Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          T6EgeRuDn85PkFfmmaM3zMRh0ry5K60Dq6Rhb8sTTt0=
Subject key identifier:   A5:BB:53:07:FB:62:19:F3:DE:9C:29:67:19:CD:DC:A7:6D:A5:27:6F
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       19D08FC0DE7F8A33AAB26CFAE4FB6828A1A9CA4A
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:33 +0000
ROA not before:           Wed 14 Jan 2026 00:33:33 +0000
ROA not after:            Wed 13 Jan 2027 00:38:33 +0000
asID:                     271466
IP address blocks:        201.49.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d0:8f:c0:de:7f:8a:33:aa:b2:6c:fa:e4:fb:68:28:a1:a9:ca:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:33 2026 GMT
            Not After : Jan 13 00:38:33 2027 GMT
        Subject: CN=A5BB5307FB6219F3DE9C296719CDDCA76DA5276F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:61:49:63:64:40:e9:c6:31:10:18:a7:76:
                    c4:92:44:b5:de:c2:0e:e1:71:83:5a:8a:f3:69:16:
                    b4:4f:d0:cb:85:34:52:e6:a2:e0:72:65:69:3c:51:
                    82:fd:4e:f4:be:d1:10:d1:c0:17:b1:f6:88:8b:c1:
                    b4:55:99:f1:62:fa:98:c6:7a:c8:49:aa:69:fe:cd:
                    c4:b5:bc:83:d4:e3:7c:17:55:9b:ed:40:ea:02:33:
                    54:ef:2b:fa:9c:4c:7f:98:87:00:d7:88:a1:d5:74:
                    b2:3e:12:a3:38:d2:4e:3f:48:07:22:19:85:1f:d3:
                    82:29:92:0d:00:ac:48:2e:4d:a4:34:b4:1f:01:55:
                    2c:fd:de:7f:81:a4:91:93:99:44:6e:3c:2f:62:1b:
                    d2:6f:b3:db:20:b8:50:ad:22:c8:ad:6e:96:85:35:
                    40:6b:86:46:6c:4f:9e:8b:a2:da:79:d6:ae:e0:00:
                    68:ea:19:5d:28:d3:66:31:56:5b:cc:2b:1d:c5:d6:
                    9d:2c:72:b0:71:5f:b6:2a:b7:95:19:73:4d:b8:04:
                    d4:bd:21:5a:03:5f:71:98:23:23:b8:a2:a6:eb:1e:
                    ce:7a:cc:16:3c:d7:92:fd:67:a6:6f:ba:8a:14:0b:
                    4e:4c:07:c8:f0:71:a6:80:28:cc:54:04:ec:4f:21:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BB:53:07:FB:62:19:F3:DE:9C:29:67:19:CD:DC:A7:6D:A5:27:6F
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:d0:b5:52:90:88:13:27:65:58:ba:18:c1:c1:9f:d8:75:
         b5:2a:d5:88:c0:af:18:00:92:31:f7:7d:70:4b:d5:dd:cb:a0:
         a7:af:eb:76:82:52:ea:ba:b7:45:30:12:98:a9:eb:c1:d9:c3:
         f6:d9:97:fe:91:cd:3b:db:21:29:74:1c:12:69:77:3b:a4:2e:
         19:5b:28:f6:1c:ff:6a:0c:cc:1d:f4:51:fb:dd:fb:35:82:b6:
         82:c4:ef:61:28:4a:ff:78:da:e6:bf:8b:1e:07:77:1b:ee:d2:
         aa:3e:90:be:5c:af:c1:3d:28:01:ee:93:76:85:f7:68:9a:b6:
         dd:dd:9e:56:d0:7f:da:ec:d7:ee:20:18:bc:b0:de:b7:46:66:
         c9:b6:44:27:a5:2b:c9:8a:0c:4c:7b:52:ec:4f:58:d7:f0:97:
         eb:17:39:f9:ac:43:f0:96:20:83:73:75:0d:f1:12:71:96:bc:
         19:a3:de:1e:24:13:31:3d:0b:e2:00:a8:d0:12:2f:b8:3b:bb:
         38:e0:ba:55:3e:79:44:ef:07:40:74:df:ac:23:1d:ce:f9:08:
         2b:f1:22:3c:32:49:dc:c3:11:01:0a:c2:a0:af:09:b8:ae:77:
         5b:ac:d0:80:a1:86:1a:19:96:c5:d2:3b:e0:4a:a0:0f:4b:b6:
         92:e7:e0:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGdCPwN5/ijOqsmz65PtoKKGpykowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlBRDMyMkUwMkQ5QUM4QjYyMEQxNzk1ODY0N0I1RUI3
MkM2NDRBMjAeFw0yNjAxMTQwMDMzMzNaFw0yNzAxMTMwMDM4MzNaMDMxMTAvBgNV
BAMTKEE1QkI1MzA3RkI2MjE5RjNERTlDMjk2NzE5Q0REQ0E3NkRBNTI3NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgo2FJY2RA6cYxEBindsSSRLXe
wg7hcYNaivNpFrRP0MuFNFLmouByZWk8UYL9TvS+0RDRwBex9oiLwbRVmfFi+pjG
eshJqmn+zcS1vIPU43wXVZvtQOoCM1TvK/qcTH+YhwDXiKHVdLI+EqM40k4/SAci
GYUf04Ipkg0ArEguTaQ0tB8BVSz93n+BpJGTmURuPC9iG9Jvs9sguFCtIsitbpaF
NUBrhkZsT56Lotp51q7gAGjqGV0o02YxVlvMKx3F1p0scrBxX7Yqt5UZc024BNS9
IVoDX3GYIyO4oqbrHs56zBY815L9Z6ZvuooUC05MB8jwcaaAKMxUBOxPIfB3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpbtTB/tiGfPenClnGc3cp22lJ28wHwYDVR0j
BBgwFoAUqa0yLgLZrItiDReVhke163LGRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdFUnNYOXhrakMzNFRYeWpSekNITFZrS2dGaXhLb0pDQlplVExFSnFU
ZWovMC9BOUFEMzIyRTAyRDlBQzhCNjIwRDE3OTU4NjQ3QjVFQjcyQzY0NEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5QUQzMjJFMDJEOUFDOEI2
MjBEMTc5NTg2NDdCNUVCNzJDNjQ0QTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHRVJzWDl4a2pDMzRUWHlqUnpDSExWa0tnRml4S29KQ0JaZVRMRUpxVGVqLzAv
MzIzMDMxMmUzNDM5MmUzMTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJMbAwDQYJKoZIhvcNAQELBQADggEBAH6O0LVS
kIgTJ2VYuhjBwZ/YdbUq1YjArxgAkjH3fXBL1d3LoKev63aCUuq6t0UwEpip68HZ
w/bZl/6RzTvbISl0HBJpdzukLhlbKPYc/2oMzB30Ufvd+zWCtoLE72EoSv942ua/
ix4Hdxvu0qo+kL5cr8E9KAHuk3aF92iatt3dnlbQf9rs1+4gGLyw3rdGZsm2RCel
K8mKDEx7UuxPWNfwl+sXOfmsQ/CWIINzdQ3xEnGWvBmj3h4kEzE9C+IAqNASL7g7
uzjgulU+eUTvB0B036wjHc75CCvxIjwySdzDEQEKwqCvCbiud1us0IChhhoZlsXS
O+BKoA9LtpLn4N4=
-----END CERTIFICATE-----
Generated at Thu Feb 19 03:13:35 2026 by rpki-client