Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3230203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32302d3230203d3e20323632373932.roa (raw, json)
Hash identifier:          S0RAEfP2/TZ2/jkjATU2XfcaMu5Z05jrjLx1XjIPWZs=
Subject key identifier:   A5:0E:AC:21:40:F1:05:DB:55:AD:D4:34:86:7D:AC:78:2D:0C:6A:8F
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       175F2C7B3606F24E9E27C2FB1796747A3B83261D
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3230203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5f:2c:7b:36:06:f2:4e:9e:27:c2:fb:17:96:74:7a:3b:83:26:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=A50EAC2140F105DB55ADD434867DAC782D0C6A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:e2:e4:5b:88:e1:e3:c4:af:86:a4:8d:bf:
                    12:01:65:06:59:e2:12:2a:36:67:2e:e9:93:76:cf:
                    bf:ae:62:5f:85:60:48:66:a9:b1:81:3e:3c:38:a1:
                    67:0f:4b:95:bd:15:52:4c:ee:71:29:6d:90:5c:71:
                    1b:94:c2:45:ed:bd:a4:9e:83:b1:50:d2:7a:25:50:
                    28:5b:7a:d9:9d:d7:dc:c5:63:88:b3:4b:91:d9:5b:
                    87:34:50:f6:47:dc:70:44:dd:5c:40:2b:67:c6:e0:
                    6a:6e:86:61:8d:09:5f:f0:d5:56:11:23:6d:48:0e:
                    63:b8:1c:11:2a:f4:68:86:bf:07:5d:d5:41:2b:a6:
                    8d:26:7e:54:f4:33:56:db:3b:e6:c7:92:ca:bb:9a:
                    89:e7:cb:de:92:f7:08:b0:61:e8:97:98:18:11:37:
                    e1:21:24:0f:36:24:87:6e:3a:ef:4c:ad:d6:2d:1b:
                    83:f9:b5:15:2f:24:4b:d0:98:20:f1:25:33:31:7a:
                    90:81:74:7c:94:f2:bb:0a:8c:8d:22:de:d5:f8:52:
                    a0:f9:1d:3b:00:5a:2c:30:16:eb:75:df:f0:1d:dd:
                    74:3f:ed:3b:63:0b:3a:b4:1a:88:e9:5b:ff:44:d4:
                    b5:0a:d4:23:3e:a8:96:00:f0:19:e2:69:99:3a:2b:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:AC:21:40:F1:05:DB:55:AD:D4:34:86:7D:AC:78:2D:0C:6A:8F
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32302d3230203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:29:72:91:29:4e:7f:e5:ef:20:8c:c0:34:36:03:f3:02:0a:
         2a:84:32:d8:f6:ab:4e:39:f7:03:1c:b0:28:e1:14:b7:2c:a8:
         be:af:8b:75:24:94:41:84:c2:e3:7a:b3:91:19:0d:92:14:94:
         15:b7:f5:6d:da:08:8e:62:90:49:46:51:fa:46:20:30:03:cd:
         a1:cc:29:7f:ba:38:fb:16:1e:00:62:9f:3e:4d:62:57:f3:1b:
         5a:10:59:83:84:cc:8e:c5:24:c6:83:59:76:2f:25:32:60:e4:
         a8:08:55:a1:db:54:59:46:ad:5f:a2:bf:28:5b:e6:6a:d5:f7:
         78:a0:63:8d:78:28:95:79:88:96:21:f6:c6:bd:e2:15:99:de:
         8d:5c:38:5d:fd:95:a0:53:28:87:f5:83:31:8b:89:17:88:23:
         ca:3e:52:10:31:7e:e7:38:04:a7:99:5b:d6:41:1f:83:42:1f:
         6e:3a:44:05:ea:ae:69:cc:3c:3b:b3:8b:8d:68:79:3d:28:21:
         9f:f3:ac:97:d2:93:ee:78:79:e2:84:55:77:f1:80:ef:19:ca:
         31:77:79:f8:06:01:de:48:0b:2b:33:5e:b0:71:8f:95:e2:b4:
         b3:88:58:1f:2b:2f:2a:a9:0a:c3:df:28:2e:eb:0b:d2:dc:cd:
         6d:d0:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:13 2026 by rpki-client