Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa
File:                     3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa (raw, json)
Hash identifier:          Oe3c8DVwNNzmUdFxPaemoHcvV71iS0a7xXZt2MQnUtc=
Subject key identifier:   B5:2C:04:81:7B:AC:2A:B7:11:42:FC:19:3C:26:C0:BC:24:60:27:3F
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       752286FF570FCE784BE5EB8F23C177554F781002
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa
Signing time:             Thu 05 Feb 2026 04:59:06 +0000
ROA not before:           Thu 05 Feb 2026 04:54:06 +0000
ROA not after:            Thu 04 Feb 2027 04:59:06 +0000
asID:                     270683
IP address blocks:        200.187.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:22:86:ff:57:0f:ce:78:4b:e5:eb:8f:23:c1:77:55:4f:78:10:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Feb  5 04:54:06 2026 GMT
            Not After : Feb  4 04:59:06 2027 GMT
        Subject: CN=B52C04817BAC2AB71142FC193C26C0BC2460273F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:0e:74:8b:ba:6b:e1:f7:e5:5e:e1:4e:74:
                    42:5c:83:79:1f:f7:1c:be:bd:cb:7b:9e:d0:e5:39:
                    9d:c4:2a:42:e8:27:cc:ae:62:24:db:dd:bd:59:09:
                    e4:1b:7c:3a:ef:57:f5:1d:78:1f:4c:51:a1:b6:e0:
                    04:90:4d:22:1e:71:43:aa:16:31:5b:0f:91:b1:82:
                    d7:15:f5:3d:09:af:d2:3c:8e:a4:d2:c0:1c:9f:e6:
                    12:8a:9b:45:55:c6:d4:1d:96:f5:28:89:83:c9:d5:
                    57:76:3d:10:a2:16:b7:61:0a:f4:68:17:9f:fe:00:
                    a2:18:92:3c:4a:f9:01:89:d4:34:93:0f:b3:74:12:
                    f2:cb:40:42:61:63:60:10:81:0d:95:69:d9:a6:d9:
                    f2:db:37:76:25:d7:36:cb:28:b3:d9:09:06:fa:d7:
                    e6:ec:a6:05:41:59:29:f4:c7:08:63:3d:84:b4:93:
                    20:9f:cc:28:ae:6e:8f:06:43:e0:27:fe:6c:c9:17:
                    c6:73:18:e9:8a:9c:01:c3:f7:42:fb:52:45:21:4e:
                    b6:6e:7d:3a:94:af:88:ea:d2:cb:41:a5:29:a6:3c:
                    1d:f6:56:21:c2:99:4d:06:2d:dc:b0:ce:c3:76:11:
                    45:48:0e:6e:32:5c:7b:5e:54:d2:67:62:94:71:d0:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2C:04:81:7B:AC:2A:B7:11:42:FC:19:3C:26:C0:BC:24:60:27:3F
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32322d3232203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:5f:53:a1:35:93:6b:cf:1a:ce:63:a2:8a:1a:1d:0a:6f:
         34:7e:7f:42:4f:de:d6:eb:9d:d3:f9:06:75:47:e2:19:21:fa:
         b1:ad:09:45:23:f3:3f:37:2a:c9:29:ab:88:4a:71:a3:6c:0d:
         f3:03:55:bc:a2:16:4f:c0:73:04:81:2f:c6:3c:fd:7c:7b:d7:
         3a:67:f3:af:fa:f1:05:0c:e1:c7:a7:57:a9:a4:a3:17:50:dd:
         f3:3c:39:13:60:b8:d6:b1:93:68:05:6e:4e:6a:60:38:64:00:
         4f:fc:43:ff:df:52:6b:dd:1d:c6:be:51:03:26:53:1b:38:ec:
         5e:e1:03:9a:3f:f0:b8:9e:eb:69:c4:fe:64:bb:83:41:6a:a7:
         49:85:92:12:24:ae:43:10:0a:cf:51:39:85:8f:4c:67:7e:0f:
         13:d3:26:19:68:99:fe:5a:23:0c:f5:cc:3e:73:ec:79:98:28:
         eb:3b:5e:45:d1:4b:89:65:7f:f5:b8:a0:29:5d:65:f3:86:e6:
         41:2c:c8:80:2f:a6:11:38:ac:40:d3:c1:64:65:1e:fe:20:ca:
         16:81:ab:7e:b1:98:67:51:ef:62:5e:6c:72:41:ad:33:7b:18:
         99:b2:1b:22:ac:7b:e7:3e:7b:d1:6e:ae:17:3f:2d:35:6a:a6:
         52:a6:fd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:01 2026 by rpki-client