Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa
File:                     3230302e37312e36342e302f32332d3233203d3e20323636313931.roa (raw, json)
Hash identifier:          N+F6u0J2yPD+F49eJ/4UhA2mpe7el1327maAKU/Zw44=
Subject key identifier:   6F:C2:B6:23:35:CA:EE:FD:C6:13:26:6F:00:10:49:C8:4E:2F:DA:E1
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       3B9AB2258FF041A8F11E27F00931ACD116FD73B2
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     266191
IP address blocks:        200.71.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:b2:25:8f:f0:41:a8:f1:1e:27:f0:09:31:ac:d1:16:fd:73:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:7f:a0:03:af:9a:8a:06:24:d4:38:84:4d:
                    5d:60:6c:c6:90:47:83:26:13:10:00:80:11:70:ef:
                    8b:fb:cd:29:aa:91:d8:3c:ea:8d:25:9b:f6:77:4b:
                    c3:18:be:1f:b8:f6:c4:28:3f:46:7c:e8:18:4c:68:
                    94:11:98:f5:b5:49:8a:12:f6:97:05:24:75:b6:b7:
                    85:7e:be:f7:11:5c:4d:16:cd:92:fc:21:b2:c2:22:
                    39:59:d0:51:f8:82:3f:9e:ae:05:8a:b5:eb:f4:65:
                    34:ec:2d:93:1a:5d:59:3e:ad:c9:ec:40:8a:f6:f7:
                    85:a0:25:c6:df:6f:3a:0e:d1:2e:4a:64:3f:ea:26:
                    d5:55:97:1c:ab:be:e1:f7:01:24:99:56:6d:89:0f:
                    ac:4c:94:30:52:41:31:5f:64:e9:f6:ea:ef:c7:c6:
                    9f:cd:26:17:78:d3:84:e6:96:44:3b:9d:0a:c8:3a:
                    d7:62:8e:97:b6:29:a5:f2:66:43:93:1c:71:bc:f9:
                    0e:93:4b:f9:8d:60:17:ff:3b:fe:43:fb:ba:df:a8:
                    eb:3d:a0:b3:9b:12:14:33:75:c2:fb:b2:b2:16:0f:
                    c3:2a:5b:d7:04:65:95:95:0a:c9:5f:58:4c:e9:59:
                    04:12:30:6c:a5:4c:b0:8b:87:1d:3e:a6:c4:61:10:
                    7d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C2:B6:23:35:CA:EE:FD:C6:13:26:6F:00:10:49:C8:4E:2F:DA:E1
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36342e302f32332d3233203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:88:9f:ce:41:5b:50:88:8b:d1:75:5b:64:f2:5b:2c:2a:
         93:32:93:3a:fc:ce:69:85:9c:3f:f6:a3:8e:f3:c8:a5:68:cb:
         71:5a:96:06:5c:8f:85:75:bb:73:b4:ce:b8:ae:b8:82:77:95:
         48:77:89:f7:92:5e:8a:6b:45:87:64:a9:4c:e7:86:ec:c0:e3:
         92:8e:98:ee:a0:43:75:66:6f:d1:57:70:d3:2d:16:54:7b:48:
         9f:f0:30:16:80:93:b1:09:73:bc:4b:4f:ef:40:9a:5a:3e:3a:
         91:f6:9f:ab:10:46:fb:16:c2:d3:37:4d:76:fe:e0:2d:9f:d0:
         17:43:79:3c:6d:bb:56:c5:c1:a3:18:9f:c1:d5:23:1a:56:ee:
         fb:0f:bc:13:1d:56:68:0f:25:eb:b5:d5:8e:2e:9b:df:2a:76:
         98:ad:cf:f5:b4:43:7b:1b:8c:9a:8f:05:98:b7:31:29:f0:87:
         5b:db:df:c8:d6:eb:9b:09:f1:ba:0a:bd:ae:fa:2f:16:f6:83:
         3d:b3:87:aa:9c:e3:78:57:7a:15:3c:65:f6:dc:09:c5:58:72:
         c7:4f:62:1e:5d:52:63:c8:8c:2a:22:5e:e1:51:c8:97:76:bb:
         21:f3:13:4d:02:5f:fa:ec:6a:7b:c4:9a:da:97:c0:e2:fb:dd:
         1d:8b:07:eb
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUO5qyJY/wQajxHifwCTGs0Rb9c7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxMzM4RTkwQzlDRDM3REVEODVCNDQwOUZDQUI3QkY0
RjVGRTNBQTAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzM3RjdGQTAwM0FGOUE4QTA2
MjRENDM4ODQ0RDVENjA2Q0M2OTA0NzgzMjYxMzEwMDA4MDExNzBFRjhCRkJDRDI5
QUE5MUQ4M0NFQThEMjU5QkY2Nzc0QkMzMThCRTFGQjhGNkM0MjgzRjQ2N0NFODE4
NEM2ODk0MTE5OEY1QjU0OThBMTJGNjk3MDUyNDc1QjZCNzg1N0VCRUY3MTE1QzRE
MTZDRDkyRkMyMUIyQzIyMjM5NTlEMDUxRjg4MjNGOUVBRTA1OEFCNUVCRjQ2NTM0
RUMyRDkzMUE1RDU5M0VBREM5RUM0MDhBRjZGNzg1QTAyNUM2REY2RjNBMEVEMTJF
NEE2NDNGRUEyNkQ1NTU5NzFDQUJCRUUxRjcwMTI0OTk1NjZEODkwRkFDNEM5NDMw
NTI0MTMxNUY2NEU5RjZFQUVGQzdDNjlGQ0QyNjE3NzhEMzg0RTY5NjQ0M0I5RDBB
QzgzQUQ3NjI4RTk3QjYyOUE1RjI2NjQzOTMxQzcxQkNGOTBFOTM0QkY5OEQ2MDE3
RkYzQkZFNDNGQkJBREZBOEVCM0RBMEIzOUIxMjE0MzM3NUMyRkJCMkIyMTYwRkMz
MkE1QkQ3MDQ2NTk1OTUwQUM5NUY1ODRDRTk1OTA0MTIzMDZDQTU0Q0IwOEI4NzFE
M0VBNkM0NjExMDdEMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw39/oAOvmooGJNQ4hE1dYGzGkEeDJhMQAIARcO+L+80pqpHYPOqN
JZv2d0vDGL4fuPbEKD9GfOgYTGiUEZj1tUmKEvaXBSR1treFfr73EVxNFs2S/CGy
wiI5WdBR+II/nq4FirXr9GU07C2TGl1ZPq3J7ECK9veFoCXG3286DtEuSmQ/6ibV
VZccq77h9wEkmVZtiQ+sTJQwUkExX2Tp9urvx8afzSYXeNOE5pZEO50KyDrXYo6X
timl8mZDkxxxvPkOk0v5jWAX/zv+Q/u636jrPaCzmxIUM3XC+7KyFg/DKlvXBGWV
lQrJX1hM6VkEEjBspUywi4cdPqbEYRB9AQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FG/CtiM1yu79xhMmbwAQSchOL9rhMB8GA1UdIwQYMBaAFCITOOkMnNN97YW0QJ/K
t79PX+OqMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdOeEg2blNCSEdNSnpZ
emQxa05lWDcxb2UzR0h3dE04WjhmSkpWUTZBVldCLzEvMjIxMzM4RTkwQzlDRDM3
REVEODVCNDQwOUZDQUI3QkY0RjVGRTNBQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMjEzMzhFOTBDOUNEMzdERUQ4NUI0NDA5RkNBQjdCRjRGNUZF
M0FBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TnhINm5TQkhHTUp6WXpkMWtO
ZVg3MW9lM0dId3RNOFo4ZkpKVlE2QVZXQi8xLzMyMzAzMDJlMzczMTJlMzYzNDJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMxMzkzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAchH
QDANBgkqhkiG9w0BAQsFAAOCAQEAbFOIn85BW1CIi9F1W2TyWywqkzKTOvzOaYWc
P/ajjvPIpWjLcVqWBlyPhXW7c7TOuK64gneVSHeJ95JeimtFh2SpTOeG7MDjko6Y
7qBDdWZv0Vdw0y0WVHtIn/AwFoCTsQlzvEtP70CaWj46kfafqxBG+xbC0zdNdv7g
LZ/QF0N5PG27VsXBoxifwdUjGlbu+w+8Ex1WaA8l67XVji6b3yp2mK3P9bRDexuM
mo8FmLcxKfCHW9vfyNbrmwnxugq9rvovFvaDPbOHqpzjeFd6FTxl9twJxVhyx09i
Hl1SY8iMKiJe4VHIl3a7IfMTTQJf+uxqe8Sa2pfA4vvdHYsH6w==
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:19 2026 by rpki-client