Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa
File:                     3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa (raw, json)
Hash identifier:          oxPV597PnatA6a0wkDHYAYOUT90yGHftUH5qM2Qb36Y=
Subject key identifier:   9F:76:48:4C:A1:8E:E0:E3:7A:4F:1C:42:69:07:BE:BE:8C:46:64:EB
Certificate issuer:       /CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
Certificate serial:       6D11857AC66588442C5882B604F4A41E75307224
Authority key identifier: BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa
Signing time:             Sat 07 Feb 2026 23:14:59 +0000
ROA not before:           Sat 07 Feb 2026 23:09:59 +0000
ROA not after:            Sat 06 Feb 2027 23:14:59 +0000
asID:                     270293
IP address blocks:        201.71.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl
                          rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:85:7a:c6:65:88:44:2c:58:82:b6:04:f4:a4:1e:75:30:72:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
        Validity
            Not Before: Feb  7 23:09:59 2026 GMT
            Not After : Feb  6 23:14:59 2027 GMT
        Subject: CN=9F76484CA18EE0E37A4F1C426907BEBE8C4664EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8b:66:bb:f6:2f:b0:2d:a6:30:50:cc:9d:b3:
                    95:75:62:12:dd:f9:0e:64:48:fe:78:33:95:f3:53:
                    a5:74:eb:9e:dc:85:ef:31:0c:59:2e:d1:a9:27:28:
                    9b:06:81:c7:b7:c7:e8:cf:f4:e7:0b:4c:21:d6:e9:
                    86:d6:49:cb:78:d5:46:e8:bb:ff:5f:57:9d:56:3c:
                    24:63:f7:24:ef:40:d1:ac:04:fa:0b:ac:f5:6d:3e:
                    41:cd:55:40:a6:f4:cf:e4:b4:76:5a:55:b4:64:83:
                    99:69:c3:0c:13:0c:8d:92:c8:37:f8:93:ac:97:e0:
                    9b:61:ff:77:d6:9b:54:88:81:d6:f3:62:c3:09:fa:
                    81:09:06:80:77:3b:06:57:34:5a:0e:46:33:18:96:
                    11:af:bb:8c:94:1f:13:58:c4:2b:5f:9b:d7:15:a1:
                    bb:20:84:86:82:db:d8:86:43:77:89:38:14:5d:4e:
                    69:08:bc:3c:b2:b7:46:9d:5f:bc:26:11:07:4c:09:
                    1e:23:c4:1f:11:1d:0c:67:e9:33:f2:de:25:a1:af:
                    d4:17:50:cc:1b:4c:89:52:ce:b9:92:a0:de:88:96:
                    af:2b:b2:27:ac:20:e0:11:77:f7:c0:85:a1:e9:26:
                    4d:4a:20:fb:d8:e3:6c:d0:3b:6f:2d:6f:62:9a:dc:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:48:4C:A1:8E:E0:E3:7A:4F:1C:42:69:07:BE:BE:8C:46:64:EB
            X509v3 Authority Key Identifier:
                keyid:BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:54:8e:27:a0:c5:c9:3d:1e:b8:7e:5e:10:e4:b1:66:cb:94:
         13:83:2f:92:67:cf:1d:44:b5:b3:c4:40:d6:9f:12:f0:78:cf:
         49:51:86:10:a7:39:ed:eb:52:d8:cd:70:04:31:8e:cc:f6:35:
         a5:01:fe:bc:ca:35:f6:7b:6c:fb:3c:e0:97:43:99:f0:c7:98:
         e9:7b:ef:e1:7f:5c:f9:94:ec:b8:5a:6f:df:5d:0d:b5:58:b8:
         8e:75:83:37:8b:41:1f:47:f9:55:80:14:21:11:5c:18:2f:d9:
         0e:ab:6a:1f:bd:32:19:59:ae:15:10:c5:9f:20:a8:30:c4:89:
         32:13:20:b7:34:29:86:71:3d:74:b0:17:7b:20:27:07:11:6c:
         e6:ec:17:64:7d:8c:ff:13:2e:2f:ca:d0:8f:d1:7b:16:66:63:
         44:e9:6e:5d:5f:b5:8e:cc:d3:a6:54:a9:bd:6e:e1:a8:a9:61:
         e4:d4:b6:0a:a5:8c:3f:7d:81:5a:c5:d0:49:68:42:5a:0f:27:
         9e:76:4f:c5:6d:29:c8:39:c8:84:41:55:a4:b0:9e:6b:8a:e9:
         fe:94:81:40:97:97:fa:30:5b:9a:38:44:84:e2:9b:ed:f4:af:
         50:ba:ca:88:04:17:f7:7a:0e:6f:8a:52:e6:26:3f:e5:a9:9e:
         5c:e6:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:54 2026 by rpki-client