Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32322d3232203d3e20323636313931.roa (raw, json)
Hash identifier:          tybpJ3GwjL+dBOO4n5SwJ2vRq30ANOZmP8AKX2EPP0g=
Subject key identifier:   DE:61:34:65:31:BA:AE:F5:F0:26:89:B4:9B:1F:F0:B4:0D:1C:40:F0
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       7D9EE46AA4C15D7D5A19992A15DD6F22582531C9
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     266191
IP address blocks:        200.71.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9e:e4:6a:a4:c1:5d:7d:5a:19:99:2a:15:dd:6f:22:58:25:31:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:83:73:4e:ea:5a:e8:25:0e:51:ca:bc:2d:
                    46:05:70:5b:2e:58:ce:61:b1:21:14:0b:41:fa:39:
                    83:25:b2:e7:0d:d9:c2:b7:0c:d2:e0:3d:b4:1e:76:
                    2d:59:e6:ee:b5:02:84:5e:c0:15:c6:28:cd:58:46:
                    80:7d:52:aa:16:f6:1d:16:39:70:db:d1:da:14:6a:
                    7e:e8:3f:eb:fc:66:04:38:20:fc:f2:69:ab:bd:67:
                    a0:1d:2d:66:f9:90:99:66:8a:9d:34:59:20:a5:e8:
                    25:76:9d:eb:23:54:8f:c5:c5:25:f8:c0:24:55:f8:
                    14:04:fc:7d:4e:71:24:2a:78:26:06:92:e0:db:d1:
                    28:be:71:2c:16:99:46:d1:b0:0a:a0:63:37:61:b6:
                    df:39:08:a3:65:0c:28:e1:23:c0:d5:33:78:ea:9e:
                    ba:c9:0c:d0:49:52:86:34:eb:3d:a1:0c:be:4b:92:
                    04:2c:50:41:39:cd:67:e6:f2:32:94:ca:93:e2:e6:
                    16:3c:4c:8c:af:65:64:13:99:a6:5d:f6:47:21:bc:
                    0a:36:5b:d9:a9:1a:0c:24:7d:f8:29:52:a4:b1:1c:
                    47:2d:e0:83:3f:9e:c0:95:ca:e0:55:df:3a:75:d1:
                    08:b8:77:17:81:c3:6d:1a:79:bb:9e:b4:3a:24:95:
                    10:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:61:34:65:31:BA:AE:F5:F0:26:89:B4:9B:1F:F0:B4:0D:1C:40:F0
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32322d3232203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:03:1f:bb:56:da:5c:2a:20:5c:7e:41:71:b0:19:81:03:47:
         a4:41:76:94:a9:b0:44:63:e1:ea:2e:9f:61:08:1d:7f:5c:cf:
         bf:dc:94:63:c5:32:1f:00:25:f5:01:5f:a9:28:2a:e3:27:fb:
         14:d1:df:92:88:b4:5e:34:a7:e3:47:ca:df:18:8b:ba:d9:fa:
         93:04:49:07:31:dd:24:86:f3:53:58:cc:e5:42:21:6d:89:e8:
         3e:c8:e0:90:59:77:a9:96:ea:72:23:83:f4:43:84:22:3a:52:
         47:24:ab:c7:ce:60:1b:7c:e1:01:99:80:0d:b4:2e:4c:e2:e3:
         e7:d7:84:27:72:3c:c4:bc:24:33:3b:ed:81:a9:78:86:14:5f:
         54:0c:7c:22:0f:33:21:d6:ae:51:06:a2:7c:b9:a6:ac:a3:0c:
         4e:a4:93:21:1f:a4:35:9f:00:9b:be:fe:1f:c1:8f:b5:83:06:
         65:f9:1f:f8:b5:83:67:24:85:76:0a:68:4a:58:2f:41:53:84:
         a0:ff:f6:de:5a:c2:f8:f9:9d:3a:49:88:00:92:ff:b3:7f:5f:
         2f:73:ec:83:40:bf:ef:17:31:c3:3f:94:74:ff:8f:97:e3:2e:
         be:bc:e0:24:52:37:67:02:29:29:e4:28:02:99:39:79:fc:28:
         b1:61:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:53:07 2026 by rpki-client