Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32322d3332203d3e20323634323831.roa
File:                     3137302e3234342e31322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          61VKsUA2MXtuHJwOKkxdsyFCRc2vVAGTaxTfdCYRk0U=
Subject key identifier:   B9:35:17:F2:D5:F6:45:A0:2C:2F:4F:43:49:06:A1:62:57:46:D9:99
Certificate issuer:       /CN=C6311968EBC105398794FB43DCF25FAA7999A36E
Certificate serial:       76320483C203F279A9C64D1B200DC1CFD2DC532E
Authority key identifier: C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 19 Feb 2026 12:10:21 +0000
ROA not before:           Thu 19 Feb 2026 12:05:21 +0000
ROA not after:            Thu 18 Feb 2027 12:10:21 +0000
asID:                     264281
IP address blocks:        170.244.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl
                          rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:32:04:83:c2:03:f2:79:a9:c6:4d:1b:20:0d:c1:cf:d2:dc:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6311968EBC105398794FB43DCF25FAA7999A36E
        Validity
            Not Before: Feb 19 12:05:21 2026 GMT
            Not After : Feb 18 12:10:21 2027 GMT
        Subject: CN=B93517F2D5F645A02C2F4F434906A1625746D999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:30:4b:10:97:eb:28:bb:bb:15:5d:e7:ce:
                    5f:62:ca:c5:45:76:55:d4:86:b5:6b:fc:cf:9f:d8:
                    20:ca:65:27:82:0d:f2:dc:0e:6e:c4:78:e9:de:f2:
                    d3:4e:27:20:fb:9a:59:34:ce:d8:3e:bc:b3:90:17:
                    d3:e3:da:99:e4:af:f3:45:55:be:e7:22:e0:b0:92:
                    cd:24:42:9d:8c:99:45:a2:3c:47:29:72:19:5f:b1:
                    bb:36:bf:b5:19:b2:72:76:c7:5c:65:68:c1:9f:b7:
                    23:6c:12:02:ea:14:4f:65:f6:31:d6:6c:37:9d:c1:
                    b6:31:32:2c:dd:14:94:c4:6c:d9:e8:7b:09:30:ba:
                    48:58:07:0a:56:8e:bd:bd:36:45:5a:f1:b0:39:07:
                    8c:c1:e7:66:7e:54:d9:a2:85:d1:b8:cb:34:01:87:
                    e5:d4:53:07:9b:25:46:32:94:b9:da:eb:24:b7:5d:
                    d9:73:66:5a:3a:b5:de:e6:4a:d2:3a:32:df:46:53:
                    ab:f8:fa:f7:91:f5:6b:85:60:1c:5b:54:f1:7b:6a:
                    0f:56:61:2d:fe:d5:da:5a:36:6c:70:e0:f5:e7:8c:
                    6b:bb:f1:7e:8d:b2:eb:fd:c2:1c:41:f4:c7:24:cd:
                    5a:62:2e:81:d0:31:32:12:ff:07:2a:ff:ab:27:b5:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:17:F2:D5:F6:45:A0:2C:2F:4F:43:49:06:A1:62:57:46:D9:99
            X509v3 Authority Key Identifier:
                keyid:C6:31:19:68:EB:C1:05:39:87:94:FB:43:DC:F2:5F:AA:79:99:A3:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/C6311968EBC105398794FB43DCF25FAA7999A36E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6311968EBC105398794FB43DCF25FAA7999A36E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3137302e3234342e31322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:80:68:8a:f8:c0:a4:5f:f7:66:7a:6d:ee:f1:ac:bc:8d:bb:
         f1:b2:2c:e2:f7:9d:9c:c4:47:56:f5:a3:ae:d1:c1:c2:43:bf:
         b6:a3:08:13:af:02:11:2c:d3:65:40:b9:fa:71:b7:08:a2:d6:
         1b:ec:7a:cf:98:a0:8c:05:1c:de:ee:7b:5e:ea:dd:46:79:34:
         c9:c8:e0:41:29:45:a8:ca:24:2d:45:b9:fe:9c:b3:5a:8e:31:
         63:1a:8f:45:79:4a:2a:4f:5e:9d:8f:d9:81:a3:eb:75:9d:0d:
         8e:12:40:72:03:db:ca:46:84:35:42:4d:e7:7a:03:bb:25:a4:
         0e:9f:bb:73:c3:a7:b3:85:cd:92:ac:7b:1c:20:65:d1:a8:d1:
         9a:2c:7a:a9:df:40:26:2e:68:0c:b4:b4:ed:52:c5:15:c2:ef:
         e3:1e:c4:c7:b1:e5:29:ab:66:05:8e:25:00:d3:d4:c5:e9:31:
         46:b0:2f:ac:8e:1a:8a:8f:a8:48:8f:b8:26:ef:f1:16:cf:17:
         72:8c:ee:86:37:15:e4:92:32:b3:49:43:96:1c:82:9d:6f:02:
         c9:be:d1:e5:73:ec:22:4b:aa:d1:1b:b5:82:c4:8d:39:69:b9:
         17:c9:c1:ca:f3:fd:1a:e2:a1:ff:23:f1:d6:d9:7d:47:f8:12:
         1a:ad:b7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:35:37 2026 by rpki-client