Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa
File:                     3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          Bcz0G+vodPnDJEu8b4EeOnDIIRSE/L/dJM1Me61FDX0=
Subject key identifier:   C2:2F:73:33:6A:23:FA:7F:F1:09:3C:55:E8:6B:5E:28:58:E5:B8:8C
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       4030C215E3ADD816B4EA0DD7F2F7AAC3B54031BA
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa
Signing time:             Wed 04 Feb 2026 12:15:01 +0000
ROA not before:           Wed 04 Feb 2026 12:10:01 +0000
ROA not after:            Wed 03 Feb 2027 12:15:01 +0000
asID:                     263665
IP address blocks:        168.196.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:30:c2:15:e3:ad:d8:16:b4:ea:0d:d7:f2:f7:aa:c3:b5:40:31:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Feb  4 12:10:01 2026 GMT
            Not After : Feb  3 12:15:01 2027 GMT
        Subject: CN=C22F73336A23FA7FF1093C55E86B5E2858E5B88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:20:3f:c2:42:bf:0a:ac:de:e7:77:cc:0d:
                    dc:a4:34:f8:41:49:94:5a:59:7a:0b:00:a3:8f:c7:
                    06:2a:fa:b1:b9:0f:ab:e1:19:d0:e2:99:ac:a1:02:
                    4f:9c:36:10:6d:a3:f8:f6:eb:c7:04:b6:9c:a6:cd:
                    35:17:86:05:91:45:ed:4c:11:3d:c7:73:58:79:e8:
                    07:aa:20:0c:5c:55:2a:6f:c5:0b:08:bf:8a:ba:24:
                    9d:cb:3f:f0:07:f2:62:15:ac:66:43:f5:4b:c3:ad:
                    8c:9d:f2:4d:8b:ec:71:37:3d:b6:a8:a8:de:e5:da:
                    a2:88:da:c2:62:5b:f6:57:f9:e9:6f:5c:06:46:a0:
                    77:b1:d4:61:91:d7:b1:86:7a:46:a8:60:17:8c:bf:
                    eb:96:64:b7:8e:1b:62:2a:23:a4:74:d9:35:dc:d1:
                    8d:72:93:05:86:f0:f3:fc:35:91:ad:4f:ce:4a:1a:
                    79:5b:34:6c:30:cb:2d:d9:4e:60:c6:90:e1:96:b3:
                    dc:7e:9c:0e:b1:60:93:0f:46:68:46:42:02:4f:5d:
                    d4:11:8e:81:f6:e7:f1:36:17:b3:4f:04:cb:a4:ce:
                    be:e8:9e:a6:19:d6:38:7b:83:34:11:d5:11:cf:ae:
                    b4:81:5f:b7:73:55:9f:c1:80:71:0a:7d:24:ad:41:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2F:73:33:6A:23:FA:7F:F1:09:3C:55:E8:6B:5E:28:58:E5:B8:8C
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3136382e3139362e32302e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:ed:0e:39:ea:da:84:5a:09:45:df:20:f3:fc:33:49:4a:
         38:2f:6f:e9:59:d4:ec:50:26:c7:6f:1a:55:8c:b4:df:5c:3b:
         a8:f1:f0:e4:af:24:60:fa:74:08:99:9c:6d:5c:d4:f8:00:37:
         7a:f9:30:ca:55:4a:05:94:5e:fc:70:a2:59:e8:71:b6:8f:f4:
         d6:b3:25:da:0c:21:e2:7e:79:50:0a:e1:b4:b9:db:63:2c:cc:
         57:0b:87:53:33:1a:a0:2d:63:b7:ad:de:c2:5b:58:be:56:de:
         5c:f0:b1:b0:33:2b:6d:8a:67:b7:91:76:aa:67:e9:06:ec:33:
         87:a6:23:a7:89:18:55:4c:2a:78:11:a5:ef:cb:59:e0:a2:af:
         3e:d7:dd:6e:c9:48:29:4e:55:08:f8:fc:5d:59:04:b2:f2:0e:
         11:9f:1f:9d:88:ac:c2:3d:eb:f3:b3:54:ee:01:61:08:d8:18:
         9b:3a:4c:0a:93:3b:7f:c3:5c:36:56:46:74:7d:14:fe:07:bc:
         50:4a:45:7a:af:2f:e6:3b:40:a9:9b:2f:c2:8b:ef:51:9e:57:
         67:fd:02:70:a8:4b:fa:77:1d:8f:c6:ff:1f:6d:fe:48:3c:36:
         27:6a:ab:57:4a:78:06:3e:b8:ad:3b:17:ce:17:3b:8c:d8:4a:
         e0:f7:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:22:41 2026 by rpki-client