Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa
File:                     3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa (raw, json)
Hash identifier:          ycI4VKNE9FLJ6Wv7xffad744q6jWlMdlNCzGXbR/Hts=
Subject key identifier:   A2:65:A4:3B:A7:3F:9E:E6:10:6F:16:B2:22:5A:F8:43:29:C9:33:72
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       20B5B285B5AF70C1A82B214698E34D64D64D9E93
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa
Signing time:             Fri 06 Feb 2026 20:00:01 +0000
ROA not before:           Fri 06 Feb 2026 19:55:01 +0000
ROA not after:            Sat 06 Feb 2027 20:00:01 +0000
asID:                     28283
IP address blocks:        200.240.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b5:b2:85:b5:af:70:c1:a8:2b:21:46:98:e3:4d:64:d6:4d:9e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Feb  6 19:55:01 2026 GMT
            Not After : Feb  6 20:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:25:47:44:c5:3b:06:a0:e2:7c:3d:eb:5d:
                    51:45:a9:b6:ac:e4:5a:75:90:23:cd:86:fe:34:1b:
                    25:b4:74:c9:0e:ef:8b:f6:b1:c0:91:13:b4:61:2b:
                    64:1b:27:09:06:fe:21:39:9b:98:8d:55:44:eb:88:
                    31:d3:5d:ca:cb:29:c2:ed:55:26:5d:39:2f:ac:76:
                    b2:82:15:8d:fa:7c:98:df:ba:be:3a:2e:df:be:31:
                    9f:5d:aa:97:99:33:ce:01:71:f3:56:16:97:08:d3:
                    72:c0:e4:e3:09:1c:95:b8:04:b5:51:23:d8:ea:06:
                    23:3f:98:12:73:d1:ba:93:d3:b8:b4:eb:45:41:49:
                    df:ab:9f:f4:15:59:38:48:e3:ae:a1:dc:cd:03:8d:
                    96:1c:3a:5e:16:d5:2e:d1:aa:d2:5c:0b:b3:44:5e:
                    2f:eb:16:0e:57:6d:52:2a:f7:ee:d3:e9:ea:34:64:
                    88:95:99:19:4d:12:35:e0:48:7d:07:4c:a5:36:15:
                    f0:cd:8b:d8:97:7c:f2:aa:02:7f:74:80:06:0a:65:
                    b0:fd:b1:3d:68:0e:05:ea:85:58:34:83:9d:bb:f6:
                    19:81:9c:a0:21:cd:1b:f1:dc:26:40:b3:a1:e4:8d:
                    01:c0:9d:3a:e9:9c:96:34:9d:96:57:46:e8:a3:b9:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:A4:3B:A7:3F:9E:E6:10:6F:16:B2:22:5A:F8:43:29:C9:33:72
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230302e3234302e3232342e302f31392d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.240.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:99:13:3e:c2:6d:52:44:5c:2a:48:52:ec:c2:87:30:95:
         40:ca:fb:c3:fb:88:2b:59:eb:9f:39:25:7d:71:73:57:db:5b:
         8d:d4:00:1e:a0:d0:d6:40:85:8f:a2:15:7a:bf:49:d4:be:a9:
         b7:8c:c9:51:81:93:61:78:cc:53:2c:bc:29:f2:7e:7a:60:f7:
         22:4b:f4:91:ad:ae:e2:77:98:9a:88:d2:a9:5c:a1:2d:21:85:
         25:bf:ea:74:75:fd:6b:97:05:93:9c:0e:17:be:51:3b:fd:d0:
         06:d5:91:67:8e:c6:f8:8a:98:74:73:29:5f:86:73:8c:ce:99:
         a9:c8:3f:17:4a:ac:6c:2a:eb:65:55:f8:d9:fd:91:16:ba:a4:
         46:18:ea:b2:ac:83:5e:b9:c5:ad:b8:a0:a9:4c:cb:b7:b3:39:
         95:c5:32:61:3f:6f:91:fb:48:5f:cd:11:6b:07:62:78:ff:4f:
         3d:d1:ba:ba:4f:e7:cb:4d:e9:25:95:e0:05:45:8a:0e:09:3a:
         c9:48:7a:2c:46:f7:c8:f5:ff:57:1a:86:72:35:3b:59:2d:46:
         e4:00:28:2f:66:5a:5e:3d:1d:e0:7f:3d:66:0e:92:d4:38:9f:
         9f:cb:0d:d2:f4:3e:aa:af:9e:fb:eb:3e:3e:86:18:b4:5d:27:
         4e:92:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:27 2026 by rpki-client