Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa
File:                     3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa (raw, json)
Hash identifier:          NqWILxpBiHhsXEv2+8eKu6PDuTyCSzC9E8quU08aTX4=
Subject key identifier:   85:7C:8F:D9:F4:B7:B6:76:B3:65:19:38:A6:72:3C:DF:32:0F:D3:14
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       237535B432AABE68AC7BB88D26015FD44DFDDFD4
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa
Signing time:             Thu 12 Feb 2026 13:28:03 +0000
ROA not before:           Thu 12 Feb 2026 13:23:03 +0000
ROA not after:            Thu 11 Feb 2027 13:28:03 +0000
asID:                     271110
IP address blocks:        160.20.176.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:75:35:b4:32:aa:be:68:ac:7b:b8:8d:26:01:5f:d4:4d:fd:df:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Feb 12 13:23:03 2026 GMT
            Not After : Feb 11 13:28:03 2027 GMT
        Subject: CN=857C8FD9F4B7B676B3651938A6723CDF320FD314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:53:d0:21:11:c6:a1:33:bc:7a:4b:65:d5:
                    64:46:03:6c:af:1e:cf:0e:ed:4a:c3:5d:51:3e:e7:
                    6d:52:48:bd:24:db:80:10:6c:a3:8c:d5:3a:44:35:
                    f9:b2:8b:ac:19:6e:b8:9e:39:f2:c2:72:93:d2:a1:
                    4e:77:62:1a:57:99:ff:db:fc:4f:15:29:f8:45:c8:
                    c1:dc:50:17:4f:fe:74:03:91:0f:3f:1b:bd:ea:b0:
                    1d:1d:72:d6:64:48:4d:41:21:85:14:cc:fe:82:cc:
                    47:29:b9:9a:d9:a0:93:3d:61:de:66:5e:ac:dd:89:
                    ae:4e:1a:21:0d:20:6c:28:52:06:86:bc:8a:a2:2a:
                    e0:d6:e9:d9:80:c2:02:ab:33:f0:1f:9e:dc:ad:b4:
                    94:a6:24:c3:36:e8:fe:34:70:a2:4a:7e:f4:68:f6:
                    d0:47:30:8b:2a:75:a3:02:87:48:30:c9:a9:84:e2:
                    91:40:f1:ed:fa:91:6a:55:8a:e9:c5:44:e7:85:66:
                    12:ef:06:08:80:06:6e:18:f1:07:fd:6e:f1:96:34:
                    fd:25:a0:b4:97:9f:4f:f4:0d:08:1c:24:ac:36:09:
                    2b:5f:f6:89:2a:93:39:fe:23:57:88:a8:44:5a:de:
                    4d:bd:34:fa:09:ae:0e:60:f5:b5:67:1d:9d:f4:c5:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:8F:D9:F4:B7:B6:76:B3:65:19:38:A6:72:3C:DF:32:0F:D3:14
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137362e302f32322d3233203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:41:5d:09:5c:6a:68:d1:5a:1d:29:a4:1f:a5:10:4f:de:
         87:67:f1:d2:7e:41:bf:81:ab:82:56:b4:72:b1:cf:6e:89:a2:
         cc:e9:91:f4:68:1c:ab:44:8e:28:ce:70:90:43:90:d8:59:7e:
         a8:d0:3f:4c:9b:e0:a9:e2:fd:4b:32:3b:0a:a8:0b:e4:b6:94:
         0d:07:c0:29:be:36:5f:8d:a3:e5:7a:b9:a8:bc:59:32:f8:57:
         ef:64:72:e2:11:6d:78:d6:a1:d0:80:5b:69:24:63:ff:81:3e:
         ef:d6:2d:cc:3a:9d:3e:26:7b:c2:17:48:14:87:88:29:3e:80:
         75:2c:68:26:55:2e:bd:32:79:74:04:e0:2f:ab:58:e3:cc:58:
         9d:f0:a8:69:49:65:f8:57:de:68:91:91:46:74:12:f8:63:03:
         e2:9d:86:f7:0f:10:ae:e8:07:a3:a5:99:b1:d8:77:f1:c0:aa:
         94:1a:42:8f:49:b9:83:e1:61:69:c9:ea:8c:59:7e:8d:1f:9e:
         af:4b:61:72:5c:65:51:42:63:1b:25:0d:db:c2:74:1b:f4:bb:
         ac:0d:8d:19:80:5b:ec:d5:7c:de:3d:97:5b:0d:01:09:cf:57:
         8a:65:ca:6f:f7:e2:96:2a:c2:07:f0:20:d7:d5:18:79:90:dc:
         18:7b:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:29 2026 by rpki-client