Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa
File:                     3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (raw, json)
Hash identifier:          HttORUTK54DXuvbzznZ1KonA2g6/yrbTgqMwqK2+H60=
Subject key identifier:   30:9B:1C:F4:20:11:98:44:FA:08:2F:6F:EC:84:AF:DF:60:45:BE:AC
Certificate issuer:       /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
Certificate serial:       3DAD2319B32A36ED5027D1C9E47AA523C232DA6F
Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa
Signing time:             Thu 19 Feb 2026 13:33:41 +0000
ROA not before:           Thu 19 Feb 2026 13:28:41 +0000
ROA not after:            Thu 18 Feb 2027 13:33:41 +0000
asID:                     264971
IP address blocks:        200.219.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl
                          rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ad:23:19:b3:2a:36:ed:50:27:d1:c9:e4:7a:a5:23:c2:32:da:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92
        Validity
            Not Before: Feb 19 13:28:41 2026 GMT
            Not After : Feb 18 13:33:41 2027 GMT
        Subject: CN=309B1CF420119844FA082F6FEC84AFDF6045BEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:49:12:ff:9a:8f:06:56:67:af:68:a3:7e:
                    77:e5:3c:62:37:6a:60:47:cc:07:85:1c:30:43:6d:
                    b8:80:b4:fd:c8:ec:ae:bf:2d:55:91:49:26:48:e9:
                    8b:e8:fc:68:c6:30:ad:cc:fe:e8:db:c4:2c:1d:2c:
                    b7:45:e3:90:d1:74:b9:c8:52:2c:d4:12:67:8c:47:
                    e0:da:b0:66:4e:ae:e4:87:17:8a:cb:ab:73:46:82:
                    1b:74:a7:a6:99:37:f3:41:69:c9:f9:57:9e:47:fe:
                    be:c0:04:6e:b8:ef:5b:9f:fc:a2:26:c4:a1:14:2e:
                    75:15:c4:50:95:98:65:37:b4:a1:4c:46:94:5a:0a:
                    e6:8a:01:dd:e2:d8:6a:65:66:ad:3d:1f:15:80:4e:
                    8b:31:f6:41:21:a5:82:da:5c:42:03:ee:92:0d:10:
                    ca:0f:5b:15:f9:2e:b5:60:7f:2c:1d:69:f1:06:26:
                    3f:c2:ed:64:6b:b7:36:7d:7a:cd:87:74:bc:f8:23:
                    ac:fa:c9:e5:56:c8:ba:73:85:08:12:55:20:e8:d0:
                    84:37:28:c1:12:9f:dc:ab:49:89:07:91:7a:ec:fd:
                    c0:a5:1c:1b:05:75:26:ad:67:39:52:38:c8:9c:e4:
                    72:46:06:6a:ab:89:55:94:22:3c:44:64:40:76:17:
                    fb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9B:1C:F4:20:11:98:44:FA:08:2F:6F:EC:84:AF:DF:60:45:BE:AC
            X509v3 Authority Key Identifier:
                keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:fb:d4:f2:6e:ab:39:2c:f6:51:97:17:d1:82:7c:53:88:bc:
         07:ce:19:80:72:5b:41:45:4c:4a:e9:3c:5d:52:7e:90:ea:27:
         b7:83:a8:e5:b3:b9:fd:f0:f3:f7:56:a4:42:6f:6d:e7:68:0e:
         3e:59:19:ea:4d:a0:24:21:b2:b2:19:b6:8a:23:e0:34:ff:91:
         12:fa:f0:53:f5:c2:3c:3c:51:6a:a6:c4:ca:e4:4e:8d:75:57:
         3a:c0:d9:84:a6:a7:86:2c:00:99:63:1f:e1:96:19:3a:9a:bd:
         32:cd:9f:b7:8c:c4:64:85:d6:23:5f:ac:79:76:a3:00:9b:c1:
         96:42:0d:1b:6a:ae:77:f7:d4:30:67:f0:ce:dd:c2:9a:81:55:
         3b:f5:4d:7b:66:95:57:64:46:4d:89:ae:e3:65:56:d9:35:20:
         d0:2e:9b:00:f5:d5:c1:6d:52:f3:3a:87:3d:e8:06:43:02:f6:
         6e:88:27:21:e1:4e:5c:f5:83:a4:38:6c:3c:b5:cc:76:23:23:
         cf:b2:05:0f:15:af:23:8a:b1:a5:84:3f:72:be:d2:6a:7b:cc:
         e2:cb:f9:11:62:8f:5d:6b:3c:48:12:74:32:4a:5a:19:46:96:
         7e:4b:1e:e4:ec:99:5d:50:60:d2:47:37:f0:3a:29:cd:68:97:
         94:eb:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:58:38 2026 by rpki-client