0f:3f:c0:b2:87:22:ae:dc:
                    cb:7a:b2:7b:1a:15:a0:8c:2d:b6:6f:7c:34:4b:a5:
                    85:10:ac:1c:20:52:a1:2a:c3:80:0f:7a:da:bc:5d:
                    c9:dd:cc:fa:5a:bc:47:ca:e6:d5:2a:e5:06:90:fb:
                    ee:e7:c4:d6:70:3b:11:a9:ac:e3:a3:2e:d4:97:fb:
                    f0:46:7a:b4:9c:4d:86:ed:f5:a7:69:b8:eb:db:e0:
                    53:b1:4e:98:9b:47:2a:b2:ca:65:84:3f:a6:0e:c9:
                    8d:5e:cf:70:1d:a1:2b:e5:4e:cc:2e:27:50:bf:91:
                    9c:87:b3:a5:98:76:92:da:3a:f6:fb:d1:8a:04:72:
                    b3:e2:b6:55:4d:ca:82:76:8f:ae:32:53:9e:fe:25:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1F:20:54:23:A3:40:94:BE:02:D5:C0:A4:DC:80:A9:DA:F7:B5:EF
            X509v3 Authority Key Identifier:
                keyid:DF:83:23:2F:CD:7F:AE:C8:A4:B1:93:B1:0B:AC:48:F6:CE:63:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF83232FCD7FAEC8A4B193B10BAC48F6CE6312B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/0/3134332e3230382e3233322e302f32322d3234203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:54:58:47:3b:46:a2:68:68:53:a7:3b:19:c8:3a:42:69:69:
         b7:5e:cd:56:91:4b:42:30:d0:08:7e:4c:ee:81:fb:48:08:b8:
         fb:5a:7a:37:77:8a:08:64:c1:de:b0:d5:e2:1a:3b:81:18:9d:
         87:f4:bc:23:28:12:cc:f0:4b:3e:72:2c:ab:22:c0:dd:e7:eb:
         33:06:32:0f:fc:a6:52:db:04:29:2f:23:d9:f0:f5:d2:6f:21:
         5d:c5:f5:ca:93:47:40:cc:c9:43:c9:5f:e8:4b:89:90:9d:96:
         87:68:0c:8c:f5:d6:b4:6f:f5:6b:68:6b:2e:f1:97:26:03:ad:
         ea:df:aa:87:d1:cd:88:f1:78:7f:f5:ae:0f:ff:bd:c7:fc:fd:
         d1:fc:6d:96:1d:51:5d:88:e3:8d:f9:62:36:2c:0b:c8:e8:22:
         f4:98:f9:ab:38:8b:cd:e0:60:0b:d9:54:26:03:ad:72:17:53:
         24:bc:1c:86:43:fe:ca:47:f0:ae:bd:40:9a:a2:6b:63:03:73:
         9f:86:36:fa:6b:00:a6:dc:f3:79:f3:25:23:0c:2e:e5:a6:e7:
         69:aa:8e:07:71:03:fe:80:0f:31:49:f8:b0:18:37:c5:67:b3:
         d8:c7:19:91:3c:c7:40:77:bf:02:ea:3b:bb:f4:54:1f:06:c3:
         19:af:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:03:54 2026 by rpki-client