Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa
File:                     3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa (raw, json)
Hash identifier:          Lp19OKAZL7ZkIvZhqhH1jn18yei/5LTbLr9enBKsdOQ=
Subject key identifier:   5D:E3:11:24:FC:B3:AB:A6:0D:34:02:C8:EF:F8:9A:15:B1:64:ED:84
Certificate issuer:       /CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
Certificate serial:       09B1DCC549F39ED6798323D408B2DBD1264DC007
Authority key identifier: 76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa
Signing time:             Sat 07 Feb 2026 23:15:01 +0000
ROA not before:           Sat 07 Feb 2026 23:10:01 +0000
ROA not after:            Sat 06 Feb 2027 23:15:01 +0000
asID:                     270264
IP address blocks:        200.108.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl
                          rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b1:dc:c5:49:f3:9e:d6:79:83:23:d4:08:b2:db:d1:26:4d:c0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E18684CB0B1A079ED243908D2E3D3D2B78A1AF
        Validity
            Not Before: Feb  7 23:10:01 2026 GMT
            Not After : Feb  6 23:15:01 2027 GMT
        Subject: CN=5DE31124FCB3ABA60D3402C8EFF89A15B164ED84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:d1:bc:40:a9:c6:4c:c2:b8:fa:6b:0d:8c:
                    a3:3c:3d:d9:1b:2e:93:41:49:f1:10:22:b5:06:b2:
                    f2:17:c1:08:56:2c:f3:8b:fb:db:62:f3:af:55:58:
                    58:ac:1e:f1:bd:ee:88:b9:7a:c8:68:03:85:39:0c:
                    8b:4d:a0:c3:9e:96:9a:3e:8c:59:30:ab:85:d1:45:
                    2a:d5:f4:1b:b0:fd:87:a1:af:2e:cb:80:d1:00:a3:
                    62:d4:fe:ba:73:8a:17:aa:9e:22:1b:d9:4d:48:a6:
                    4c:aa:fb:82:41:7f:0f:70:b3:c6:e7:5f:f8:51:94:
                    9d:14:35:ca:bc:67:8f:7a:2e:6d:0c:fb:4f:9e:09:
                    d2:33:86:4d:ab:80:eb:32:a5:15:83:4f:8d:37:0f:
                    47:4a:36:93:be:58:1e:70:05:45:71:d3:dc:73:1a:
                    b8:03:5e:77:09:3d:ac:c2:c8:44:97:64:0e:1f:0d:
                    7d:88:5b:89:8b:7b:90:7e:52:0f:30:73:1e:eb:c8:
                    7d:a9:ec:35:80:38:40:d0:17:0f:44:32:af:f6:7a:
                    e2:1a:88:55:03:fd:05:00:7d:34:bd:32:da:5f:eb:
                    6b:d5:52:cd:0a:f4:fa:c2:15:f5:c6:c7:b4:a5:c6:
                    30:ac:a5:59:40:d7:ce:a3:c7:46:4d:82:68:34:a9:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:11:24:FC:B3:AB:A6:0D:34:02:C8:EF:F8:9A:15:B1:64:ED:84
            X509v3 Authority Key Identifier:
                keyid:76:E1:86:84:CB:0B:1A:07:9E:D2:43:90:8D:2E:3D:3D:2B:78:A1:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E18684CB0B1A079ED243908D2E3D3D2B78A1AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYMq9NoN8M86iTM9oPpvNQLxQX8GEuPLsMNKyUFBhAe/1/3230302e3130382e3138302e302f32322d3234203d3e20323730323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:2a:9b:4e:aa:a2:24:41:b8:af:3d:77:ad:29:58:d1:94:
         c9:1c:b2:c4:18:8d:3a:96:73:74:a5:a6:e3:83:c0:63:ad:2a:
         a0:94:f2:4d:79:1a:56:a5:0e:c4:3b:15:b3:8f:6a:46:ab:8f:
         88:e7:03:56:09:32:a6:9f:90:8f:93:cf:d0:1e:06:f1:43:67:
         bf:ba:d9:a9:8f:ac:b1:b4:38:33:07:9a:84:5c:14:db:66:70:
         ac:bb:2c:3a:a1:42:b6:60:33:7b:7d:36:d1:41:e8:21:5c:56:
         0f:05:ea:99:90:a5:86:88:a7:b2:5b:29:dd:9c:4e:10:a3:33:
         fa:ed:14:1c:60:12:b5:10:1d:51:04:e6:81:9a:b6:9c:e5:9c:
         9d:4f:81:08:21:92:f5:9e:1f:4e:00:ed:7e:84:2d:96:65:ad:
         04:6a:4e:6b:50:60:57:29:ef:c4:eb:61:ae:41:6b:11:93:29:
         7c:3c:3d:f0:d0:f1:ed:94:fe:8a:37:ae:db:ed:e8:13:18:0d:
         08:89:e3:4a:4c:20:ce:45:a9:99:de:d4:87:eb:4c:6a:05:5a:
         5c:35:53:2d:5c:cd:c2:f5:95:5d:37:f9:ae:ab:77:06:08:1f:
         8d:f0:de:8f:19:fb:17:b7:08:88:e5:4a:5c:04:b5:a9:51:af:
         3c:06:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:39 2026 by rpki-client