Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa
File:                     3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa (raw, json)
Hash identifier:          6blFXnoy1PNBFQywBP/G0tBdR3aSpjxfeYohWTxuyMw=
Subject key identifier:   BB:2E:7A:BE:6E:7F:05:A5:53:92:DE:81:8D:56:1C:E2:B3:17:CC:2A
Certificate issuer:       /CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
Certificate serial:       5DA85DC99071660A26F49F18689089DAD4E9E1A1
Authority key identifier: 0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa
Signing time:             Thu 05 Feb 2026 11:37:04 +0000
ROA not before:           Thu 05 Feb 2026 11:32:04 +0000
ROA not after:            Thu 04 Feb 2027 11:37:04 +0000
asID:                     271600
IP address blocks:        200.24.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.crl
                          rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a8:5d:c9:90:71:66:0a:26:f4:9f:18:68:90:89:da:d4:e9:e1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7D5851E99113F3832ED12CBE5DB4437990968F
        Validity
            Not Before: Feb  5 11:32:04 2026 GMT
            Not After : Feb  4 11:37:04 2027 GMT
        Subject: CN=BB2E7ABE6E7F05A55392DE818D561CE2B317CC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:50:cc:52:99:15:33:ea:df:1a:f0:40:e8:
                    76:dd:5d:36:43:19:dc:2e:e2:98:f3:24:e4:ec:12:
                    17:07:b5:a2:27:98:e5:49:37:94:0c:15:90:8a:84:
                    d0:68:46:88:36:ea:78:3a:95:a9:cf:1d:51:8a:20:
                    f5:69:78:08:95:f0:6b:df:37:d7:14:88:f2:11:40:
                    ed:06:ba:6b:c1:8c:e3:38:4f:60:d9:47:05:65:a3:
                    ba:b0:b7:f5:fb:d9:2d:d9:12:4a:5f:00:54:71:cb:
                    02:22:c4:a0:c5:a2:5b:a7:23:ba:32:d3:46:53:d6:
                    63:06:d8:b4:4a:bb:c3:84:d9:24:25:47:26:2b:02:
                    a6:51:b7:49:94:10:e1:65:2c:40:0d:fa:9b:7a:a7:
                    7f:b1:4c:8b:f9:1c:e8:d5:3d:c0:5d:df:da:f0:cc:
                    36:99:ea:b6:eb:94:04:39:b5:5c:12:ab:43:c2:cb:
                    09:47:ad:26:d1:a8:ff:3d:c9:8c:b3:fb:b7:66:ef:
                    ce:ba:05:ca:32:c7:e4:13:b5:1e:d8:47:aa:9e:13:
                    5b:fd:2c:8b:c5:bc:80:4a:81:4d:74:63:65:79:e8:
                    bb:d0:2c:95:a0:bd:b3:50:c0:5f:e6:ae:11:13:19:
                    a2:17:37:69:24:45:ce:36:9f:6f:d9:44:53:ce:02:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:7A:BE:6E:7F:05:A5:53:92:DE:81:8D:56:1C:E2:B3:17:CC:2A
            X509v3 Authority Key Identifier:
                keyid:0B:7D:58:51:E9:91:13:F3:83:2E:D1:2C:BE:5D:B4:43:79:90:96:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7D5851E99113F3832ED12CBE5DB4437990968F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dGkkyBprDPFgs6zzv3a6wVAssBKUmqX57byAR3DygK/1/3230302e32342e3132302e302f32322d3332203d3e20323731363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:03:86:15:ff:b1:cf:68:a9:f0:c9:ef:35:9b:4e:aa:ee:
         81:7d:de:b4:6c:de:f8:28:64:5d:f8:46:03:12:09:36:ab:b9:
         69:3a:e8:9d:a8:26:e6:8d:05:34:0f:60:7f:96:33:55:01:90:
         b3:ae:37:c0:18:98:08:80:d9:5c:64:c6:20:2b:88:ae:57:da:
         56:5b:67:4a:95:93:dd:2e:62:d7:c3:be:32:79:ac:12:23:57:
         35:b8:f5:cc:04:62:07:c4:3a:5e:c1:c5:3d:32:63:48:48:3a:
         cc:ac:c9:20:55:49:3c:cc:fc:66:1e:22:69:35:7b:0c:a3:ca:
         af:21:53:47:b7:e3:2e:7c:f5:81:63:ec:4b:bd:0d:20:be:dd:
         ac:1c:3f:56:98:33:06:4e:4f:b7:09:26:28:32:d9:3e:e9:a0:
         c1:44:90:d9:01:cb:af:6f:b3:17:38:59:34:f8:66:8b:d7:02:
         aa:40:53:36:d1:80:98:75:1e:82:28:c9:35:44:e7:da:61:9c:
         bf:2b:45:ae:16:54:01:06:4b:1d:73:76:55:8b:75:b7:9d:b1:
         70:78:85:c4:8e:3c:7c:04:d1:e6:e9:1e:aa:4d:45:52:a0:bc:
         93:a5:62:f4:db:a8:e1:a0:dd:c6:b4:d7:60:ec:be:65:f2:2c:
         51:ae:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:28 2026 by rpki-client