Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130382e302f32342d3234203d3e20323632373932.roa
File:                     3230312e37362e3130382e302f32342d3234203d3e20323632373932.roa (raw, json)
Hash identifier:          ZKNDIcPIUya84jTHsqvJVCmilL+xJeoXRQLBf1zp+eo=
Subject key identifier:   7E:2E:78:17:F3:CA:4E:40:96:DB:48:AC:94:B9:57:54:35:DF:F1:B3
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       72F22A3DA464BC32323BE631EC4DE18EBBDFF593
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130382e302f32342d3234203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f2:2a:3d:a4:64:bc:32:32:3b:e6:31:ec:4d:e1:8e:bb:df:f5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=7E2E7817F3CA4E4096DB48AC94B9575435DFF1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:06:40:67:6b:a1:a0:6c:fa:38:0f:52:3c:
                    eb:9a:a2:5d:50:0f:89:10:24:b4:50:2c:49:00:29:
                    cf:c4:69:bd:68:f4:75:e6:c6:01:0f:26:25:5b:af:
                    c9:d4:8e:af:c1:66:1a:7b:19:76:bf:f0:b1:6f:bb:
                    a9:ee:f6:e9:b9:b7:c7:3c:84:65:45:47:6f:84:61:
                    2f:8f:6a:03:1e:23:3c:4c:aa:15:30:a8:6a:76:47:
                    1a:06:72:ec:78:c7:6d:6a:a5:78:ed:4d:a8:ce:7a:
                    bc:49:8a:e2:3b:b1:dd:13:1c:1b:83:67:a0:84:7e:
                    4c:10:e8:d8:ce:44:d6:03:1e:13:94:6e:11:36:9b:
                    e6:d1:9e:d0:55:6a:f5:ce:bb:97:d8:26:53:82:2b:
                    fd:f8:93:cd:5c:25:d7:0a:2b:35:95:fd:90:01:19:
                    51:b7:63:eb:2a:5f:d2:3a:ab:dc:a1:e2:0b:75:65:
                    63:ba:d9:52:10:a1:f2:3c:5f:e7:74:39:c4:0f:dd:
                    e2:06:cf:23:76:27:d4:05:e7:40:2c:27:d4:22:3e:
                    ba:ce:b7:86:8d:3d:89:5f:e4:47:36:59:cb:d9:5e:
                    46:f9:ba:e2:c7:1f:97:51:99:ba:61:d6:d6:ae:3b:
                    38:71:bf:53:b2:29:0d:e8:2c:a5:4a:55:fd:c4:cc:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:78:17:F3:CA:4E:40:96:DB:48:AC:94:B9:57:54:35:DF:F1:B3
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130382e302f32342d3234203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:e9:c2:21:7f:ec:84:8d:d6:31:34:3e:d2:f8:52:1c:84:
         fe:d0:93:80:3a:3c:42:0a:92:f2:af:05:80:cc:0c:f3:e1:c2:
         b3:62:a5:a0:97:42:d8:af:7a:3a:8d:a5:67:5a:ed:89:f1:5a:
         4d:2a:c9:66:c8:ca:26:e1:83:45:be:39:15:8e:44:be:06:13:
         4a:ab:76:6f:df:1f:ca:5d:20:d3:14:57:23:5a:0a:39:59:c1:
         aa:61:7e:36:14:1b:a7:f0:bd:6d:70:75:f0:a5:56:42:16:98:
         7a:28:33:3d:37:92:c6:4f:81:36:33:01:56:cf:c7:1a:31:ea:
         37:1d:a0:e7:45:e6:46:b8:f9:ca:02:e3:14:b7:c6:4b:7c:ac:
         f5:95:46:a2:f4:43:c8:b3:3a:9d:91:9f:14:11:4e:e7:f2:7a:
         35:d7:64:8d:3c:d1:a4:72:cd:7b:51:fb:e1:4f:05:d7:d4:53:
         2b:15:c1:b1:0a:8b:f4:7f:e1:f1:1a:bd:55:23:99:73:d4:d3:
         e3:75:c9:49:34:67:f0:57:16:e4:10:3b:b4:f1:23:b6:9b:80:
         a5:57:53:bd:c4:1c:0a:db:8f:54:73:d8:5c:66:14:7e:7f:52:
         ef:c9:09:df:e2:47:e1:9e:af:b4:7e:17:e8:6b:0b:f0:df:04:
         29:63:82:74
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcvIqPaRkvDIyO+Yx7E3hjrvf9ZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNjAyMDYyMTQzNDVaFw0yNzAyMDUyMTQ4NDVaMDMxMTAvBgNV
BAMTKDdFMkU3ODE3RjNDQTRFNDA5NkRCNDhBQzk0Qjk1NzU0MzVERkYxQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoRAZAZ2uhoGz6OA9SPOuaol1Q
D4kQJLRQLEkAKc/Eab1o9HXmxgEPJiVbr8nUjq/BZhp7GXa/8LFvu6nu9um5t8c8
hGVFR2+EYS+PagMeIzxMqhUwqGp2RxoGcux4x21qpXjtTajOerxJiuI7sd0THBuD
Z6CEfkwQ6NjORNYDHhOUbhE2m+bRntBVavXOu5fYJlOCK/34k81cJdcKKzWV/ZAB
GVG3Y+sqX9I6q9yh4gt1ZWO62VIQofI8X+d0OcQP3eIGzyN2J9QF50AsJ9QiPrrO
t4aNPYlf5Ec2WcvZXkb5uuLHH5dRmbph1tauOzhxv1OyKQ3oLKVKVf3EzD+nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfi54F/PKTkCW20islLlXVDXf8bMwHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzEv
MzIzMDMxMmUzNzM2MmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJTGwwDQYJKoZIhvcNAQELBQADggEBABj26cIh
f+yEjdYxND7S+FIchP7Qk4A6PEIKkvKvBYDMDPPhwrNipaCXQtivejqNpWda7Ynx
Wk0qyWbIyibhg0W+ORWORL4GE0qrdm/fH8pdINMUVyNaCjlZwaphfjYUG6fwvW1w
dfClVkIWmHooMz03ksZPgTYzAVbPxxox6jcdoOdF5ka4+coC4xS3xkt8rPWVRqL0
Q8izOp2RnxQRTufyejXXZI080aRyzXtR++FPBdfUUysVwbEKi/R/4fEavVUjmXPU
0+N1yUk0Z/BXFuQQO7TxI7abgKVXU73EHArbj1Rz2FxmFH5/Uu/JCd/iR+Ger7R+
F+hrC/DfBCljgnQ=
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:30 2026 by rpki-client