Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          Yo+hIsStPcwZLRrIFiq6+CnCjbxxgvpzlPc1BeOXXH0=
Subject key identifier:   BA:3E:D9:60:6F:12:1C:48:51:F4:0D:8F:B9:65:D8:9D:0E:D5:C5:23
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       7C91FC01694CFC504AD58F6149D3D27BAEB3378C
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:36 +0000
ROA not before:           Wed 14 Jan 2026 00:33:36 +0000
ROA not after:            Wed 13 Jan 2027 00:38:36 +0000
asID:                     271466
IP address blocks:        201.49.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:91:fc:01:69:4c:fc:50:4a:d5:8f:61:49:d3:d2:7b:ae:b3:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:36 2026 GMT
            Not After : Jan 13 00:38:36 2027 GMT
        Subject: CN=BA3ED9606F121C4851F40D8FB965D89D0ED5C523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:bd:b3:b6:a1:d2:b5:ce:4b:c2:b5:63:62:
                    5a:9e:05:9e:6a:b5:a3:88:f6:1c:9b:4d:8a:74:2d:
                    33:5b:82:c1:17:3b:65:e1:1c:96:3b:d7:8c:12:74:
                    40:90:1f:76:32:5c:2d:e8:33:95:1d:7b:83:c7:8b:
                    9d:68:5c:0d:70:0a:f5:4e:3a:4a:04:03:b0:73:c7:
                    cf:83:d2:2c:3a:a5:b7:fd:04:67:49:a4:e7:67:55:
                    a0:22:d3:3f:98:bd:aa:df:4e:30:2f:82:39:9e:be:
                    26:d0:d9:a3:83:60:9b:81:7a:67:67:a5:2e:7c:20:
                    78:4a:1c:01:cb:3d:51:ce:0a:b9:82:67:5e:a8:bc:
                    e5:eb:b9:b6:db:59:02:f7:93:0b:d7:b2:d9:f2:42:
                    0a:24:2a:cf:b4:4f:dc:c1:12:b5:fe:f2:4a:05:5c:
                    43:0c:7b:65:59:82:79:bd:c0:9c:bc:d6:00:c2:db:
                    9c:1e:a4:2b:68:ec:dc:e3:fc:c0:55:34:5b:de:da:
                    e8:bf:66:8f:8c:62:a5:de:23:62:01:72:1c:7a:99:
                    de:ca:4d:40:10:a9:e0:1f:d1:c3:e6:5c:83:49:5b:
                    37:8f:e7:bf:41:55:21:4e:05:c5:d9:9e:b6:b6:0e:
                    6d:74:ac:b6:eb:4a:a8:bf:ae:01:dc:ae:ce:3d:6c:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3E:D9:60:6F:12:1C:48:51:F4:0D:8F:B9:65:D8:9D:0E:D5:C5:23
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:2d:e0:02:29:65:56:34:6f:79:4d:42:ee:9c:f9:e1:03:
         4e:66:e7:44:6e:c8:32:90:22:f5:b0:d5:c7:20:e8:d5:0d:36:
         b4:f0:39:0d:29:42:d4:fa:bd:f0:cf:16:7d:5c:ab:c2:43:a9:
         0d:3c:db:a0:c5:9b:3d:1d:2d:ea:ba:9c:e9:55:35:4a:d5:d4:
         e5:ef:e6:e9:67:13:54:ab:28:02:36:a9:14:eb:07:83:f5:87:
         9a:40:9f:45:b9:2b:6b:55:e8:66:3a:6b:4a:45:3b:c2:31:af:
         62:e9:5c:ed:a4:c0:be:33:2f:c1:b7:77:1f:f9:25:85:e6:13:
         a1:c8:a3:a5:2b:85:b2:87:66:70:da:b6:1d:b6:e5:b0:f9:06:
         33:5c:0b:99:86:78:0a:a0:87:20:6e:55:cc:fd:de:df:fc:c1:
         fd:e6:d9:6d:d3:59:95:7a:39:88:60:75:b5:2f:ec:e3:12:e1:
         e1:6a:ef:7c:b2:91:23:9b:80:a2:28:a0:a5:52:ba:a8:69:2d:
         a7:18:fd:d1:25:00:b9:61:d3:60:c3:52:7e:b6:84:8f:cc:b4:
         5b:89:25:f3:55:e6:51:75:9c:f5:7d:4b:5c:19:63:6c:9e:fa:
         66:41:7d:cc:4d:11:45:c0:13:6c:e3:ee:b5:a3:a3:98:5b:23:
         48:fd:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:20:58 2026 by rpki-client