Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          FEjQFjowL5wadXZiLXBqp+YZ+3Srh1W3RdFlHjVhmqA=
Subject key identifier:   AE:20:D9:64:18:30:99:66:B7:94:BF:7D:C2:1A:78:50:20:25:02:78
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       338AFFA908F51EE6B6EDEACABC03D427923F944C
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:19 +0000
ROA not before:           Thu 05 Feb 2026 00:29:19 +0000
ROA not after:            Thu 04 Feb 2027 00:34:19 +0000
asID:                     52871
IP address blocks:        201.157.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8a:ff:a9:08:f5:1e:e6:b6:ed:ea:ca:bc:03:d4:27:92:3f:94:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:19 2026 GMT
            Not After : Feb  4 00:34:19 2027 GMT
        Subject: CN=AE20D96418309966B794BF7DC21A785020250278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d2:5c:43:77:4b:25:ab:89:40:16:6e:52:a3:
                    d9:c1:37:b5:03:89:c6:01:62:44:49:d9:78:b2:57:
                    57:04:88:81:e6:3a:95:59:3a:0d:63:3c:da:f4:b8:
                    a1:08:ee:30:5b:47:49:bb:b0:c4:67:b6:4e:d1:f6:
                    d8:6d:92:11:0e:dc:76:a2:39:26:ab:16:8b:0b:ec:
                    fd:47:e5:3f:88:53:a8:42:3f:fc:f5:86:2e:c9:b2:
                    20:ba:84:9b:c7:3b:b1:0f:ef:5d:f3:74:9c:54:ad:
                    38:0f:b7:82:a9:4c:07:cd:a5:04:11:6f:f7:cd:c3:
                    4f:52:76:b0:25:49:68:4e:61:01:42:aa:76:ff:f7:
                    e8:86:2f:19:74:42:7a:db:79:37:fb:c4:cf:93:71:
                    03:9a:15:62:f2:71:f8:d5:64:95:0c:a6:ce:45:7a:
                    21:c2:cd:90:7f:46:f4:01:96:4b:04:b7:83:81:9e:
                    10:97:a5:ab:c4:c3:ac:28:f8:f0:8d:f2:4f:bf:8a:
                    15:03:7e:b2:d0:c9:9d:67:e6:24:2b:bf:17:fa:66:
                    b8:0b:94:71:7a:40:99:b3:5c:c6:f9:8a:ae:be:e6:
                    8e:af:ac:c4:fe:45:7c:e6:d9:32:ec:1e:58:66:fb:
                    05:6c:f8:af:eb:fa:96:c8:55:c9:95:46:c0:96:59:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:D9:64:18:30:99:66:B7:94:BF:7D:C2:1A:78:50:20:25:02:78
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230322e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:25:2e:59:34:6a:a7:fe:1a:20:13:2f:2d:81:7c:e0:e3:
         27:f0:35:30:b3:20:68:25:cc:87:5c:6a:bf:f4:30:d7:cc:cb:
         8f:89:35:99:2a:3a:a5:80:ea:c9:b6:63:2f:64:cc:81:d4:bb:
         df:f5:77:e3:68:0f:b5:f1:85:42:2a:87:0d:cf:8d:31:a3:7d:
         65:7c:6a:ad:15:d9:44:89:75:4f:d4:05:3e:bf:1a:21:58:46:
         48:8d:5a:c8:c9:ec:74:aa:56:de:5a:1f:3f:7b:bf:7d:0b:3e:
         69:5f:5d:b8:cb:ef:4e:86:ea:3d:d8:b5:05:6f:76:c8:93:9a:
         57:10:2f:70:7b:d7:9c:19:e9:3a:69:77:4b:c3:65:88:63:20:
         07:9d:09:8f:fc:fd:ed:43:0b:85:1e:f1:5b:06:ee:89:93:8a:
         0f:39:20:ff:f7:5b:3d:f1:f8:18:65:6e:8f:5c:a8:86:5c:0c:
         81:3c:29:10:58:b3:be:ab:01:1c:04:4d:b2:e9:6b:a0:b0:1d:
         da:47:08:ab:fe:9f:5d:8f:22:58:ed:87:64:61:02:a4:6d:c2:
         fd:f8:fb:40:6c:57:06:fc:0c:55:19:5d:d4:a5:f8:0d:8a:b9:
         85:8d:4d:fe:28:49:b7:28:7e:a0:7d:5e:28:b7:22:75:d6:21:
         85:93:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:35 2026 by rpki-client