Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
File:                     3230312e33332e3232342e302f32302d3234203d3e203238323835.roa (raw, json)
Hash identifier:          A/HYsbBqrF7Glpk+rLR1hdMuffkVrFD+vibAVPDHZgY=
Subject key identifier:   B2:23:B6:6F:B0:67:5B:8E:8A:CB:DF:E4:BB:65:A9:A7:58:6F:A9:DE
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       6A4732DD32A66B6FFC2A3C8D794FCCF1015D7BC7
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa
Signing time:             Thu 05 Feb 2026 18:16:50 +0000
ROA not before:           Thu 05 Feb 2026 18:11:50 +0000
ROA not after:            Thu 04 Feb 2027 18:16:50 +0000
asID:                     28285
IP address blocks:        201.33.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl
                          rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:47:32:dd:32:a6:6b:6f:fc:2a:3c:8d:79:4f:cc:f1:01:5d:7b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Feb  5 18:11:50 2026 GMT
            Not After : Feb  4 18:16:50 2027 GMT
        Subject: CN=B223B66FB0675B8E8ACBDFE4BB65A9A7586FA9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:1d:bc:9f:a9:4c:db:17:24:d3:b6:27:85:
                    88:7c:3b:b6:83:de:7f:38:cc:85:32:4c:50:8e:f6:
                    a4:4f:52:4d:b4:13:1a:fb:f7:42:c3:39:9f:20:8d:
                    63:c4:62:89:1a:63:11:eb:f1:ed:3d:a1:cb:a9:e3:
                    1f:02:05:32:75:78:78:a6:cb:bd:6a:22:8b:ab:ce:
                    ff:e6:6e:75:69:4e:b9:8c:b2:ec:06:02:58:c5:2c:
                    1a:69:4e:8c:9a:43:5a:ab:49:f0:12:b7:26:1e:74:
                    aa:95:db:8d:38:db:28:c3:24:b2:bf:65:3d:cc:a1:
                    a5:d7:42:18:43:d6:e3:24:fc:02:93:08:8b:7f:ef:
                    a8:09:27:37:6d:dc:9e:88:88:94:3c:31:a6:eb:c9:
                    7b:09:78:e3:b8:06:33:b4:90:85:89:e3:23:6a:91:
                    0e:2c:bf:6f:ea:39:f0:61:4d:df:78:88:01:44:60:
                    69:3a:6f:0b:f4:1b:8a:74:08:1b:42:06:45:e7:7c:
                    1a:3e:ba:24:6a:0e:ed:37:0c:e2:82:85:41:b9:a5:
                    eb:53:27:f5:06:ac:e5:07:e4:6e:70:98:8a:fc:4d:
                    d1:60:ba:ee:d9:83:bb:12:1a:82:1f:ec:ec:81:3d:
                    ba:70:76:cc:4e:ef:ac:c4:8c:62:75:81:52:5f:a0:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:B6:6F:B0:67:5B:8E:8A:CB:DF:E4:BB:65:A9:A7:58:6F:A9:DE
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3234203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:24:e2:f4:a8:e4:d3:39:ae:72:da:44:9f:bd:d8:1a:bb:29:
         ae:28:ef:5b:01:d2:79:8a:e7:f3:8b:88:93:09:74:f3:a8:f6:
         65:1b:7b:23:26:26:69:92:46:c3:56:4f:98:9e:b4:1d:0b:10:
         ac:6f:e8:f3:bc:f7:02:70:73:e2:6c:3b:50:98:2d:01:0f:53:
         3c:d9:27:73:91:bc:a5:4b:8a:c2:d9:9e:10:5e:0d:24:5e:ac:
         7d:72:99:d9:c5:1a:ce:c2:4f:cc:96:e9:00:18:c0:1a:23:e0:
         f8:39:08:98:c6:94:fc:9e:e6:3e:24:73:d0:bb:88:ef:43:6b:
         a6:64:e8:22:17:51:80:83:ea:d4:91:68:92:af:5a:84:e1:7b:
         9d:1c:94:4c:15:8f:53:b5:ea:be:82:7c:c9:78:1e:61:ec:38:
         f1:00:2b:c9:a2:ca:9f:e2:6c:ef:50:c2:2e:c9:7a:1b:86:44:
         12:a3:35:06:87:1d:78:08:d3:4c:d5:6c:c2:06:f7:e1:cc:19:
         87:e0:7a:66:75:b2:58:76:f4:1f:3d:b2:fa:a2:1b:70:83:3c:
         47:a8:b0:87:a2:d9:87:f4:b1:72:54:80:e1:47:2a:52:de:87:
         ad:9e:26:41:58:9e:a2:bb:e0:92:15:26:71:4c:bf:4a:ba:5a:
         95:89:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:06 2026 by rpki-client