Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130392e302f32342d3234203d3e20323632373932.roa
File:                     3230312e37362e3130392e302f32342d3234203d3e20323632373932.roa (raw, json)
Hash identifier:          /C2syAS4/ub/L+s30Fen7/thAtdJzI9XiUTFflibhPg=
Subject key identifier:   F1:0E:A5:74:91:01:86:7F:AB:D6:6B:A0:AB:77:64:DC:3F:DE:EC:F0
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       1BAEF997C79E136CC5E2396E5DBBE3203A6E8161
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130392e302f32342d3234203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ae:f9:97:c7:9e:13:6c:c5:e2:39:6e:5d:bb:e3:20:3a:6e:81:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=F10EA5749101867FABD66BA0AB7764DC3FDEECF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0f:5f:ae:31:1e:9c:81:01:4e:03:1b:b2:44:
                    1c:39:0c:85:60:2b:34:28:b9:03:d1:0c:9d:80:be:
                    61:28:ea:07:18:79:10:c1:4d:e3:1b:ab:92:2f:a2:
                    85:c9:8b:c3:48:dc:9f:de:d5:bc:ee:e5:31:1f:cc:
                    f8:8a:d9:a8:c1:aa:b0:d3:4d:5b:d8:74:a9:de:51:
                    d9:70:7d:27:f7:7f:c3:ae:49:da:50:f3:eb:fb:70:
                    5e:53:e8:f4:08:b7:e5:5e:c9:fd:9d:af:07:be:e1:
                    96:53:5e:b4:4b:f1:73:8f:36:b5:cd:44:c5:e7:f8:
                    ea:07:6f:2a:bb:05:f2:ca:c4:63:62:c0:20:d7:ed:
                    b7:29:23:a5:3d:62:e8:b6:53:aa:c8:1f:bc:09:1b:
                    7f:07:4a:47:40:c5:1c:8e:61:f1:1a:94:5c:e7:a2:
                    50:fa:34:ab:38:a2:e1:4f:82:e6:3f:81:3e:f0:1d:
                    58:0c:97:ef:f5:ee:30:7b:84:84:b7:f2:63:7a:8f:
                    4e:d3:cd:bb:3b:c6:43:eb:82:58:32:cd:cb:b4:1e:
                    4f:62:9e:fa:ab:39:37:81:95:ad:a5:3c:d8:10:38:
                    ca:10:27:2c:63:25:8a:c8:74:f0:29:30:b8:e1:89:
                    d3:1c:48:2e:19:e3:89:28:a7:d3:d5:eb:f3:db:1a:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0E:A5:74:91:01:86:7F:AB:D6:6B:A0:AB:77:64:DC:3F:DE:EC:F0
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3130392e302f32342d3234203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:10:36:4d:dc:77:7a:b4:ec:37:54:74:8f:08:50:9e:ab:a0:
         d3:9f:66:ed:6c:1d:cd:7f:79:b9:8b:13:76:61:5a:26:25:7b:
         b1:86:6c:ef:01:ec:ff:4b:39:c1:ae:95:2b:37:22:47:d0:f2:
         af:b2:e9:28:dc:01:87:a5:91:4b:86:05:0c:9e:de:08:fd:dc:
         a6:12:9a:41:53:96:78:9d:eb:57:03:ca:84:ed:fe:4e:95:bc:
         60:82:4a:dd:9c:c9:6d:48:a4:6d:e2:ac:01:35:9f:67:eb:7e:
         57:c9:d3:51:fb:18:63:9c:b6:99:11:21:24:13:c4:3c:41:9a:
         b4:39:35:e3:97:71:f5:f1:64:dc:af:6b:67:77:f9:fc:01:98:
         17:cb:ad:0a:fb:99:4a:1e:a2:44:d4:6e:ae:67:b2:8e:09:e7:
         b4:af:b2:70:5e:8a:8e:cb:43:f5:c1:37:1d:a5:7f:de:a4:ea:
         6a:0b:b4:03:00:47:27:47:a5:75:22:c9:ab:e0:df:34:23:8b:
         d3:f3:33:88:8a:ad:fc:0c:e3:1c:06:59:88:9a:9b:3a:45:59:
         97:77:b5:44:b9:1f:5e:ba:eb:59:7f:1c:7c:bf:68:4f:b5:c5:
         cf:f4:e0:6c:98:38:be:1d:eb:f6:38:b6:4b:15:4b:1f:11:9c:
         d4:d3:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:54:30 2026 by rpki-client