Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36362e302f32332d3233203d3e20323636313931.roa
File:                     3230302e37312e36362e302f32332d3233203d3e20323636313931.roa (raw, json)
Hash identifier:          QMkatyPiNPQKLMszTkR2WUQnFQUs19PpGn9TV366HE0=
Subject key identifier:   53:96:ED:37:B8:73:AA:B0:68:84:AB:35:24:02:BF:E4:4C:53:BB:6A
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       163638E70963DA76EC3D2C6537D3F555A01F4C8E
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36362e302f32332d3233203d3e20323636313931.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     266191
IP address blocks:        200.71.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:38:e7:09:63:da:76:ec:3d:2c:65:37:d3:f5:55:a0:1f:4c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:73:a7:c4:74:6e:d0:11:10:3f:51:79:a9:
                    f6:d0:6a:96:6c:c2:9e:bd:b2:74:5c:4d:a3:6a:38:
                    b6:e3:83:4a:68:34:36:6d:96:88:9f:07:6e:b4:0c:
                    77:6b:47:9e:26:fc:b7:ad:72:1b:69:f5:e2:e2:35:
                    c0:cb:ff:60:47:9e:dc:10:ea:aa:d8:07:c1:35:bb:
                    30:7f:c4:a4:10:5a:f7:b4:fb:83:2a:d6:c6:d0:9c:
                    89:fd:62:f4:2c:3f:7f:d4:32:0b:b5:25:75:29:ce:
                    db:a2:d7:c6:82:fa:ba:d9:b8:27:a9:8d:bf:f1:69:
                    d2:82:aa:c6:f7:4d:01:ac:2b:82:ff:d1:14:87:04:
                    62:c0:91:ff:10:73:94:0f:e7:53:0e:9d:db:bd:36:
                    66:cd:2f:07:df:48:f9:e1:98:9c:61:97:a6:d9:d2:
                    16:9c:b0:ac:42:66:1d:03:d8:2d:c6:55:bf:0d:6b:
                    78:f2:bd:f0:60:3b:84:70:55:2a:f8:84:54:1b:80:
                    e1:a2:5f:43:da:c5:05:20:29:8d:1d:6e:af:df:bb:
                    4e:be:50:27:24:d9:0d:00:c9:8b:0b:a7:a1:c3:a5:
                    f5:bb:af:53:96:e5:6a:5a:1d:67:55:ba:df:60:d3:
                    5b:34:f0:d0:3a:56:8a:6c:17:b1:21:79:7f:0b:41:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:96:ED:37:B8:73:AA:B0:68:84:AB:35:24:02:BF:E4:4C:53:BB:6A
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/3230302e37312e36362e302f32332d3233203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:dc:7f:1f:de:9f:5d:35:56:05:60:0a:43:e0:74:d7:24:
         17:34:2f:4c:f4:dc:3e:50:f0:4a:a8:92:6c:61:a6:86:3c:bf:
         88:df:62:73:09:22:e7:80:83:d5:81:16:dd:f9:79:10:f7:5b:
         6f:eb:ec:31:ba:12:25:c0:c5:02:57:fb:58:bb:d9:5d:52:09:
         a9:06:4a:0c:99:28:7c:70:f0:b1:97:1e:13:8b:d4:cf:23:e2:
         0d:f8:b0:27:62:86:ec:f1:10:41:31:00:86:fc:2b:28:21:4e:
         e0:2b:cf:84:7d:83:b3:a2:34:5a:bc:40:aa:d1:1f:15:27:aa:
         c3:3b:14:56:26:c6:d9:c5:f0:da:8c:ca:87:2b:45:4e:0e:57:
         37:02:f0:51:6a:b0:6e:8e:87:a9:66:b3:72:d5:81:4c:8a:0a:
         fe:eb:fb:60:1d:d3:3b:ec:10:95:30:9b:f0:f7:b1:6f:6e:48:
         9d:c0:6d:9d:38:79:78:c5:77:8c:46:ce:8f:68:82:61:41:d5:
         03:35:53:b2:2f:3a:4a:08:bf:3e:b3:2c:a2:a3:09:eb:60:b7:
         ca:71:00:a7:85:44:d9:ca:20:65:31:a2:23:c7:fb:f4:75:1e:
         93:d9:ce:0f:3b:8f:65:40:49:4a:94:78:3b:f8:69:50:bb:fd:
         40:f7:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:34 2026 by rpki-client