Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa
File:                     3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          RS9+/Hna9od2bX0vomSWTxvceoUmvT1+xdcNFYEmwD8=
Subject key identifier:   9E:60:ED:5D:45:E1:EC:B2:A9:F0:7C:BE:EF:1C:E2:34:8A:BD:EE:06
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       528A8030901DFDDD6437E8CD49DF188647271443
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:19 +0000
ROA not before:           Thu 05 Feb 2026 00:29:19 +0000
ROA not after:            Thu 04 Feb 2027 00:34:19 +0000
asID:                     52871
IP address blocks:        201.157.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8a:80:30:90:1d:fd:dd:64:37:e8:cd:49:df:18:86:47:27:14:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:19 2026 GMT
            Not After : Feb  4 00:34:19 2027 GMT
        Subject: CN=9E60ED5D45E1ECB2A9F07CBEEF1CE2348ABDEE06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:11:07:70:ff:ac:4c:d1:bd:6c:35:7b:02:
                    c0:b0:af:35:62:05:36:15:c2:8b:df:e7:6f:06:cf:
                    84:35:3e:01:ce:67:92:e8:91:3a:8d:40:b4:27:f2:
                    63:40:21:44:0c:76:8b:68:74:fb:bb:1e:d5:52:2e:
                    10:cd:c6:c3:76:53:06:2a:bc:d5:69:ac:6b:bf:27:
                    d5:9b:12:b9:5d:2c:c8:59:a2:e4:b3:ed:2d:d5:b7:
                    72:fc:af:f8:d9:eb:18:0a:32:c4:8a:db:9a:bd:99:
                    02:b3:ec:51:22:4c:1a:34:ff:4d:6b:3c:09:d0:16:
                    78:6c:61:a8:94:32:07:4c:c9:70:99:43:b2:e9:86:
                    ba:81:a7:35:ec:86:0f:4a:7f:37:5f:52:bd:81:78:
                    0a:3f:de:78:7c:88:a4:62:78:ba:b1:d3:22:46:19:
                    be:5b:bb:4d:e3:1a:a2:e9:82:1a:e9:0d:c5:ff:02:
                    ed:1d:b3:7a:a5:5b:f3:d9:81:71:e4:61:3c:ee:32:
                    5c:bb:ce:06:95:a5:8c:ab:f8:b5:4a:68:b2:35:18:
                    c3:df:16:b7:fa:64:de:7e:20:eb:e5:5c:3b:af:c5:
                    be:20:06:19:7e:d2:42:20:9d:fd:f7:3c:42:3b:97:
                    13:02:97:08:8c:3b:68:94:2a:0c:4a:d3:e4:b2:ba:
                    05:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:60:ED:5D:45:E1:EC:B2:A9:F0:7C:BE:EF:1C:E2:34:8A:BD:EE:06
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3231372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ab:44:88:37:66:55:34:6d:d3:35:a9:97:b4:e4:2a:7e:8a:
         74:14:45:95:65:b3:9b:ef:46:5e:49:f2:5c:0f:5c:46:2a:87:
         61:f7:8e:de:8e:41:fc:4e:c2:45:cd:4c:6f:11:10:48:5b:d4:
         67:b9:72:d7:f6:85:8b:7e:6a:67:fc:0e:b1:5b:8d:4f:ef:c2:
         fb:3b:d9:43:14:8d:9a:7e:47:1e:4c:26:65:a7:c7:5a:91:a3:
         55:99:49:85:28:22:7d:0c:f5:22:9b:ad:e0:1c:63:1e:cf:41:
         da:c0:f1:4d:fb:48:8a:80:12:e3:3c:20:4e:67:62:82:48:92:
         eb:75:3d:c4:f2:1d:bb:26:3b:d4:e5:c1:f0:db:e1:c2:3b:5e:
         46:24:f1:fe:c5:9c:86:c3:bb:03:79:2e:3a:1a:32:79:82:88:
         f6:e3:47:e1:8f:5f:9a:cc:de:54:f6:53:be:6c:3f:97:9e:23:
         9c:df:79:0a:e3:3d:3e:f1:fa:eb:87:04:66:40:48:4c:47:cb:
         81:0a:62:0d:33:74:8a:b8:86:1c:49:b8:3f:48:1a:eb:d8:ac:
         cb:09:be:60:07:d3:2c:5e:0d:9a:e3:c6:03:7e:c9:19:c3:33:
         6d:59:73:ee:59:8f:a7:15:99:51:f0:58:ea:c6:72:3c:3e:03:
         ed:ff:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:22:04 2026 by rpki-client