Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3131302e302f32342d3234203d3e20323632373932.roa
File:                     3230312e37362e3131302e302f32342d3234203d3e20323632373932.roa (raw, json)
Hash identifier:          F8t3Wtp1UkstnCZZCz7DysafXc6MBXyueYbxhoR4330=
Subject key identifier:   0C:82:BB:F7:EF:96:F1:FA:25:83:5D:AB:F5:A6:30:5B:D6:BB:F3:65
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       28F009F6C9C3203DC5767F582232916B01304513
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3131302e302f32342d3234203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f0:09:f6:c9:c3:20:3d:c5:76:7f:58:22:32:91:6b:01:30:45:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=0C82BBF7EF96F1FA25835DABF5A6305BD6BBF365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:45:45:e6:51:d0:cf:87:ba:0e:3e:7c:f7:
                    5b:f6:e3:b0:47:cc:c9:66:db:ba:d2:76:28:6c:a0:
                    f7:97:2b:6f:e6:ed:13:64:8b:c5:cc:e7:82:62:65:
                    fe:a7:97:46:e4:d2:e1:8b:f9:3e:02:48:d2:39:e1:
                    c3:77:51:0a:f2:81:fa:6b:86:03:48:88:4b:5a:6d:
                    58:ab:18:17:7e:a5:2f:3d:42:9b:c9:be:5a:a2:41:
                    b5:02:98:90:12:6a:59:cc:de:1d:e0:15:70:10:25:
                    ba:4b:74:da:ff:26:35:53:5e:f7:cf:e1:a3:d4:9a:
                    81:84:92:d6:1d:45:1e:2a:62:37:82:5d:cd:4d:8e:
                    10:fb:97:17:53:4a:f8:63:85:74:7a:9f:20:c1:8d:
                    e4:b8:b9:94:67:4f:93:b2:8b:8b:b3:5e:8b:c4:fe:
                    ab:98:e2:2a:44:29:60:8c:53:24:8e:d2:09:54:5d:
                    e8:82:08:6b:80:a9:d6:87:cc:81:d4:60:c5:f7:5c:
                    d7:09:28:0a:c6:d2:1f:2c:fc:a8:0e:22:11:56:1c:
                    6e:d0:0d:64:84:30:a3:01:f6:2d:a9:19:12:e0:b7:
                    72:05:ed:89:03:c9:c6:b8:0e:18:8b:2b:2a:00:0e:
                    e3:30:ad:38:44:83:57:21:58:74:ba:3f:7d:7c:fe:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:BB:F7:EF:96:F1:FA:25:83:5D:AB:F5:A6:30:5B:D6:BB:F3:65
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e3131302e302f32342d3234203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:bf:67:c5:09:46:b7:35:f5:ef:cc:cd:e4:70:83:b9:2a:
         53:81:01:49:35:0c:e6:ff:3d:80:31:f8:74:53:16:06:85:2d:
         e5:e0:c9:3b:8e:b5:18:10:eb:5b:44:1f:91:b1:e6:17:69:92:
         00:b9:99:54:30:29:aa:30:a5:58:4b:63:12:dc:3c:9c:6b:d7:
         26:fd:ff:ec:a3:e4:38:ad:68:9f:fc:66:69:52:0a:84:65:ab:
         e6:10:3e:b9:95:c2:ee:02:5a:f4:89:78:b7:08:89:81:d2:b0:
         83:ba:43:aa:55:6e:e1:60:06:2a:4a:12:d4:8c:32:a0:c0:b7:
         35:94:31:e3:25:ee:c4:03:fd:63:b5:c5:89:ea:60:c2:7a:4b:
         f5:11:c3:8c:3b:12:48:4b:0f:37:0c:82:e3:30:df:87:aa:c0:
         8e:75:46:49:91:73:5d:32:51:6c:27:37:f2:1c:ef:ca:a7:00:
         27:d2:89:1b:b9:95:fa:e9:04:64:a8:6c:8a:9b:49:cc:7f:49:
         47:02:f4:02:40:35:f8:fc:8d:37:cf:40:2e:2d:46:a2:0f:ca:
         57:5b:3c:01:a2:5a:82:a7:29:f1:f5:ae:0a:3e:41:d5:cf:0a:
         32:0f:aa:10:c2:47:f1:95:fa:dc:56:1e:1e:2a:5b:00:11:3b:
         d8:1b:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:41:42 2026 by rpki-client