Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/3230312e37362e302e302f32302d3234203d3e203238363432.roa
File:                     3230312e37362e302e302f32302d3234203d3e203238363432.roa (raw, json)
Hash identifier:          jOi9/K2CSk/HHxVEsLnMbiW1ZjiWc6/2qCZSZYn/AH8=
Subject key identifier:   89:35:98:6D:60:96:03:16:4B:9D:9B:18:12:CA:AF:47:47:96:7A:52
Certificate issuer:       /CN=66335F04863CA1159D16D18E655231764F6FB821
Certificate serial:       4E1EFF4CB0CD648A9EDF36C637E11F5C129B922C
Authority key identifier: 66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/3230312e37362e302e302f32302d3234203d3e203238363432.roa
Signing time:             Fri 06 Feb 2026 01:39:49 +0000
ROA not before:           Fri 06 Feb 2026 01:34:49 +0000
ROA not after:            Fri 05 Feb 2027 01:39:49 +0000
asID:                     28642
IP address blocks:        201.76.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl
                          rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1e:ff:4c:b0:cd:64:8a:9e:df:36:c6:37:e1:1f:5c:12:9b:92:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66335F04863CA1159D16D18E655231764F6FB821
        Validity
            Not Before: Feb  6 01:34:49 2026 GMT
            Not After : Feb  5 01:39:49 2027 GMT
        Subject: CN=8935986D609603164B9D9B1812CAAF4747967A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:be:42:79:2a:d5:ea:f5:ad:3c:3b:30:33:74:
                    4f:22:84:d0:da:3b:85:d3:6a:20:54:e5:b7:54:e3:
                    ad:12:9d:4f:b9:fd:41:12:6d:84:63:94:9e:82:09:
                    bb:46:2d:52:b8:95:c2:db:ff:58:20:75:22:04:5c:
                    20:87:26:65:1b:26:78:74:73:20:1a:3f:5c:f4:28:
                    5b:71:f8:04:55:1e:de:77:b3:63:df:7f:ca:74:11:
                    84:da:86:80:68:72:8f:78:ce:ab:86:ec:b9:29:aa:
                    da:c5:8c:c7:aa:6a:95:20:d7:7b:69:42:63:e2:f3:
                    14:f6:74:70:12:26:f1:e3:26:c5:30:27:19:56:2e:
                    2b:83:12:99:c2:6d:64:c2:53:c2:50:7a:c3:c3:b0:
                    e4:00:cc:53:12:05:67:14:6a:88:10:9d:6d:e3:70:
                    0d:dc:14:3f:f2:03:67:8f:dc:30:2b:f5:84:5c:4e:
                    83:bc:68:73:1e:1f:37:44:08:b3:53:c1:df:bc:96:
                    73:ff:6a:b0:df:da:f9:fd:24:09:a5:ff:be:03:2b:
                    0e:70:04:91:42:58:d3:c6:ce:ed:14:af:2f:f5:8e:
                    a8:60:7f:ae:4e:f8:d9:c8:8d:d1:b3:25:59:cb:13:
                    55:09:fb:6a:e5:69:0f:5e:c7:1b:67:7f:a0:fc:a0:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:98:6D:60:96:03:16:4B:9D:9B:18:12:CA:AF:47:47:96:7A:52
            X509v3 Authority Key Identifier:
                keyid:66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/3230312e37362e302e302f32302d3234203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:53:06:ec:47:81:64:9c:6f:aa:b9:1c:4b:a5:e2:c2:26:17:
         2b:fd:04:ed:94:1d:95:e9:07:57:4f:0b:53:bd:54:44:35:85:
         1b:90:11:2d:97:93:d1:dc:c5:d0:cf:ca:65:05:c1:52:34:79:
         a6:c0:4a:44:90:e2:4d:32:a2:b2:32:a0:70:9e:df:ec:3f:26:
         c6:0c:73:d7:db:43:97:dc:e0:e4:7b:c5:09:1b:68:43:bc:2e:
         60:77:ef:a5:25:49:cd:cd:b4:8e:0a:61:43:11:2b:96:55:d9:
         32:5b:cd:a8:71:63:57:01:68:d4:19:87:50:56:7c:cf:2f:21:
         8d:07:7f:e7:d4:08:1b:b3:18:da:53:f9:a9:95:5a:f7:54:c0:
         70:59:ec:be:ea:cb:9c:e9:da:ff:80:2c:1c:4e:0b:b3:ac:76:
         bd:8c:99:5c:c7:6e:f0:6f:de:56:fb:9d:3b:7c:92:80:2e:28:
         be:7e:64:0f:9f:88:0f:bf:9e:47:e7:61:57:49:48:89:e9:f6:
         07:bc:6a:22:73:68:d8:24:42:b6:7c:d7:34:5a:3a:3a:b8:5e:
         21:e1:ab:93:81:11:63:47:0e:e2:e5:0c:7a:88:b9:50:58:53:
         8b:04:7a:f9:a2:b2:3f:ad:ef:fa:62:8a:8c:96:a7:f3:fd:89:
         6b:9e:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:51:07 2026 by rpki-client