Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
File:                     3230302e3233332e39362e302f31392d3234203d3e203232363839.roa (raw, json)
Hash identifier:          tkzeM7x234WhQy/45Td90RjwLhhi1CB9cK5WPVfi/LQ=
Subject key identifier:   6D:86:22:EC:9C:ED:AE:8C:27:B7:52:37:9B:F2:86:03:89:68:85:22
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       733EC3D6443355CAC83DACFD767007A86333E232
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa
Signing time:             Fri 06 Feb 2026 02:48:51 +0000
ROA not before:           Fri 06 Feb 2026 02:43:51 +0000
ROA not after:            Fri 05 Feb 2027 02:48:51 +0000
asID:                     22689
IP address blocks:        200.233.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:c3:d6:44:33:55:ca:c8:3d:ac:fd:76:70:07:a8:63:33:e2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Feb  6 02:43:51 2026 GMT
            Not After : Feb  5 02:48:51 2027 GMT
        Subject: CN=6D8622EC9CEDAE8C27B752379BF2860389688522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:69:ff:cd:c8:6d:20:5f:b0:1a:a2:f6:52:
                    23:20:05:b5:2c:3b:ba:f9:e2:78:89:1a:5a:99:49:
                    4a:9d:04:c0:50:49:72:cb:49:44:ae:cc:cc:80:47:
                    e1:a2:8b:40:2d:c4:c0:1b:49:c4:9d:0e:74:e4:71:
                    41:9a:d1:d2:fe:d9:1a:60:81:c0:d6:2a:6b:72:fa:
                    a5:11:74:0e:99:e1:7f:ab:03:61:1f:63:42:ad:f8:
                    e7:a8:a6:08:9c:b1:0e:3f:6e:3a:32:01:66:d9:1e:
                    2b:2f:3f:36:f0:8c:c1:3e:46:21:b9:20:31:58:24:
                    ae:11:e4:da:85:9e:8a:ea:8b:77:3a:7b:fe:4d:96:
                    4b:e0:b9:6d:cb:b4:62:14:e4:f8:6d:96:23:ec:3b:
                    7e:32:9e:8d:8d:35:f0:3e:9e:3b:f4:e9:cb:29:37:
                    c3:f3:6a:9f:fb:d2:e1:71:f8:34:8b:2e:fc:ff:ad:
                    d3:40:f7:ba:3c:5a:7f:08:48:d5:0d:c1:b2:48:e3:
                    f1:52:7f:f5:78:dd:b2:75:ee:05:c1:28:b1:31:af:
                    66:15:c3:ba:6d:53:53:6b:8a:f4:0e:04:53:d6:d3:
                    7a:30:99:51:ab:0b:e2:e7:1d:6f:55:e4:4b:53:7a:
                    16:29:6e:61:0c:41:8f:fa:51:b8:df:f1:d0:d4:1d:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:86:22:EC:9C:ED:AE:8C:27:B7:52:37:9B:F2:86:03:89:68:85:22
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3230302e3233332e39362e302f31392d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:fe:41:5a:e7:f2:3d:32:83:48:9a:a8:20:1d:54:ec:86:57:
         44:da:d6:db:1b:a3:a3:38:76:1e:0c:0d:39:43:33:1d:ff:e5:
         fe:a8:2b:b1:3b:5b:28:c2:12:d5:1d:92:73:dd:73:c8:ec:13:
         52:8f:7b:70:c2:49:eb:21:e7:94:87:1b:7b:ac:37:8b:81:fc:
         fa:84:78:4b:96:f4:a7:86:9e:46:89:5b:d6:bd:6f:8e:1a:d9:
         da:5d:40:13:97:e5:8f:b1:54:07:5e:8e:af:53:2c:8a:19:b4:
         93:81:1d:23:a0:b5:5a:71:67:2e:8c:a2:14:3e:e4:4a:31:1e:
         e8:74:c1:9e:3b:e9:05:53:45:fc:97:0b:88:fd:31:53:d3:18:
         67:7d:b6:4d:f1:76:b2:b3:3c:43:7c:5a:a2:da:5d:a8:fc:c2:
         7d:0a:fe:07:71:8d:6b:1c:53:10:55:91:99:c3:ae:37:78:35:
         ca:e0:3f:09:0a:08:97:10:bd:d4:69:e9:99:3f:d6:ca:72:30:
         56:bd:5e:b7:71:eb:31:e7:a8:a6:1f:6f:3f:e5:5c:53:e0:5e:
         76:62:51:7d:fb:97:fc:e3:d5:39:e1:ef:1e:17:21:5b:f8:c9:
         24:a8:0b:d0:d2:34:c9:e4:ed:8e:f1:4e:c7:32:f4:4c:12:b8:
         f1:50:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:15 2026 by rpki-client