Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136332e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136332e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          XpHeFfwuojGL7V4l9zGCHJa46deOW1RLGeG2wG9P8h8=
Subject key identifier:   E2:77:0F:E3:CC:76:7C:A2:81:75:EC:28:0C:02:9B:BE:12:D7:56:4C
Certificate issuer:       /CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
Certificate serial:       619E856686620544516304C88DFFB27EE4E99D64
Authority key identifier: D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136332e302f32342d3234203d3e20323637343236.roa
Signing time:             Sat 21 Feb 2026 13:40:56 +0000
ROA not before:           Sat 21 Feb 2026 13:35:56 +0000
ROA not after:            Sat 20 Feb 2027 13:40:56 +0000
asID:                     267426
IP address blocks:        181.191.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9e:85:66:86:62:05:44:51:63:04:c8:8d:ff:b2:7e:e4:e9:9d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
        Validity
            Not Before: Feb 21 13:35:56 2026 GMT
            Not After : Feb 20 13:40:56 2027 GMT
        Subject: CN=E2770FE3CC767CA28175EC280C029BBE12D7564C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:6f:c6:e2:ec:68:be:8c:af:12:44:f8:00:
                    a8:06:3f:71:98:c9:2c:7e:ad:bd:90:eb:d6:68:7c:
                    93:57:26:e8:9f:44:05:bb:ea:de:b5:c3:04:87:05:
                    80:0d:5a:88:f7:b8:93:7d:a4:e6:eb:71:fe:96:7d:
                    3d:ba:8a:ed:a0:41:9a:a1:55:85:2a:45:c6:8b:21:
                    6b:ed:de:ec:4c:4e:d6:db:23:98:0f:99:41:6a:1c:
                    27:57:86:97:b3:88:de:37:da:6f:71:52:96:77:1a:
                    fb:f5:d3:36:4f:e4:02:3b:67:10:40:b2:13:37:a2:
                    4b:d2:1e:0f:ab:50:ed:39:67:1b:c3:35:4d:b8:ce:
                    5d:84:35:10:84:34:39:15:61:9c:64:51:53:d1:a7:
                    a5:a6:d3:34:2c:c5:cc:9d:5a:66:60:8a:c3:62:98:
                    3a:12:c3:ab:59:58:ad:66:0a:ae:33:3c:1d:d0:3c:
                    3a:cc:98:62:b3:fb:c1:c4:0d:e2:05:36:c0:bf:dc:
                    91:be:27:7e:03:b7:90:17:24:cd:d0:39:34:29:3f:
                    43:03:14:26:01:f4:39:17:e5:5c:da:51:51:b5:89:
                    5a:33:a8:c5:96:45:5d:38:e4:fe:25:ae:31:d6:f6:
                    93:6b:72:ae:cb:a5:ba:32:22:9a:5a:f7:c1:ed:f0:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:77:0F:E3:CC:76:7C:A2:81:75:EC:28:0C:02:9B:BE:12:D7:56:4C
            X509v3 Authority Key Identifier:
                keyid:D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136332e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d8:f2:a3:78:68:69:82:ea:6e:17:8e:15:15:70:4b:56:fc:
         06:82:35:ac:60:f9:6f:85:05:54:73:53:9d:40:e9:ab:19:65:
         29:c6:7a:5a:c3:67:ab:b8:b1:01:4b:e6:86:51:83:1d:8f:b6:
         7d:0d:63:2e:8f:c2:fe:62:35:5f:45:9c:b9:21:05:0d:43:18:
         6e:6c:8a:3c:1c:28:32:47:e0:68:56:25:d1:07:76:b0:cf:1a:
         5c:35:f6:27:5d:fd:91:fa:17:0b:7c:cf:f8:ff:a5:b4:b3:b0:
         74:fa:1b:87:9f:59:92:a8:15:c8:87:cb:90:ae:64:f1:a6:e8:
         72:0d:e0:0f:d4:92:84:da:2a:7a:70:44:ae:d5:4b:b2:78:02:
         ac:24:79:07:6c:66:ad:ff:fe:59:83:44:95:5a:32:21:fd:ce:
         cf:7c:f2:30:ea:5a:69:45:90:e0:59:e6:42:77:6c:86:2c:70:
         13:9f:05:e1:3b:b3:c6:09:83:b1:ec:52:a2:f7:be:4e:62:27:
         58:d6:96:38:7c:3d:5d:3a:9e:b0:98:f8:05:38:4f:e1:30:22:
         21:a5:b8:3f:c6:fe:f2:04:fc:49:23:79:96:39:a4:07:49:ae:
         01:d5:ea:3e:db:a4:cb:c9:45:39:cd:30:c7:1b:6d:76:69:1e:
         74:35:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:57 2026 by rpki-client