Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137372e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3137372e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          zz0QcQjYqIjQq0/xQcEi0BnSlMWS82fMXYZkFIVa95k=
Subject key identifier:   08:DE:4B:CE:B0:C8:A7:67:92:15:C1:00:E7:F0:68:E6:FB:63:AB:C7
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       51373D9AE55E7ED6DAD9356EA8B05B63C5B3434F
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137372e302f32342d3234203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:34 +0000
ROA not before:           Wed 14 Jan 2026 00:33:34 +0000
ROA not after:            Wed 13 Jan 2027 00:38:34 +0000
asID:                     271466
IP address blocks:        201.49.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:37:3d:9a:e5:5e:7e:d6:da:d9:35:6e:a8:b0:5b:63:c5:b3:43:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:34 2026 GMT
            Not After : Jan 13 00:38:34 2027 GMT
        Subject: CN=08DE4BCEB0C8A7679215C100E7F068E6FB63ABC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:32:d8:5a:44:22:3d:89:2f:d2:92:0b:a3:
                    9a:3c:92:81:89:08:35:5d:e1:50:a3:cf:ef:26:57:
                    76:df:15:f7:af:16:2e:ce:f1:b2:c3:ad:6d:4f:70:
                    5a:25:ec:75:2d:3e:a2:fe:61:16:a9:2a:f2:bd:cf:
                    ed:fd:b1:5e:64:cb:e7:f8:eb:c8:87:91:11:f7:3b:
                    3b:18:93:9a:b2:0e:47:6c:a7:35:30:60:50:c3:72:
                    40:dd:17:a5:70:27:41:1b:18:31:fc:d7:51:06:45:
                    8b:5d:c0:30:7b:89:b4:f4:c8:31:25:cc:b7:f9:dd:
                    58:bc:a3:63:24:ef:1a:f5:2a:77:30:eb:c5:64:a7:
                    c6:be:db:9d:1f:8d:5c:6e:c4:0e:e6:1d:13:ae:c2:
                    cb:e8:dc:72:a1:76:ff:00:b5:ad:f0:86:6f:28:6a:
                    5c:65:13:ad:3b:1d:96:f8:f9:5c:84:78:9b:93:2e:
                    06:1e:cd:96:d0:32:eb:0e:f5:91:5d:97:f9:fc:76:
                    d4:12:8d:6f:6f:35:4d:04:a6:93:39:41:4e:ed:18:
                    77:1f:06:f7:47:bf:f8:53:f9:82:ea:03:c3:4b:b7:
                    72:20:f3:e6:88:eb:6a:23:c7:91:db:55:79:db:a8:
                    31:65:95:c7:ee:37:7f:6d:9a:25:b0:09:e1:77:d8:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DE:4B:CE:B0:C8:A7:67:92:15:C1:00:E7:F0:68:E6:FB:63:AB:C7
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137372e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:df:72:39:34:02:47:c0:f1:ab:e3:a0:27:7c:e0:24:35:
         dd:30:85:83:65:37:c0:b2:a8:a5:22:3c:e8:75:d6:ea:66:45:
         cc:6e:2d:67:32:1a:e8:4d:e1:a6:e8:e4:79:2c:53:74:d9:5a:
         64:85:93:1f:c0:ed:c7:f4:52:27:00:38:3c:f2:41:27:99:08:
         2a:b9:2f:78:5d:3f:71:41:59:3a:40:7b:1c:53:99:b3:62:df:
         76:b8:d7:7e:98:f0:42:3c:ed:b8:3f:5a:9a:36:f2:0c:71:14:
         bc:b1:0a:7d:c7:32:67:be:95:78:4b:e5:55:76:39:af:ea:e9:
         76:8a:8e:90:43:de:9f:f0:a7:1f:a7:1c:72:e0:d4:f7:3b:09:
         3e:18:33:d6:bf:cf:40:af:04:d2:e5:f6:06:44:2d:fb:a5:da:
         b6:89:07:3a:f4:fe:51:97:29:44:38:e6:a9:97:75:c3:f7:44:
         c6:d3:67:5f:1b:12:a3:7d:f8:74:33:6e:c6:6e:fe:80:1a:8d:
         29:49:0d:df:e6:bc:55:ce:d0:7b:11:3e:15:79:30:5c:a0:31:
         9a:aa:0a:d2:fa:a2:a8:54:94:11:a6:eb:0f:0d:62:bb:f3:ab:
         e7:55:74:d3:06:a8:0f:a7:cd:49:2e:c9:bf:21:71:44:79:17:
         9c:d7:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:45:29 2026 by rpki-client