Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa
File:                     3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa (raw, json)
Hash identifier:          Q6/yWisOchn6EFM7vBp4N6LLHz/4HDyS0TxSqPP65E4=
Subject key identifier:   B9:BE:AD:7A:EB:04:B6:07:1E:36:BE:E1:FF:0D:85:0B:EA:36:96:36
Certificate issuer:       /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial:       3B8CF62CF3CD4589E215FFCC94080C90F44BD220
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa
Signing time:             Thu 05 Feb 2026 04:59:07 +0000
ROA not before:           Thu 05 Feb 2026 04:54:07 +0000
ROA not after:            Thu 04 Feb 2027 04:59:07 +0000
asID:                     270683
IP address blocks:        200.187.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
                          rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8c:f6:2c:f3:cd:45:89:e2:15:ff:cc:94:08:0c:90:f4:4b:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
        Validity
            Not Before: Feb  5 04:54:07 2026 GMT
            Not After : Feb  4 04:59:07 2027 GMT
        Subject: CN=B9BEAD7AEB04B6071E36BEE1FF0D850BEA369636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:5a:88:10:37:4e:24:3c:3b:3c:ba:df:f9:
                    64:a8:84:6b:84:8c:bb:91:b4:61:bf:e9:72:75:a0:
                    82:92:8a:33:75:ba:86:3c:97:19:57:6e:3b:6a:73:
                    c4:7a:57:09:af:ca:b6:8b:6f:c7:dc:4a:4c:e7:11:
                    06:47:07:08:53:84:8f:0c:45:9c:c0:f8:12:13:e8:
                    0c:22:b6:0c:6b:f6:e0:3b:58:90:b7:e5:85:7e:18:
                    30:88:4f:d4:28:7b:88:04:30:e2:7c:35:da:9f:56:
                    47:f5:08:b1:00:30:72:05:82:0f:4a:e3:cd:63:84:
                    0e:7a:e3:56:97:48:5a:41:82:72:53:ed:df:8c:e2:
                    82:6c:e5:fa:96:e9:e2:7f:d4:08:f1:b1:49:ca:f6:
                    e2:de:b1:18:f9:ff:fb:8d:50:25:7e:37:c9:78:65:
                    ab:b9:19:d6:dd:da:f6:fd:df:88:d9:dd:3f:db:1f:
                    3c:74:6f:37:6a:fc:b0:2a:0e:9d:1f:63:38:f8:bf:
                    42:f8:24:27:84:80:2c:9a:d0:bc:ad:b1:f6:36:10:
                    00:47:dd:8a:ba:78:49:50:e7:75:04:69:15:89:4d:
                    5e:38:d8:ea:59:88:e9:e7:62:1d:51:c2:bf:d7:a4:
                    f6:7b:e1:1f:22:f8:bf:40:d4:25:54:d2:56:da:25:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:AD:7A:EB:04:B6:07:1E:36:BE:E1:FF:0D:85:0B:EA:36:96:36
            X509v3 Authority Key Identifier:
                keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/3230302e3138372e3130302e302f32342d3234203d3e20323730363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:81:d9:8a:28:78:09:19:bf:4f:d5:30:85:63:b6:d9:86:e5:
         d4:cb:81:91:77:2e:c8:12:d1:97:c3:5d:51:94:c9:8c:5c:10:
         91:fb:4c:71:d3:49:5c:ea:05:a4:75:df:6b:4d:3f:5d:c2:a0:
         d2:a0:f1:59:fc:36:4d:06:8b:b6:c8:63:22:c9:26:af:b7:db:
         98:2f:f3:33:a7:45:64:07:20:83:f8:b3:fa:f3:25:21:4d:92:
         e1:f2:e8:4c:b4:47:b8:0e:52:a3:da:6b:f4:86:43:c5:9a:29:
         ba:c7:59:32:8e:c1:09:02:0b:33:70:39:de:d4:8f:25:d1:90:
         82:03:79:cf:e9:4b:42:b3:08:c3:3d:54:22:c0:d0:67:10:76:
         a7:9b:3c:8f:19:78:b4:70:db:c1:2a:dc:f9:40:bb:0a:8f:46:
         7b:3c:2c:7d:e0:86:33:b5:ef:ba:9a:f5:6f:d7:c2:09:4a:e9:
         97:e7:ed:a6:0c:d8:d3:81:7b:9d:37:26:32:f1:98:7f:f8:10:
         8a:76:75:22:e8:85:86:06:29:62:2b:f7:9f:d6:99:b3:05:e7:
         98:d6:b8:e1:6c:93:ed:2a:69:37:ae:3b:25:72:c2:e9:2e:b9:
         ad:2a:c4:32:b3:9c:46:98:f2:7c:d7:2c:16:d9:5f:9a:cd:6f:
         b1:48:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:18 2026 by rpki-client