Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa
File:                     3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          d08DAN7wmx4K+UcBhy2TnCb10tEwRXwhhFJZM1nbvNw=
Subject key identifier:   73:3B:23:04:5E:83:B0:87:7E:27:98:26:8C:E8:99:A9:11:C0:D5:FF
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       32104D72A34B4EAE0961E2117318A8346F6A8CA5
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:20 +0000
ROA not before:           Thu 05 Feb 2026 00:29:20 +0000
ROA not after:            Thu 04 Feb 2027 00:34:20 +0000
asID:                     52871
IP address blocks:        201.157.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:4d:72:a3:4b:4e:ae:09:61:e2:11:73:18:a8:34:6f:6a:8c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:20 2026 GMT
            Not After : Feb  4 00:34:20 2027 GMT
        Subject: CN=733B23045E83B0877E2798268CE899A911C0D5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:ec:a1:dd:de:07:52:d2:f0:27:82:34:1f:
                    2f:b8:1a:e1:4d:01:a0:0d:0d:1c:ea:1d:2a:47:a9:
                    73:7e:c1:c6:22:57:fb:e9:8f:63:c9:a7:4e:31:4a:
                    a9:20:65:01:cf:cf:2b:a2:48:a2:05:35:8a:ff:1f:
                    03:3f:28:1e:6e:fc:bd:b1:2c:f6:c0:32:0c:47:2c:
                    55:da:c9:31:ce:1c:0c:13:91:de:7c:36:0d:23:a1:
                    0e:e5:72:0e:3c:5f:00:13:a1:ce:57:03:d4:29:01:
                    e7:03:a3:95:5f:d7:37:7c:e1:b1:17:f4:4d:a7:ce:
                    a2:fd:52:02:d4:5f:45:98:f6:d6:64:13:91:8f:c4:
                    05:bb:13:82:94:c3:28:ad:10:87:19:9d:5e:31:a5:
                    14:26:a0:26:66:50:f1:3f:fe:1e:40:92:a4:5a:be:
                    5b:8a:9e:52:21:fe:50:3d:a9:b6:9b:2a:8f:d9:51:
                    5c:5f:66:10:2c:6c:2f:e6:5d:18:85:7c:56:06:80:
                    67:4a:6a:d5:26:0f:e1:4e:f6:0b:f0:44:32:3c:ec:
                    8b:98:8c:4d:70:cb:3a:41:ee:95:4d:f6:aa:cf:68:
                    4e:08:a9:cc:e7:46:dd:71:ba:6d:0b:7c:53:86:a5:
                    8f:b9:e1:bb:22:db:31:82:af:b0:30:93:a7:a7:02:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:23:04:5E:83:B0:87:7E:27:98:26:8C:E8:99:A9:11:C0:D5:FF
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:7a:e5:1f:30:49:ec:c2:f0:db:7e:ae:f2:7b:b9:a3:7a:48:
         44:dd:3a:66:34:84:30:c6:d9:be:83:d5:3d:8b:23:6e:8f:8b:
         5f:29:d1:31:aa:a3:89:6d:04:37:6c:ca:67:0a:d0:34:5a:cc:
         1d:24:75:e5:08:3c:64:bf:f5:c0:0a:be:3d:e6:db:71:56:73:
         cc:83:a2:c9:27:e0:2c:c5:ed:bf:7f:51:0d:5d:d7:78:f5:1f:
         86:fd:94:f7:6b:ba:18:4b:18:ff:7e:d1:80:a6:ee:93:53:0b:
         7b:44:b5:89:57:37:a4:bf:25:39:d4:4e:e7:f3:0a:3c:5c:4f:
         08:a5:51:12:d0:3c:66:35:3c:8c:3b:54:b0:99:2c:c1:c0:34:
         12:7d:d5:1b:51:88:5d:31:c9:7c:ae:f6:82:58:d3:f0:4a:28:
         12:8c:d2:ad:8b:52:ac:65:26:26:ed:2d:ec:95:4b:d2:fc:85:
         66:31:26:e6:ef:d7:49:7d:2d:ad:cb:e2:28:79:1b:d3:8a:3e:
         97:da:9e:55:ca:9c:ed:42:27:7c:bd:08:fe:5f:5b:92:6b:18:
         45:4c:f1:25:69:e6:d6:20:10:3c:9d:2a:21:37:37:37:b5:92:
         38:33:1a:db:01:7b:59:6f:7b:04:c2:90:09:e9:d7:b8:d4:fd:
         0e:9e:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:07:03 2026 by rpki-client