Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136392e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136392e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          p2wBjPaZ0H6ffFEUCQKKBxpsdN0pxT+FZETiGDzKAqk=
Subject key identifier:   15:98:44:EF:D5:E0:2E:8B:8D:41:C7:BA:2C:A8:CD:1F:F0:44:58:F8
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       4A961543461D476756CDABC6DAB2E9490909A67F
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136392e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 29 Jan 2026 16:18:14 +0000
ROA not before:           Thu 29 Jan 2026 16:13:14 +0000
ROA not after:            Thu 28 Jan 2027 16:18:14 +0000
asID:                     263508
IP address blocks:        191.243.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:96:15:43:46:1d:47:67:56:cd:ab:c6:da:b2:e9:49:09:09:a6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 29 16:13:14 2026 GMT
            Not After : Jan 28 16:18:14 2027 GMT
        Subject: CN=159844EFD5E02E8B8D41C7BA2CA8CD1FF04458F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:82:4d:bc:bc:57:6b:24:8a:ea:ef:d3:a8:
                    cb:c3:05:cb:9f:2a:fc:cf:72:74:9f:34:d9:47:41:
                    e6:37:d8:7e:f7:b1:bf:24:d8:aa:cc:7c:e6:19:af:
                    85:02:ca:9f:02:2f:cb:f5:c5:58:fb:a4:dd:f2:d3:
                    85:0c:23:64:81:bf:11:e0:c1:e9:03:55:1e:09:42:
                    f0:06:fa:30:c2:86:45:36:3e:b3:c4:66:d4:81:50:
                    98:8d:15:bd:5c:8a:69:91:40:4f:b6:ad:2d:30:98:
                    48:b5:f3:ca:ae:f6:a1:63:6d:ed:71:5d:99:9e:6f:
                    3b:64:e5:dd:77:c3:1a:38:9e:d8:53:49:35:18:4b:
                    31:64:9f:08:69:20:61:63:c5:e2:84:bb:48:e8:ed:
                    93:bd:9c:42:bb:9c:c4:c1:2d:f1:a3:0f:14:01:4f:
                    6e:40:9e:09:c7:da:af:73:c5:c0:77:81:3d:57:24:
                    f2:d5:69:2e:e3:b5:47:eb:3e:c4:11:05:33:6f:0c:
                    96:bc:7f:14:bf:5b:19:88:81:cf:43:5c:2a:e9:ca:
                    72:d4:c3:b4:e1:22:73:5b:ae:3e:9c:ea:ba:e3:fe:
                    8a:63:97:9f:79:6f:5c:5a:f9:28:5d:43:e5:0b:36:
                    d6:ea:6c:33:b0:0b:9c:ae:b1:90:78:d8:b8:88:8f:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:98:44:EF:D5:E0:2E:8B:8D:41:C7:BA:2C:A8:CD:1F:F0:44:58:F8
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136392e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:82:92:34:76:eb:da:cc:32:f5:64:8b:17:e1:31:57:1c:49:
         ea:3a:d0:b5:1b:35:a8:72:61:f8:58:a2:c0:71:9f:b8:2d:13:
         fb:cf:38:9d:91:4a:fd:a5:4c:f0:be:ff:cf:3b:23:70:ce:e9:
         04:38:12:71:b9:75:37:2f:ce:73:24:8b:ee:73:f2:14:59:fe:
         b5:67:47:81:ae:47:e0:d9:66:1d:2b:a6:04:bc:2b:f2:47:98:
         9d:c2:31:32:4d:d8:d9:24:b3:ee:73:7d:b1:44:c2:61:d7:ce:
         b4:7f:4d:21:b5:0b:bb:f1:cd:fc:76:cb:05:a6:70:d0:74:46:
         13:28:3f:78:b3:7e:48:b6:8b:6a:18:74:e3:c9:74:75:d2:27:
         8a:02:cf:08:b8:4a:b5:e1:9e:c4:14:9e:d3:72:3b:8d:1c:04:
         74:4e:c4:bd:b7:89:02:b7:d1:af:7a:9e:1e:7a:17:86:37:db:
         dd:8d:7d:05:0b:80:b4:96:98:32:55:ea:99:9e:66:9d:fc:f1:
         2b:ed:3a:25:70:e1:2f:11:a1:d2:08:3a:8b:59:c0:d2:7f:e8:
         c7:46:5e:63:f8:7f:33:13:9a:3f:e8:50:7d:eb:39:dd:c8:5d:
         a2:ff:8e:04:b3:45:2d:a7:68:76:54:a7:ce:c7:c6:0b:f0:94:
         5b:5c:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:49:24 2026 by rpki-client