Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130362e302f32332d3233203d3e20323632373932.roa
File:                     3230312e37362e3130362e302f32332d3233203d3e20323632373932.roa (raw, json)
Hash identifier:          mv8OU3qvUXZTtcpqpviailaLvzAkqv5YMO7bA10fxRE=
Subject key identifier:   5E:5C:18:C1:3A:E1:FC:11:61:1E:15:B0:01:C8:27:EA:A3:26:D9:22
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       62D20CCFA953788A2203828FEE0FC4FC56CFCF99
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130362e302f32332d3233203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:46 +0000
ROA not before:           Fri 06 Feb 2026 21:43:46 +0000
ROA not after:            Fri 05 Feb 2027 21:48:46 +0000
asID:                     262792
IP address blocks:        201.76.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d2:0c:cf:a9:53:78:8a:22:03:82:8f:ee:0f:c4:fc:56:cf:cf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:46 2026 GMT
            Not After : Feb  5 21:48:46 2027 GMT
        Subject: CN=5E5C18C13AE1FC11611E15B001C827EAA326D922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:7d:de:3d:56:3c:de:51:8e:37:26:3e:ba:
                    d7:86:87:a2:c6:f9:c8:64:f1:af:d0:bc:f3:1f:08:
                    23:2b:f8:a7:b9:e1:48:d2:27:3c:54:c8:05:43:72:
                    e6:6c:43:67:4a:de:6a:4a:59:70:8b:c5:ee:b7:fe:
                    66:2e:69:ab:4f:cb:5a:dd:a5:52:a5:db:d2:06:43:
                    5b:0f:64:13:44:a8:27:1b:de:bc:fd:3f:39:fe:a5:
                    61:8f:a7:56:aa:2c:ad:82:bd:70:78:c6:44:cb:11:
                    52:f5:ae:24:ff:b3:91:2d:88:95:e0:d0:af:5e:08:
                    75:5e:88:7f:40:35:dd:f9:70:82:db:b8:ed:b6:eb:
                    e5:29:36:f7:e7:c3:95:4b:e3:2e:1e:31:88:21:39:
                    2c:e9:43:bb:9c:8f:40:53:7e:98:9a:ce:fb:4a:42:
                    bb:11:77:bb:b6:c4:2d:c3:a4:ae:ea:d1:3f:54:ee:
                    e2:7a:6c:24:63:ae:66:e7:31:38:d7:9f:1f:06:c2:
                    e0:9c:6d:a7:7b:52:07:70:78:bf:ef:df:59:06:c9:
                    85:fe:f6:49:da:d6:aa:db:7f:fb:36:f6:21:8d:4f:
                    a4:61:60:05:51:0d:70:39:3e:54:2b:21:b9:0b:81:
                    0f:be:66:5d:64:e8:74:da:cd:1b:5b:1a:c5:62:4e:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5C:18:C1:3A:E1:FC:11:61:1E:15:B0:01:C8:27:EA:A3:26:D9:22
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130362e302f32332d3233203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:d2:c2:2b:4a:ca:24:5b:67:05:d3:f7:e5:3f:73:28:87:
         b5:38:d5:5a:f7:30:b3:cd:25:5f:1f:24:69:f3:94:2d:d6:85:
         f9:e3:20:12:f0:c4:91:ce:be:93:e7:ed:56:4a:2d:d6:c7:8d:
         30:4e:34:35:af:a9:9e:6f:e1:b7:29:52:c5:63:78:4e:14:97:
         48:66:44:fd:18:0e:d5:f0:43:7d:ad:ae:9d:1c:ed:ef:6d:b1:
         70:24:88:b7:ec:58:f4:c1:76:64:07:47:43:12:04:fd:75:7c:
         70:8b:4c:4d:e5:5d:0f:0d:05:39:4d:3c:98:99:5a:ef:19:7a:
         ed:9b:de:a6:da:4f:0c:d8:fb:95:d1:cf:dd:49:95:3a:80:aa:
         46:0c:18:f9:5d:26:d6:aa:35:f0:47:11:a6:92:15:0a:76:a7:
         b2:e6:13:54:25:b2:df:d3:cd:d3:92:20:81:31:29:92:11:d2:
         d1:38:5e:bd:8c:25:6b:59:b1:92:be:3d:e2:70:62:87:42:dd:
         0c:38:14:f2:5b:92:b4:62:a8:bb:22:49:9e:e3:eb:6c:47:cf:
         51:6e:3c:07:d3:8b:ea:98:b7:99:6d:9a:9a:b1:58:09:26:96:
         fb:80:57:5c:ec:ae:1d:b0:77:7b:fb:c9:af:b4:d5:10:13:c5:
         c2:b0:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:11 2026 by rpki-client