Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
File:                     3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          Trun0L6FUYD8uUor5Ui+aIo7vmX+0zTEx7IhaKf16rA=
Subject key identifier:   D1:25:37:C6:EE:22:01:D0:59:C6:42:0C:93:9A:92:45:3D:3F:E6:97
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       74C1D23D0574A86CA707A605D45273EFCE00232B
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 05 Feb 2026 07:32:18 +0000
ROA not before:           Thu 05 Feb 2026 07:27:18 +0000
ROA not after:            Thu 04 Feb 2027 07:32:18 +0000
asID:                     52968
IP address blocks:        200.229.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c1:d2:3d:05:74:a8:6c:a7:07:a6:05:d4:52:73:ef:ce:00:23:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Feb  5 07:27:18 2026 GMT
            Not After : Feb  4 07:32:18 2027 GMT
        Subject: CN=D12537C6EE2201D059C6420C939A92453D3FE697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:6d:00:9c:8c:60:17:38:b8:a0:a0:4b:a7:
                    e7:f6:47:7d:98:f6:f9:b0:46:85:52:4e:23:04:3a:
                    8d:6b:94:f8:af:46:2e:ba:c0:02:46:ee:db:7b:23:
                    5f:27:2e:b1:fc:af:91:f9:7a:05:5e:37:56:b9:77:
                    3c:07:24:0d:60:66:73:61:ab:2d:41:1d:65:2e:17:
                    9c:d7:ca:a0:39:65:b2:a0:45:33:0e:a2:4f:f4:84:
                    ce:32:64:5a:62:04:5e:bb:53:a3:a6:2b:89:53:0a:
                    fc:2c:52:4e:b9:e0:55:53:a2:28:1b:2a:c2:2a:ac:
                    ef:69:c9:e2:f8:67:6c:38:22:3b:fe:49:37:da:41:
                    77:4b:2b:62:84:65:28:79:24:80:a9:29:06:5e:fc:
                    8a:60:9c:2a:96:93:23:ff:c3:38:94:ed:91:42:f6:
                    76:92:d4:20:c7:9a:51:08:f3:ee:a8:50:98:11:06:
                    bf:e8:54:e8:af:d2:17:0a:35:ce:e9:dd:24:b0:d6:
                    19:2d:60:0a:b3:c0:17:59:06:37:82:57:39:c3:97:
                    54:e5:48:14:46:fb:a0:61:1f:60:10:95:a0:6a:70:
                    65:74:e0:dd:66:ff:d8:57:a3:1b:71:9b:fb:04:cd:
                    4a:58:7d:4c:b5:73:07:65:0d:6a:be:d3:eb:b3:86:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:25:37:C6:EE:22:01:D0:59:C6:42:0C:93:9A:92:45:3D:3F:E6:97
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3230302e3232392e3231322e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:61:a0:f5:ec:48:35:2d:ee:da:a7:fc:e0:99:f8:7c:3d:e0:
         e2:22:9b:59:1c:cf:f1:ec:da:8a:79:f3:ca:64:2a:cc:75:26:
         bb:b6:24:c0:8a:78:7f:45:f0:c0:4d:13:ac:cb:c6:91:4d:16:
         65:f2:88:de:99:87:95:8a:71:99:4e:9f:a2:fd:ad:a9:1a:58:
         a0:21:92:88:47:66:6c:1e:2e:de:78:8d:39:b2:af:94:2f:f8:
         bc:6c:0b:08:fa:c8:3c:51:08:60:7b:1e:ed:c3:04:a4:45:9d:
         73:61:d0:d0:70:44:ff:d9:23:5e:06:7e:51:8c:87:e4:53:e0:
         13:8b:a3:30:b4:c4:30:22:5a:cc:af:92:dc:be:94:dc:a2:d6:
         58:fe:b8:aa:e0:ae:ab:f9:90:ac:bf:f9:97:ff:09:9d:94:55:
         75:bd:15:f6:09:3b:70:db:fe:d9:26:8a:70:ee:1b:12:59:9b:
         37:00:09:f0:97:29:ac:db:ee:bc:4f:27:d5:dd:61:f9:be:08:
         88:4a:6e:51:63:31:17:a7:03:a4:d9:7d:21:a0:64:f3:d2:8c:
         d8:19:91:b2:85:72:eb:25:48:81:47:f0:8c:9c:da:d6:af:a3:
         20:54:a6:4c:b5:a2:a2:54:8d:ab:6b:7a:57:42:3c:47:9b:c8:
         89:47:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:46 2026 by rpki-client