Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31382e36342e302f32302d3230203d3e2032373136.roa
File:                     3230302e31382e36342e302f32302d3230203d3e2032373136.roa (raw, json)
Hash identifier:          k1bFVla+PELQCM1pFT1Lbhy0NU4g9vaj+ip010hDTPg=
Subject key identifier:   9C:8D:E9:3F:30:58:DB:33:D4:0F:6D:FE:E0:0B:DA:84:E1:1D:E0:AE
Certificate issuer:       /CN=4940EEB21B4128216F8FFB3B0A997946697632F5
Certificate serial:       0ADFA06C3E3EB1D101B8C9D7B49FD1BB7B361581
Authority key identifier: 49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31382e36342e302f32302d3230203d3e2032373136.roa
Signing time:             Tue 20 Jan 2026 13:43:30 +0000
ROA not before:           Tue 20 Jan 2026 13:38:30 +0000
ROA not after:            Tue 19 Jan 2027 13:43:30 +0000
asID:                     2716
IP address blocks:        200.18.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:df:a0:6c:3e:3e:b1:d1:01:b8:c9:d7:b4:9f:d1:bb:7b:36:15:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940EEB21B4128216F8FFB3B0A997946697632F5
        Validity
            Not Before: Jan 20 13:38:30 2026 GMT
            Not After : Jan 19 13:43:30 2027 GMT
        Subject: CN=9C8DE93F3058DB33D40F6DFEE00BDA84E11DE0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:49:18:a2:02:29:da:f4:35:9a:22:93:ae:
                    3a:04:e3:4c:47:e6:cc:0d:fd:2b:09:b2:7f:0c:ac:
                    bc:36:38:3b:67:bd:39:08:9d:71:95:3c:eb:a6:ea:
                    f0:c9:3d:87:7d:75:b8:db:5f:8e:d6:e3:be:c1:73:
                    cc:fd:50:d6:dc:a0:ca:ee:3c:a0:c7:8c:68:17:04:
                    de:03:df:8e:c1:dd:bd:c0:21:2b:3e:39:11:09:0b:
                    55:d7:7f:ae:7a:99:45:04:fb:ef:86:88:53:b9:2e:
                    aa:d3:a6:4e:3a:95:ee:18:24:58:7e:bf:6a:0f:f3:
                    0d:87:f4:19:ea:f3:f7:9c:74:b5:e3:69:27:20:bd:
                    b0:70:4e:d9:b4:68:ec:6c:e8:01:9f:a3:be:85:11:
                    87:62:e9:db:04:23:67:86:ec:ba:73:f4:ff:41:fe:
                    46:e3:a9:30:51:d9:2b:f7:82:34:47:d9:9d:b6:03:
                    83:d4:cf:9b:7d:38:df:63:b9:e9:69:b3:49:75:d3:
                    1c:f0:86:a1:a8:2d:a3:f7:b2:81:8b:7c:b0:25:84:
                    3c:47:4c:7c:b1:ba:95:0f:5d:09:95:8e:1a:6d:f0:
                    27:c5:19:b5:62:9f:26:2d:b7:6e:56:84:ba:b9:66:
                    34:e7:ad:46:10:15:1e:ed:4b:4d:79:5e:36:fa:c7:
                    73:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:E9:3F:30:58:DB:33:D4:0F:6D:FE:E0:0B:DA:84:E1:1D:E0:AE
            X509v3 Authority Key Identifier:
                keyid:49:40:EE:B2:1B:41:28:21:6F:8F:FB:3B:0A:99:79:46:69:76:32:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/4940EEB21B4128216F8FFB3B0A997946697632F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4940EEB21B4128216F8FFB3B0A997946697632F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/0/3230302e31382e36342e302f32302d3230203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:84:6e:70:02:49:f9:da:a0:91:b2:6f:ad:91:18:25:23:ab:
         32:5c:e1:f0:00:12:7a:f5:f6:ba:47:54:91:9d:f9:c5:30:3b:
         0c:ac:53:a1:29:d6:b9:1e:57:82:57:28:2b:b1:d3:34:c7:3c:
         b5:53:de:91:18:76:cd:a2:62:84:3b:d9:c5:d1:d0:71:1b:33:
         da:a6:87:55:91:80:a4:a7:31:3d:4c:73:70:cd:a8:7b:f0:ad:
         83:05:98:f9:58:8c:5b:af:6a:ff:bc:54:11:23:51:3d:f6:a4:
         68:26:54:f7:7c:00:cd:d2:4d:c6:d3:3e:68:8d:a0:9d:99:59:
         81:70:e8:63:17:c1:41:64:a5:75:4d:22:98:fe:8b:27:6a:6c:
         45:a3:f0:d1:5e:8c:a0:ca:96:b7:de:5a:3e:35:b9:6a:ea:41:
         ef:68:8a:e0:cd:29:f4:fa:6c:69:47:59:37:3a:80:dc:2c:9c:
         49:d8:04:5c:c1:d7:2a:98:a5:2e:b4:d0:45:da:51:37:17:73:
         b1:cc:ab:24:36:d1:ae:0e:1a:c7:b2:a7:4c:c8:b5:a2:db:ea:
         6a:25:04:61:fc:3a:3c:72:40:a3:7e:c0:e8:cc:54:3b:fb:01:
         6f:bd:e4:45:5e:e9:b1:f6:e5:3f:ca:65:6b:b3:36:4f:17:51:
         a0:c8:99:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:45:05 2026 by rpki-client