Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35322e302f32332d3233203d3e20323636363238.roa
File:                     3132382e3230312e35322e302f32332d3233203d3e20323636363238.roa (raw, json)
Hash identifier:          hXCnKiucQOxmaBXrN2Pm5wbo7wYTfDKUQGHDep7tUAU=
Subject key identifier:   0F:48:90:03:DA:1D:3F:40:72:2A:CC:C8:2E:14:C7:45:42:37:EA:98
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       71C74985F888299D7510F1687171BC9C6E5D9ABB
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35322e302f32332d3233203d3e20323636363238.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     266628
IP address blocks:        128.201.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c7:49:85:f8:88:29:9d:75:10:f1:68:71:71:bc:9c:6e:5d:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=0F489003DA1D3F40722ACCC82E14C7454237EA98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:23:f3:e9:bb:6c:39:1a:23:68:53:b3:0e:c1:
                    4f:ca:de:5c:fe:60:5a:10:6f:cf:b1:94:89:5c:7e:
                    12:8d:a8:c3:5a:d9:f2:c4:ac:4e:76:7f:3e:79:72:
                    37:56:e1:89:60:7f:5d:ba:a0:1a:7e:f6:ae:cd:67:
                    be:3f:be:90:e8:e0:f1:4f:73:b5:c8:c9:14:d8:c6:
                    79:41:3b:34:34:11:4d:e3:2e:f0:85:fe:ec:b7:f2:
                    db:98:73:0f:eb:67:3d:d1:7a:0d:90:5c:54:4c:cc:
                    91:8a:b9:f2:4e:d0:0e:1c:9d:a3:2a:0d:fd:ac:a5:
                    73:7a:db:0f:d5:df:76:19:51:09:7f:c9:3d:72:77:
                    0c:3c:13:86:7c:f8:0f:45:a2:97:31:58:89:03:e9:
                    2e:75:56:90:30:c7:77:7e:0c:b5:22:d0:a8:fd:51:
                    12:23:e2:da:dd:42:e2:95:d6:7b:9a:c1:1f:f9:f2:
                    ca:9a:66:eb:69:a7:d5:65:be:fe:c9:c4:bb:81:72:
                    73:b5:b6:52:07:0a:b6:6d:4e:00:bc:9c:07:13:57:
                    14:88:d8:0e:c5:e2:38:e0:bd:09:ca:7b:02:2c:52:
                    79:79:fe:88:f2:29:54:b6:8f:08:74:01:b4:13:93:
                    5d:51:8c:d0:34:b8:d4:e9:b3:3e:8e:2e:22:d7:0b:
                    51:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:48:90:03:DA:1D:3F:40:72:2A:CC:C8:2E:14:C7:45:42:37:EA:98
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35322e302f32332d3233203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:80:f7:ca:40:1f:80:28:66:d1:1f:c2:50:2d:e3:41:d3:9b:
         97:a9:0a:a3:47:6c:9d:a9:8c:c7:9f:16:96:b8:52:77:9e:4b:
         cb:23:62:05:12:6f:f8:db:4d:e2:c3:15:20:92:0c:3e:75:4b:
         99:2d:a8:48:b2:42:e6:3d:39:0a:94:c2:4b:0b:79:e4:3a:75:
         d6:ef:5a:7c:37:d6:51:69:2e:28:05:5f:87:c2:c7:84:ff:62:
         0d:a6:04:35:c2:86:91:1f:b0:8d:25:77:92:99:6f:1b:c7:e7:
         f6:f5:81:c4:e3:18:18:f4:52:46:f0:50:d6:2a:a2:41:2a:ab:
         0f:a3:82:d7:c5:c0:b3:0e:f5:ec:a2:37:29:1f:df:1d:dc:9f:
         be:8d:ce:34:9c:cb:be:8b:2b:ba:2e:68:55:73:68:af:b8:8b:
         a2:33:35:0e:ca:99:7a:40:fc:43:1a:01:a9:f0:ec:99:ed:5a:
         99:dd:f4:30:11:d7:fc:0b:24:8d:f7:db:53:f2:d9:5d:d0:3d:
         24:c9:07:e8:c8:4e:01:33:19:73:4c:fc:44:65:9f:aa:60:8f:
         32:74:d9:a5:b0:4d:1d:9b:70:36:c4:18:94:f8:07:11:4b:90:
         d7:67:ed:f6:d0:ea:5e:3f:5d:3d:14:98:c3:1b:ef:f0:81:1b:
         79:ac:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:58 2026 by rpki-client