Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa
File:                     3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa (raw, json)
Hash identifier:          PM0lHsUYnB12FJqt6xiReOJNg/ovKurUA+Xwa3EXzBQ=
Subject key identifier:   CF:1F:BC:C9:C1:00:B2:00:6D:98:4C:4C:41:9F:3B:99:A5:84:CC:7A
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       2B0B2F980C5A2C7258F8DDC4CFD2649BB30161DF
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa
Signing time:             Thu 12 Feb 2026 13:28:03 +0000
ROA not before:           Thu 12 Feb 2026 13:23:03 +0000
ROA not after:            Thu 11 Feb 2027 13:28:03 +0000
asID:                     271110
IP address blocks:        160.20.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:2f:98:0c:5a:2c:72:58:f8:dd:c4:cf:d2:64:9b:b3:01:61:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Feb 12 13:23:03 2026 GMT
            Not After : Feb 11 13:28:03 2027 GMT
        Subject: CN=CF1FBCC9C100B2006D984C4C419F3B99A584CC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:b6:14:b7:3d:ac:c3:ce:30:8d:cb:9d:3c:
                    bb:4c:18:05:eb:58:87:ac:b6:8d:0f:71:5c:27:95:
                    06:91:19:d2:d0:e0:d2:40:2a:63:f5:69:ff:a2:f0:
                    b4:01:f1:64:43:f6:51:9d:1d:1b:5f:e0:db:72:a2:
                    19:ab:0f:d2:a8:f1:35:c3:2e:c4:5d:f1:fa:5a:62:
                    52:6b:3c:4b:79:f3:7b:aa:16:a2:8f:47:8d:7d:73:
                    54:53:af:ae:0e:a7:37:bd:ad:02:a2:0f:f8:1f:df:
                    e7:03:c3:3b:fe:7c:1a:40:6e:e2:e3:85:ba:f5:11:
                    2a:43:83:78:ce:27:52:12:b1:f4:70:5f:7f:24:b8:
                    18:f1:9f:bf:2a:e7:1d:fa:bb:83:1f:f9:bf:76:07:
                    e0:39:39:b3:5e:86:d1:c6:aa:b0:d1:bf:cb:4c:f9:
                    7c:c7:7c:27:13:53:f1:98:a0:29:50:24:4b:f3:45:
                    1f:6d:65:1b:9b:e9:11:4f:fb:c0:0b:29:7c:7a:a7:
                    e7:09:1a:ef:42:d7:0b:a7:5f:23:ba:5c:d9:1c:1b:
                    b9:bc:ae:97:40:9a:66:21:34:94:47:75:fb:df:00:
                    40:4f:0f:5f:c3:3a:88:64:52:97:fe:3c:0a:c7:24:
                    a3:90:3f:3e:df:e0:44:e3:16:a0:3d:17:84:f9:af:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:BC:C9:C1:00:B2:00:6D:98:4C:4C:41:9F:3B:99:A5:84:CC:7A
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137372e302f32342d3234203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:89:9f:2b:37:51:8c:16:f2:83:21:ea:91:0d:c6:33:70:85:
         be:ab:11:42:ba:36:f1:d2:dd:e7:76:6c:fe:9a:85:db:de:83:
         b1:82:9f:6d:df:d3:c6:16:d0:f4:e1:0b:89:66:20:2e:71:a8:
         ba:fe:65:49:9b:0e:87:b1:ef:f3:ff:03:74:67:30:77:0f:62:
         02:6b:c1:18:bf:57:ba:91:ef:b1:e8:09:54:63:87:84:b3:23:
         47:7a:21:f7:6c:af:31:4e:1f:3a:7b:fe:da:e4:88:29:69:57:
         95:55:58:d7:01:bc:81:30:e6:9d:a7:95:4d:de:bd:b2:26:04:
         d1:fa:24:09:ad:2d:92:79:83:f4:c7:9a:d0:af:6f:ac:e2:75:
         0f:32:46:58:b8:96:f8:31:51:21:93:3d:34:94:12:7e:09:34:
         b4:46:9e:73:b2:65:e4:c7:21:b5:79:a4:6e:c9:3d:5e:2f:9a:
         dc:c3:09:cd:f8:d2:b6:ae:77:94:ae:df:9c:fd:a5:1b:d0:d7:
         15:a7:9a:61:a7:93:80:bb:a9:c5:d8:95:c1:cb:23:97:da:13:
         f3:15:75:96:d0:7e:85:b7:c4:e0:ac:cf:fa:1c:6b:2b:af:70:
         1e:d6:92:4a:a4:48:71:c8:1c:d3:45:e8:aa:e0:52:b0:ee:9f:
         cc:a1:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:47 2026 by rpki-client