Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa
File:                     3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa (raw, json)
Hash identifier:          GsmznOt1M7ODrzmC1fDMjRR35anrkNpxu6ozpaiTGNQ=
Subject key identifier:   9A:6D:4C:15:F3:27:A2:7F:09:C0:50:E5:6D:ED:4A:06:BA:AF:3A:A5
Certificate issuer:       /CN=D23AEA3BF9686D794967BECAC226FA9648876870
Certificate serial:       72E0215C81CB75302087799A9A79500391794AEE
Authority key identifier: D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa
Signing time:             Wed 04 Feb 2026 20:46:44 +0000
ROA not before:           Wed 04 Feb 2026 20:41:44 +0000
ROA not after:            Wed 03 Feb 2027 20:46:44 +0000
asID:                     270437
IP address blocks:        200.11.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl
                          rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e0:21:5c:81:cb:75:30:20:87:79:9a:9a:79:50:03:91:79:4a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D23AEA3BF9686D794967BECAC226FA9648876870
        Validity
            Not Before: Feb  4 20:41:44 2026 GMT
            Not After : Feb  3 20:46:44 2027 GMT
        Subject: CN=9A6D4C15F327A27F09C050E56DED4A06BAAF3AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:86:88:d8:06:68:d0:d7:34:31:4a:c1:7d:
                    b9:c6:31:e7:10:cc:f1:f8:5b:1e:16:9a:54:fc:48:
                    36:8c:b8:3c:df:25:c4:6a:cb:2b:f4:1e:54:cd:f8:
                    3a:78:b3:5c:b4:5f:30:00:19:1b:aa:33:66:3d:e5:
                    5e:14:2a:5f:6f:14:94:f2:62:49:6a:a2:6f:88:8e:
                    5e:41:b5:53:f3:6c:7e:d6:4e:43:5d:53:c2:d7:d3:
                    5d:ee:19:67:7e:47:53:a9:16:5e:76:d7:0d:66:e1:
                    23:34:16:4a:e6:ad:a8:4e:09:e6:0c:34:03:16:5d:
                    56:58:f8:ce:bf:8f:83:d5:eb:14:ce:67:0c:8c:f4:
                    27:09:9f:b6:e7:6e:48:7b:27:4f:bc:b6:44:83:00:
                    d2:07:0f:44:b4:a4:ad:b0:47:3d:ce:8d:d6:a2:d0:
                    ae:20:e3:30:9e:24:b1:93:12:19:e6:d5:9a:59:d9:
                    e1:fc:c5:7e:bb:af:0b:e1:2e:a6:dd:32:d3:40:16:
                    87:ab:2b:b3:f9:b8:1c:47:da:4b:6f:b0:c1:3c:4e:
                    c6:92:a2:6c:61:fa:2e:d0:91:52:79:75:47:83:6a:
                    27:53:fe:36:e8:0b:9a:46:75:1d:a7:b5:c9:8a:11:
                    95:e6:8a:55:a4:39:de:01:b2:a5:61:04:a1:8f:92:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6D:4C:15:F3:27:A2:7F:09:C0:50:E5:6D:ED:4A:06:BA:AF:3A:A5
            X509v3 Authority Key Identifier:
                keyid:D2:3A:EA:3B:F9:68:6D:79:49:67:BE:CA:C2:26:FA:96:48:87:68:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/D23AEA3BF9686D794967BECAC226FA9648876870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23AEA3BF9686D794967BECAC226FA9648876870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6S61c7qfq7sBGxvqa447hnU2fkmmMwK6JRHAk6ZgrHku/1/3230302e31312e3130342e302f32322d3232203d3e20323730343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:df:75:b4:16:13:aa:41:22:32:d6:97:c9:b1:e8:f3:ec:18:
         7f:c1:37:20:61:69:76:4e:5d:7b:93:f7:a2:91:89:3d:66:83:
         c7:34:d9:5e:9d:45:bf:3c:45:0f:67:fe:18:b3:f6:0b:c9:52:
         6d:87:00:0a:6c:a3:de:18:26:dc:77:ab:6f:aa:cb:d4:0e:5d:
         80:e9:c7:7e:bf:bf:df:13:77:a8:02:9c:5d:74:70:4a:d5:0a:
         62:eb:3a:fd:14:13:05:60:f0:17:76:77:50:2f:9a:6b:09:a6:
         0e:c0:af:e8:e3:1e:87:33:65:a0:09:48:14:13:6b:60:4c:c5:
         a0:cb:3f:4d:10:45:d1:5d:5d:f5:e5:98:12:be:cf:04:ae:27:
         64:7b:9e:10:08:aa:89:89:87:4a:59:71:b5:35:dd:53:70:8d:
         fd:6e:e3:83:5f:52:c9:1d:51:a2:11:76:9e:27:75:3e:0a:c3:
         6c:ce:e7:b8:f2:c1:f7:c3:4a:86:cb:57:fd:f8:68:df:09:ec:
         6a:43:f7:f5:79:f4:90:70:43:9c:b6:2e:0f:2c:0d:5c:22:ab:
         18:a3:d6:ae:52:89:a0:72:2e:95:e6:92:73:58:27:a0:ff:42:
         54:4b:1d:4b:d5:87:ea:f6:62:a1:33:7b:2f:c6:8e:33:40:54:
         58:6f:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:15 2026 by rpki-client