Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
File:                     3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          8REnOAcNhr3BY8XfC3CDDTCG4qkn/bEx0J4rxGpmINY=
Subject key identifier:   69:5A:0C:43:70:FE:A5:B2:3D:01:B8:E9:48:5A:EA:92:AD:A4:D3:12
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       6B58798B402606425E0A1CF97FB3386C31D1F67C
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:20 +0000
ROA not before:           Thu 05 Feb 2026 00:29:20 +0000
ROA not after:            Thu 04 Feb 2027 00:34:20 +0000
asID:                     52871
IP address blocks:        201.157.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:58:79:8b:40:26:06:42:5e:0a:1c:f9:7f:b3:38:6c:31:d1:f6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:20 2026 GMT
            Not After : Feb  4 00:34:20 2027 GMT
        Subject: CN=695A0C4370FEA5B23D01B8E9485AEA92ADA4D312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:bc:2b:85:b6:97:11:67:23:93:bf:bf:4c:
                    93:14:07:ba:a7:4e:0d:fa:bd:2b:41:96:00:58:8a:
                    9b:1e:46:5c:fb:fe:0b:e7:98:5b:9a:45:15:87:e2:
                    81:6c:ab:d8:80:d2:5c:1e:84:94:60:75:17:f5:e3:
                    74:7e:2e:c7:20:e3:7e:2b:6d:94:f6:8d:fd:a7:c5:
                    b0:7d:41:a8:dc:5c:30:c4:9e:b5:c2:56:17:43:67:
                    45:83:e8:0a:e8:fe:41:b9:2e:55:bd:e2:10:2e:d5:
                    5e:9e:ab:92:db:52:44:bd:8d:ee:9b:02:cf:62:04:
                    aa:d9:3a:33:c4:66:c7:b7:e3:51:6b:69:b1:38:15:
                    8d:b2:ec:59:9a:8a:f3:1a:ef:eb:05:6c:6c:41:54:
                    82:54:fb:71:e6:3b:29:1e:e8:1a:2a:6f:dc:4f:33:
                    0f:e0:2f:57:fb:e8:7b:24:84:2d:bb:61:22:84:94:
                    cb:34:32:a9:61:b1:8b:c2:85:a1:41:16:1c:b2:b2:
                    e8:c3:22:79:5e:4a:bf:04:e0:da:2d:0e:52:8b:7d:
                    5c:1e:01:e7:b0:43:61:7a:26:39:9d:f1:ba:3d:41:
                    d6:75:a1:7b:89:c1:ee:80:3b:d7:a2:c9:7f:36:f0:
                    45:e3:7b:ab:a3:e7:50:af:35:35:11:5e:b0:61:6e:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5A:0C:43:70:FE:A5:B2:3D:01:B8:E9:48:5A:EA:92:AD:A4:D3:12
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3235322e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:40:bc:69:98:5d:67:f4:d2:99:59:51:8b:d7:73:7d:80:5c:
         fc:ed:c9:d7:7b:e0:9f:f5:ce:61:f3:0f:59:ef:6d:6b:aa:45:
         f9:4c:0b:2f:43:a1:f2:4d:65:3c:d1:12:09:f3:ee:87:a5:ef:
         72:84:fb:fb:9e:6e:68:25:20:f2:9d:1e:be:95:6f:70:9c:2b:
         da:c5:2c:6b:70:9e:a3:f3:3b:7d:46:84:a6:ea:7a:34:22:6c:
         f3:0d:b6:a1:0d:32:eb:42:dc:c5:a7:7e:64:a0:24:a4:73:9e:
         d1:e1:7f:df:48:3b:94:b8:d4:0a:a0:33:5f:17:f4:e0:27:1c:
         4c:15:e1:99:ee:53:b7:24:26:8a:65:39:0c:34:32:22:f3:69:
         a3:8a:1d:6e:15:5d:30:4c:b4:e7:d7:80:87:6f:4c:b7:3d:7a:
         63:ad:97:08:af:c0:d3:06:4f:3c:96:7d:b8:c8:17:41:b2:f6:
         b1:0c:d8:34:a4:0c:bf:b9:f0:be:ef:c4:e1:91:06:39:40:01:
         41:44:0e:01:d5:dc:f0:d0:1e:56:82:dd:ad:ed:85:9f:e2:eb:
         0a:dd:de:3b:e9:3b:20:ed:2d:96:61:ae:60:39:6c:06:55:b3:
         ac:13:44:a8:2d:52:af:b6:b9:75:ba:b5:98:87:0a:10:d9:a2:
         c3:8c:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:42 2026 by rpki-client