Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          ui/ghVzJAg+Wqp0WaKXE85vbft3H9Y6bm98lRdy+01Q=
Subject key identifier:   77:23:0E:3F:2C:C7:60:5A:E2:2E:F2:55:1F:C3:96:CE:00:54:E9:75
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       5BAE0BF571DA867BCF0FFC020EC3A7BFED66E153
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:37 +0000
ROA not before:           Wed 14 Jan 2026 00:33:37 +0000
ROA not after:            Wed 13 Jan 2027 00:38:37 +0000
asID:                     271466
IP address blocks:        201.49.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ae:0b:f5:71:da:86:7b:cf:0f:fc:02:0e:c3:a7:bf:ed:66:e1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:37 2026 GMT
            Not After : Jan 13 00:38:37 2027 GMT
        Subject: CN=77230E3F2CC7605AE22EF2551FC396CE0054E975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:1a:e8:18:4d:ca:e7:0d:04:26:00:f7:94:
                    3b:f8:ff:ac:61:11:9b:a7:e8:c8:97:40:a8:ea:e0:
                    93:1d:9d:37:ae:9c:d6:21:32:7f:29:ef:45:b4:5c:
                    c5:ea:4d:8a:21:a5:fb:78:5d:37:ab:be:09:f0:e9:
                    00:47:e3:2b:46:94:9e:f7:16:de:75:24:8f:23:9e:
                    fb:2d:0d:fe:fb:f6:a8:ad:67:d2:53:38:a2:a0:0c:
                    95:cc:19:0b:ad:42:64:af:9f:56:a1:ba:c9:f5:8c:
                    3a:89:bc:07:58:90:40:8d:c9:d3:3f:a9:d9:45:83:
                    11:65:19:e3:4a:3a:52:31:ed:8e:10:df:dc:20:76:
                    14:fe:af:36:a6:0e:47:da:2a:75:47:ed:77:16:27:
                    aa:22:7b:0e:84:b5:f8:9b:05:46:90:90:71:15:dd:
                    0f:98:f1:01:43:ac:a2:bc:3e:13:76:74:c6:2b:02:
                    bd:81:32:71:a2:38:9c:0c:7a:02:53:a2:45:ba:9d:
                    07:27:d4:76:49:ea:06:e6:52:0e:cf:06:49:77:ff:
                    d7:4d:13:a5:17:c5:9d:d1:ac:3a:e9:49:80:9d:39:
                    cf:a2:8b:2f:88:c5:31:70:dc:df:93:1a:3c:98:34:
                    b4:6c:cb:55:6e:4e:b8:95:c4:fc:11:71:95:fe:27:
                    40:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:23:0E:3F:2C:C7:60:5A:E2:2E:F2:55:1F:C3:96:CE:00:54:E9:75
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:e0:9a:13:77:a4:64:de:39:72:27:04:b6:f1:a6:52:c1:
         3d:25:2e:c5:26:a7:58:e8:f4:74:e9:e7:7e:a8:53:c9:f1:74:
         42:90:31:5c:dd:c3:56:39:70:8c:e1:79:20:3c:da:4b:05:c8:
         e3:b2:c3:d9:5a:fa:1b:b5:6f:22:59:08:01:1d:e2:ab:28:68:
         e2:77:54:24:08:06:15:f3:26:60:85:2e:60:67:b4:7c:5e:f5:
         71:cc:46:5f:91:d1:96:eb:0c:73:68:41:c6:2b:e5:ad:77:e7:
         e3:b9:e0:d9:7a:40:35:78:30:80:c3:2a:81:1e:77:3f:44:89:
         12:87:9a:ae:2a:3b:f3:ca:a9:83:6a:86:5d:9a:f6:91:34:27:
         c8:8a:9b:9e:d9:f9:e0:07:33:73:b3:78:8a:c7:3f:65:43:04:
         06:d5:5e:0f:a6:24:ad:f4:a4:7f:38:90:70:40:7c:dd:d8:eb:
         c1:64:23:04:16:9e:00:50:b0:26:a2:89:a9:2f:3a:a7:d4:54:
         06:49:b9:c0:8a:ad:d4:3b:90:ef:61:aa:70:c6:82:b8:d6:5d:
         8a:0e:88:07:d9:fa:6e:10:b3:77:b0:14:7d:8f:1e:d1:7d:da:
         c9:c9:5a:fd:ab:7d:16:8e:3a:6f:31:ea:82:58:0c:06:6a:16:
         48:da:ae:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:57 2026 by rpki-client