Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
File:                     3230312e37372e38342e302f32322d3234203d3e203238363436.roa (raw, json)
Hash identifier:          RGBxdps0Ql+B1/Bb6mwypEYCaPqClBJMZ12W4XHellc=
Subject key identifier:   8F:E4:09:33:ED:47:83:80:BE:4A:4A:19:17:4E:FF:3A:A6:55:D7:9C
Certificate issuer:       /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial:       717475965B3292C7B3EAE76089B7AD2EDD3D64D8
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa
Signing time:             Thu 05 Feb 2026 12:19:23 +0000
ROA not before:           Thu 05 Feb 2026 12:14:23 +0000
ROA not after:            Thu 04 Feb 2027 12:19:23 +0000
asID:                     28646
IP address blocks:        201.77.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
                          rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:74:75:96:5b:32:92:c7:b3:ea:e7:60:89:b7:ad:2e:dd:3d:64:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
        Validity
            Not Before: Feb  5 12:14:23 2026 GMT
            Not After : Feb  4 12:19:23 2027 GMT
        Subject: CN=8FE40933ED478380BE4A4A19174EFF3AA655D79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:37:22:fb:d4:c8:26:ad:b6:34:b3:90:96:80:
                    5f:9d:d5:c2:c3:ba:5e:ab:a1:01:de:b3:2d:3f:ce:
                    2d:09:91:84:b5:21:94:50:24:7a:54:44:ea:58:f6:
                    73:a9:fd:a0:e0:d3:e2:4c:4f:1c:f5:c9:22:6a:e3:
                    6e:35:b7:3a:78:f8:de:01:b2:a7:9d:79:e5:09:c9:
                    08:12:6b:fd:ec:24:6b:99:39:04:15:d0:1f:e3:88:
                    4a:45:92:34:64:8f:ef:d8:fc:53:4b:37:55:3a:f5:
                    84:ce:f3:9d:ae:52:e7:bd:d4:00:cd:5a:cb:54:ac:
                    59:e4:be:28:4f:5f:00:ab:11:95:14:03:ef:c4:68:
                    14:47:eb:2e:39:a9:91:db:86:e7:18:06:0c:af:90:
                    b7:f5:19:76:78:df:fb:59:b6:97:54:e8:8e:be:bb:
                    c2:ed:61:4e:e6:c1:db:ad:fe:68:b5:ff:cd:26:94:
                    d4:d5:6a:07:7b:20:57:a5:cc:71:96:85:9a:fd:0e:
                    60:3f:25:3d:76:1e:2f:28:79:7c:2d:f6:a4:99:d2:
                    66:30:45:31:37:b0:d3:76:73:93:d6:97:e8:f8:d7:
                    eb:25:48:f2:ca:a7:3c:67:4f:c5:70:76:4e:14:04:
                    85:a3:f8:50:f1:56:68:fc:9a:67:ca:b2:18:bd:d9:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:09:33:ED:47:83:80:BE:4A:4A:19:17:4E:FF:3A:A6:55:D7:9C
            X509v3 Authority Key Identifier:
                keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/3230312e37372e38342e302f32322d3234203d3e203238363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:94:b1:76:ae:40:97:5b:aa:65:a3:2a:6f:ce:27:1c:f8:9d:
         21:1e:09:76:c1:a9:18:62:50:64:45:ca:b3:15:58:fb:be:ee:
         10:cd:61:fa:cc:30:57:8e:10:3c:93:69:5b:f9:3c:f1:5e:11:
         30:4c:7a:36:c7:2a:ba:0f:14:5f:b7:ed:2f:b3:17:fa:dd:1a:
         1b:1b:9b:97:ca:45:4f:e9:e6:12:51:c0:81:68:81:ea:7c:95:
         fb:77:82:65:89:dc:82:1f:77:fd:f8:d3:0d:00:58:50:16:5f:
         3d:ba:6e:8c:18:d8:0c:af:54:06:98:98:9d:85:7e:06:06:5f:
         3c:cc:b5:0a:50:e3:b3:10:dd:24:4e:49:a3:0e:1d:76:70:d7:
         e1:24:ff:0c:ff:88:44:d2:11:09:b8:9d:b4:26:47:13:fd:75:
         2d:9d:57:bc:18:ab:3d:40:5a:f3:c7:1a:25:02:56:7f:58:24:
         fe:0c:b4:14:0e:64:44:fc:16:bf:f1:6d:00:ec:80:d9:7f:cd:
         c8:04:59:ca:2b:48:1a:fe:2e:78:4c:60:31:98:ce:e9:70:9e:
         fa:25:64:a8:4a:e9:47:0c:2d:2a:df:35:7c:4d:ea:73:b5:b4:
         32:6c:13:64:c7:ba:37:b9:48:df:b3:0d:0b:0c:9e:be:91:e2:
         16:29:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:21 2026 by rpki-client