Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          HkahGZHe8eO8qkcxGvyZoRnTZ7bzit53g5uWQdCnvi4=
Subject key identifier:   FE:34:24:13:5A:CC:F5:FE:93:02:86:31:70:F4:7E:F9:4B:1D:DC:77
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       7738680F8B7E928E5967A6B4658ACC83CF9A9360
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:32 +0000
ROA not before:           Wed 14 Jan 2026 00:33:32 +0000
ROA not after:            Wed 13 Jan 2027 00:38:32 +0000
asID:                     271466
IP address blocks:        201.49.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:38:68:0f:8b:7e:92:8e:59:67:a6:b4:65:8a:cc:83:cf:9a:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:32 2026 GMT
            Not After : Jan 13 00:38:32 2027 GMT
        Subject: CN=FE3424135ACCF5FE9302863170F47EF94B1DDC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:e0:92:31:0b:7f:ca:c4:55:33:cf:76:3b:
                    8a:1e:0b:15:27:9d:3e:67:56:6f:3b:79:c6:58:f3:
                    35:4f:e0:87:6b:23:f8:4e:e7:5d:02:5e:fa:01:76:
                    9c:a0:28:f5:03:88:eb:65:09:e6:45:c7:64:f3:44:
                    88:a1:b2:c3:de:00:00:0c:64:a0:d8:ec:ea:1f:8d:
                    18:1d:f0:0c:b7:fa:0d:9d:f3:29:43:ad:01:c5:ce:
                    4b:9e:c1:3c:81:df:d1:21:7d:0f:f3:c6:9c:53:8d:
                    e3:aa:95:9e:c7:a3:67:a9:03:5c:06:86:2f:ec:56:
                    53:c7:a5:21:5f:b3:56:0f:88:8b:0b:36:95:cd:e7:
                    6a:2b:6c:65:e9:44:64:14:c0:53:7f:c9:b9:54:74:
                    23:98:1c:93:08:bb:1b:13:87:09:e2:ed:f5:75:19:
                    86:e9:59:99:84:a1:70:85:77:0b:a1:2f:2d:80:20:
                    ba:d3:a5:ee:a2:a2:78:c3:08:1f:52:3c:c5:73:80:
                    9d:cf:bf:a9:3b:4c:65:3a:db:c4:15:8b:55:16:ce:
                    45:0a:e0:43:ce:88:66:d7:e9:12:9c:e9:e5:56:f2:
                    3a:4c:cb:ad:49:17:7b:b2:2a:7b:ab:63:f2:29:4b:
                    08:53:9f:16:18:72:fe:48:69:05:d5:95:83:d4:4f:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:34:24:13:5A:CC:F5:FE:93:02:86:31:70:F4:7E:F9:4B:1D:DC:77
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138332e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:58:3e:f9:6a:82:ac:9d:fe:f4:f1:f5:a7:f3:86:30:c1:0b:
         d5:7a:c0:88:49:36:26:d1:3c:40:10:db:7f:eb:83:5a:e8:60:
         75:cd:f1:f4:de:6f:c3:12:9e:3d:5a:b0:ea:3d:3b:1c:04:63:
         70:90:bd:de:46:4b:77:0b:a3:49:1a:63:0b:40:90:39:c4:4a:
         96:35:b4:09:ec:03:a4:4b:1e:28:f5:a8:1a:96:f5:43:b7:74:
         52:13:29:c5:96:11:79:cd:fb:a3:d1:9c:49:f0:43:82:6e:13:
         ba:4a:40:0a:0e:5b:ba:24:11:f0:0c:6c:3d:ec:4c:b2:93:69:
         3f:38:ce:f0:7f:ee:1d:7b:97:cf:c4:ca:b6:c6:a2:c7:4b:12:
         71:d1:47:98:ce:e6:e3:6d:66:28:9a:66:0a:f8:4d:ec:38:a2:
         13:c0:0c:43:e9:fd:d8:af:74:e4:2e:75:2f:99:a6:87:0d:e1:
         77:cd:c9:08:3f:23:46:64:ec:74:e5:c2:80:4b:08:f8:6c:ac:
         a8:ba:64:6f:14:3c:87:43:8d:b8:06:10:bd:c7:f6:d2:60:68:
         8f:dc:df:33:13:6f:73:e8:79:f4:2a:31:32:43:38:09:d0:9a:
         00:cc:e6:ad:2a:80:95:61:db:dd:dd:4c:1b:9a:22:41:72:85:
         eb:16:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:45:26 2026 by rpki-client