Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3230302e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          a+GlHDHtvubMebSOR3B1hZQgPjBh/qotheq+VGQTMZE=
Subject key identifier:   DD:E7:21:F7:52:6A:89:D1:62:45:B9:F7:D9:00:77:18:A1:43:45:42
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       098274E91030739B3E75D907E85D1E99E6FA35F8
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32332d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:20 +0000
ROA not before:           Thu 05 Feb 2026 00:29:20 +0000
ROA not after:            Thu 04 Feb 2027 00:34:20 +0000
asID:                     52871
IP address blocks:        201.157.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:74:e9:10:30:73:9b:3e:75:d9:07:e8:5d:1e:99:e6:fa:35:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:20 2026 GMT
            Not After : Feb  4 00:34:20 2027 GMT
        Subject: CN=DDE721F7526A89D16245B9F7D9007718A1434542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:61:de:6f:cc:ac:ec:ed:33:ad:c0:6e:7e:06:
                    fc:4c:b2:9e:fe:b1:1d:03:bd:39:62:dd:b1:b2:6f:
                    4a:aa:09:fb:c4:42:40:40:2f:20:cc:a7:bc:5a:40:
                    c7:03:5b:c9:68:d9:cb:96:4c:89:86:7b:b5:f0:79:
                    3d:f9:12:7d:50:a3:d7:a0:da:9d:4b:73:50:18:56:
                    6b:a6:72:68:70:15:ff:2e:73:78:95:19:c2:47:02:
                    87:80:da:3d:d5:8b:ce:02:cc:e0:a0:89:f7:b4:b6:
                    45:a2:96:e0:58:44:37:d2:69:b2:0d:57:d5:74:61:
                    30:c0:f7:41:2c:44:af:f1:26:a7:83:60:5c:9c:63:
                    34:42:00:5b:e5:fa:b6:83:ba:21:ba:bd:91:b1:2d:
                    3c:e6:11:d2:11:c5:d5:20:ec:55:23:d4:0e:a5:3a:
                    b2:ae:fe:2d:47:20:12:95:ed:20:0d:9b:e7:75:e2:
                    27:7f:c0:bb:a0:c2:f2:3f:20:5f:54:e6:a5:42:6e:
                    c1:27:7b:d5:6f:34:43:14:fe:37:83:41:71:13:90:
                    5d:fb:57:f7:92:13:5f:89:3c:ca:61:87:30:0c:ad:
                    f0:e4:b9:49:23:e4:49:e0:43:b3:55:a4:b1:3d:1b:
                    7b:a1:f0:e1:8b:36:79:27:cd:a1:12:f5:6d:06:09:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:21:F7:52:6A:89:D1:62:45:B9:F7:D9:00:77:18:A1:43:45:42
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230302e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:13:c6:b7:c9:70:19:23:46:09:a7:72:5b:a8:b1:98:b5:
         e0:ba:ba:03:95:c9:8b:72:d1:0c:a5:a2:d7:60:da:ad:7a:05:
         77:b0:41:6f:b7:26:52:ae:ec:de:17:0c:02:8f:e7:42:7c:e3:
         d7:10:81:e8:ee:b5:86:ad:9a:d3:1d:e7:33:39:73:42:6f:cd:
         7b:b5:4b:1a:69:ea:2f:07:b3:11:bd:95:ef:cf:d8:36:ed:d6:
         e5:5c:79:fc:fa:32:18:b1:8e:ab:2e:0c:ea:00:1f:8c:64:87:
         45:cc:08:a2:e1:45:59:da:3f:e1:6d:aa:5a:73:83:44:ad:30:
         e3:65:40:88:ea:f1:1c:b6:d4:fc:e0:ee:bf:58:b8:36:f1:7a:
         25:ba:f7:09:83:f6:c9:d5:db:7e:36:21:9c:ce:f9:0f:1c:34:
         6d:fc:3e:c2:81:dc:90:2e:99:d2:46:82:8c:4f:63:70:62:30:
         77:60:1c:c7:80:6e:d2:af:44:47:d2:b9:a9:e2:1b:f7:62:de:
         1b:95:90:8f:b9:65:b6:69:71:fa:d5:4a:1b:e3:a5:30:79:2d:
         ae:bb:ea:84:5d:b3:ab:69:65:2c:8e:6f:b7:1e:32:c9:1f:95:
         7d:92:8f:84:ca:b8:da:4d:bf:34:c8:cf:86:91:b8:36:bc:e7:
         22:9d:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:58 2026 by rpki-client