Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa
File:                     3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          bDijnPHA8Idrlv3XJv3YEoMPNV1HunCOA7FnLY8ZFks=
Subject key identifier:   47:8D:2B:7D:F3:CF:B9:6D:7B:FC:C4:5D:A0:A1:A3:68:E6:5D:50:13
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       3988A4029E643CFCC51FDB918811A66D219ECD03
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:21 +0000
ROA not before:           Thu 05 Feb 2026 00:29:21 +0000
ROA not after:            Thu 04 Feb 2027 00:34:21 +0000
asID:                     52871
IP address blocks:        201.157.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:88:a4:02:9e:64:3c:fc:c5:1f:db:91:88:11:a6:6d:21:9e:cd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:21 2026 GMT
            Not After : Feb  4 00:34:21 2027 GMT
        Subject: CN=478D2B7DF3CFB96D7BFCC45DA0A1A368E65D5013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:b2:dd:e6:69:cc:65:57:3c:b3:e7:9c:ad:
                    22:3c:42:0f:76:f5:c1:fa:24:08:72:3a:d2:06:6d:
                    b9:f9:cd:3e:72:57:90:82:da:60:e5:0b:b9:5d:66:
                    3e:f3:22:dc:95:82:13:cd:38:6c:4d:7c:51:ba:3a:
                    fc:d0:e5:5d:e3:26:d1:0c:9f:44:7a:80:e5:76:7e:
                    3d:39:c6:10:1f:f4:7d:b2:83:d7:b5:27:a7:6a:33:
                    f8:81:7b:56:a8:42:a6:33:c3:37:5b:4c:c5:e9:c5:
                    94:9c:de:64:18:3d:26:cc:3f:39:9d:a8:49:e4:01:
                    9f:55:01:aa:43:00:7d:f6:d7:2f:56:49:79:6b:3a:
                    91:38:a7:54:43:8c:71:7f:8e:40:b5:09:7d:95:09:
                    69:12:c8:f9:d4:cd:b4:af:09:2c:61:00:24:b4:69:
                    8d:f8:3c:a3:df:58:1a:d7:20:27:48:24:71:04:b3:
                    95:dc:53:7c:54:d7:70:4b:f8:a2:41:bb:35:c7:fd:
                    a3:23:66:a6:a7:9d:52:88:3e:53:ce:e6:f1:3b:60:
                    30:a5:be:c4:77:e2:4b:88:8f:c9:76:25:6a:24:49:
                    32:61:b9:ee:13:e3:0f:08:46:03:42:06:39:5f:6c:
                    90:88:89:fe:c8:6c:ac:c7:6b:f6:74:eb:a2:d6:ee:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:2B:7D:F3:CF:B9:6D:7B:FC:C4:5D:A0:A1:A3:68:E6:5D:50:13
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230342e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c7:15:36:34:8c:cc:61:77:f2:78:9e:3a:63:dc:f2:a7:af:
         57:25:24:7f:12:30:ba:45:1a:ea:63:a8:6a:19:52:f0:f0:ee:
         51:8d:7f:f2:63:c8:d4:ce:11:30:94:24:b3:68:9c:7a:2c:62:
         00:eb:a9:c9:cf:3e:b0:1c:e2:ab:46:17:3e:8a:6a:66:9e:75:
         29:bf:95:ac:5d:59:ed:66:1f:2a:51:50:3f:5c:51:29:2c:42:
         54:04:fd:00:17:6b:c5:a7:2c:c9:0c:77:52:6a:d6:ff:16:c6:
         c1:99:c3:76:f3:00:aa:48:00:ad:72:a6:b9:e1:96:d8:dd:0e:
         b2:49:4d:89:ac:96:87:61:c7:36:4f:24:29:10:12:68:a2:ab:
         c5:d9:94:3d:e7:cb:76:94:51:75:ca:e3:61:1d:54:68:4d:d3:
         ac:a5:5c:fc:8b:d1:b4:8c:47:2e:1a:17:e0:04:be:c6:ac:b6:
         8c:f4:74:ec:c5:cf:eb:65:bf:f7:6d:ee:5c:c0:87:cc:4d:21:
         4b:aa:6f:3a:71:e3:12:8f:ff:85:9f:2d:ee:43:c5:ce:dd:85:
         1c:9a:ae:41:9f:3d:a6:20:83:7d:8e:21:c7:0b:f5:ac:27:34:
         76:32:74:9b:be:de:31:e1:64:11:76:ac:db:87:3e:6c:6f:dd:
         f5:e8:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:44:57 2026 by rpki-client