Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3332203d3e20323730343934.roa
File:                     32342e3135322e342e302f32322d3332203d3e20323730343934.roa (raw, json)
Hash identifier:          6hQDLwR3YdrotQz78w9GNbCBVOujCN6pCziLiqTmm2M=
Subject key identifier:   FD:00:5D:A2:5A:98:DE:96:4E:51:00:98:BE:AC:51:3D:45:42:7B:D1
Certificate issuer:       /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial:       2F6A7B770D0FCFE55581677202EDC21FE0C5D1B4
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3332203d3e20323730343934.roa
Signing time:             Tue 27 Jan 2026 20:35:42 +0000
ROA not before:           Tue 27 Jan 2026 20:30:42 +0000
ROA not after:            Tue 26 Jan 2027 20:35:42 +0000
asID:                     270494
IP address blocks:        24.152.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
                          rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6a:7b:77:0d:0f:cf:e5:55:81:67:72:02:ed:c2:1f:e0:c5:d1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
        Validity
            Not Before: Jan 27 20:30:42 2026 GMT
            Not After : Jan 26 20:35:42 2027 GMT
        Subject: CN=FD005DA25A98DE964E510098BEAC513D45427BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f3:57:09:5d:9e:79:0d:7a:3e:57:ef:c8:97:
                    59:2f:3c:ea:19:be:cd:23:ef:08:ea:56:0c:4b:0e:
                    47:ed:92:91:aa:21:77:2a:48:f4:34:df:d4:e8:35:
                    bf:dc:7e:58:00:20:2d:13:b4:dc:16:de:51:04:b5:
                    93:6e:80:aa:04:54:4c:17:43:31:6d:0e:b6:1d:d0:
                    df:15:87:0f:d7:59:60:85:36:45:9f:09:99:d5:24:
                    58:a0:bd:18:a9:ae:52:97:e1:ce:97:37:5b:60:6d:
                    e2:1b:d0:ca:c2:c6:3f:dd:b8:7c:64:9a:da:ab:0f:
                    3a:f4:c6:ba:e6:99:cc:87:c8:18:f2:54:17:8b:5e:
                    c7:01:90:ae:2f:7c:85:91:25:2f:dd:03:30:26:b6:
                    b1:3f:28:09:22:b7:82:0f:1e:1b:57:21:e8:0c:f9:
                    ae:15:4a:d7:4f:a2:47:ca:71:c4:6c:2b:3e:51:4b:
                    e2:ec:10:5f:34:e3:74:29:41:67:52:39:0b:a6:05:
                    e9:9d:35:20:93:b5:50:04:7d:8d:43:ab:46:0b:58:
                    3c:3e:da:90:f7:dc:fc:de:29:9f:7c:56:67:b3:6e:
                    9c:dd:25:0c:ec:12:8c:99:c0:72:71:7b:f1:b3:5a:
                    4e:bf:2d:c0:e2:6d:f9:56:b1:41:30:09:78:24:51:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:00:5D:A2:5A:98:DE:96:4E:51:00:98:BE:AC:51:3D:45:42:7B:D1
            X509v3 Authority Key Identifier:
                keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3332203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:da:86:76:69:46:98:87:d9:fd:2a:64:5d:fd:af:57:cb:
         69:dd:50:61:d6:2c:8b:fe:2e:c4:e5:f4:f2:0d:4b:ba:58:53:
         f5:d7:b3:06:de:c2:db:42:a5:50:6d:be:6d:8d:b0:e6:a1:f3:
         78:59:a6:52:0b:ea:16:e0:ee:05:6f:08:48:6c:52:bd:f8:58:
         f4:5b:e4:13:b1:b3:30:5f:81:f8:80:24:46:31:93:2d:db:18:
         af:69:d4:b4:63:cc:a9:31:0e:50:df:59:9f:2a:c2:13:76:09:
         f8:3c:e6:2a:07:2b:a7:4d:47:e5:dc:4b:b0:08:02:74:77:8a:
         fe:12:46:84:b8:b3:23:7d:31:11:0e:4f:c1:6d:d9:19:e5:cc:
         cb:e5:de:a3:5f:78:49:cf:99:04:ea:5a:64:7c:1b:1b:1e:d2:
         c6:9e:79:b9:96:70:15:3f:d2:ec:c0:a5:c0:1e:b1:11:49:b6:
         4f:62:40:86:5f:75:99:62:a5:67:9e:d8:43:d0:e4:11:e8:22:
         65:52:39:3f:20:0a:a3:5b:2e:5e:85:1a:c1:bb:10:62:71:73:
         93:6b:58:08:72:36:94:83:44:da:d6:3c:88:34:f5:03:19:0d:
         57:9f:8b:3e:af:8e:22:66:9e:be:ec:49:27:60:11:b7:69:c6:
         d4:92:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:40:56 2026 by rpki-client