Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          oesQv8yhW/u6aWWbPufIYoGEeJxPzWZntmms9Ald+BE=
Subject key identifier:   F9:FC:53:6E:86:17:31:B1:67:AA:5B:04:37:08:89:9C:FA:D4:8F:D0
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       0BF625BAC5400DDAD4860CAFA0B2233F7BD41106
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:21 +0000
ROA not before:           Thu 05 Feb 2026 00:29:21 +0000
ROA not after:            Thu 04 Feb 2027 00:34:21 +0000
asID:                     52871
IP address blocks:        201.157.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f6:25:ba:c5:40:0d:da:d4:86:0c:af:a0:b2:23:3f:7b:d4:11:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:21 2026 GMT
            Not After : Feb  4 00:34:21 2027 GMT
        Subject: CN=F9FC536E861731B167AA5B043708899CFAD48FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:d9:8d:12:da:59:31:84:0d:7a:a4:11:49:
                    8e:c8:b4:e2:ce:ee:b8:ed:21:e7:3d:bc:55:49:a4:
                    40:21:b6:b1:70:ee:de:68:21:91:5b:3f:4e:97:f9:
                    bb:28:e4:76:63:70:aa:9e:87:f1:3e:ea:ea:b9:2d:
                    ab:db:aa:e6:c8:39:85:ba:92:3d:be:78:de:97:b6:
                    cc:9f:0d:fe:8a:ce:4e:b0:6d:47:28:98:08:ea:7b:
                    0c:75:e8:55:1c:ab:01:5d:2b:ae:48:eb:9d:bd:0f:
                    e0:6e:16:3b:19:00:0f:51:8d:eb:59:a4:58:52:6b:
                    a3:d8:5d:7c:97:4b:89:b1:cb:16:c1:df:bc:cc:eb:
                    78:c3:57:62:bc:3f:e8:73:51:65:c9:c1:9e:87:57:
                    24:b6:53:c9:5a:10:b4:52:72:74:34:4b:83:2e:36:
                    de:d6:b7:3a:34:30:be:cb:00:e8:de:2f:26:1a:bc:
                    1a:8d:51:bc:ae:d7:06:a8:4e:78:07:95:54:78:89:
                    2f:37:16:a9:0e:54:e2:e8:62:24:f6:b8:36:43:1f:
                    e2:8f:63:2d:69:d2:bc:4b:9f:3d:8d:3d:4b:5a:eb:
                    4f:64:21:c7:b3:c7:a6:58:ed:69:04:b9:60:4c:1d:
                    6a:8b:67:1f:e3:ab:59:bd:3b:8a:dc:64:8f:e0:c9:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FC:53:6E:86:17:31:B1:67:AA:5B:04:37:08:89:9C:FA:D4:8F:D0
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231322e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:d9:eb:fe:73:ce:4b:9e:cb:20:7c:06:54:fc:5f:7d:e0:
         d1:25:c6:3d:dd:bb:62:84:56:c5:6c:9a:dd:44:ef:e2:5f:e2:
         72:24:aa:a6:ad:3b:d3:6d:fa:17:69:e6:66:f7:08:1f:7f:87:
         ef:9e:76:48:cd:0a:b1:9f:00:fe:b4:7a:83:f4:3c:26:6b:f5:
         c4:b7:4f:90:b2:d7:22:77:cd:d7:0a:ab:35:3f:43:b1:fa:72:
         9f:68:8d:25:23:d7:72:3a:a3:f9:9c:04:c4:04:79:ca:e8:4b:
         63:48:ff:4a:20:b3:c1:58:41:cf:2d:e8:03:fd:b2:e7:f9:95:
         50:26:db:c8:dc:80:e9:ca:c8:31:ec:10:62:35:08:d5:48:54:
         ce:e6:03:55:4d:d7:64:7b:5b:b3:28:76:8f:27:62:12:09:a8:
         16:15:fc:ed:f1:5c:cb:b8:2f:78:83:c0:95:0c:e6:aa:95:68:
         a2:ff:88:39:93:0f:5f:1b:d8:69:51:a0:ee:d3:06:11:07:85:
         98:4e:80:16:35:a7:a4:c4:55:03:36:9e:d2:bd:64:5e:67:26:
         97:5a:b5:9f:24:4c:b5:30:38:82:7d:54:8b:6c:2c:77:78:ec:
         4f:2a:20:00:6c:27:4f:42:b1:a1:0a:22:9c:9f:d3:2d:a7:34:
         cd:8b:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:52 2026 by rpki-client