Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32312d3231203d3e20323632373932.roa (raw, json)
Hash identifier:          AvD8XXcHeJwt4Z+lsM3ik1s3NPMl7LbJC3XeKs+V6I4=
Subject key identifier:   EE:10:87:B9:A0:50:22:98:A0:13:19:82:9F:51:50:AC:3D:E9:23:A9
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       13C5A7B929DB2B392BFD5731D5B0F08288F2174E
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c5:a7:b9:29:db:2b:39:2b:fd:57:31:d5:b0:f0:82:88:f2:17:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=EE1087B9A0502298A01319829F5150AC3DE923A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:71:bc:d8:c9:6e:d5:05:fa:e5:8b:f0:f6:
                    56:ca:4a:1e:cb:75:b8:30:ca:ea:9b:0a:b0:76:56:
                    53:02:8f:28:2a:95:0c:47:4f:72:bc:86:23:a5:3b:
                    91:05:80:d9:c5:7a:d5:5b:64:2b:34:de:35:b7:de:
                    d8:c8:e8:50:31:13:2d:53:30:30:e4:8a:fd:8b:c6:
                    d8:b0:21:5e:c2:a6:2d:11:e8:c7:e9:7c:e1:b3:57:
                    47:e8:f5:2f:be:5d:80:77:d5:7d:d9:f0:13:c1:c3:
                    1c:a3:b5:d9:f3:e5:5d:60:df:6c:9c:71:4b:4c:65:
                    0c:2c:45:f6:14:93:32:32:66:d1:8d:8e:f8:78:66:
                    58:93:06:7e:9f:5a:a7:de:a3:66:f4:4f:9d:9b:c2:
                    5c:ed:c8:26:31:f2:0c:67:b6:d1:6b:45:05:c5:02:
                    ea:7e:42:d3:f6:ac:15:40:23:fd:cf:4c:4b:90:1e:
                    ba:35:39:e6:f9:2e:06:eb:93:2b:7c:6d:c5:75:a6:
                    08:b6:d8:3d:c5:b7:8d:12:51:bd:f4:2a:8c:40:49:
                    2e:17:0d:06:29:d1:7d:6f:10:96:29:c1:30:8d:de:
                    0e:0e:45:2a:19:e7:a9:2b:87:d3:9e:f6:96:5f:b1:
                    18:d7:a7:dc:7e:44:1c:08:07:80:0e:0d:4d:fa:54:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:87:B9:A0:50:22:98:A0:13:19:82:9F:51:50:AC:3D:E9:23:A9
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32312d3231203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:22:19:3b:40:00:6f:b1:ce:04:4c:10:27:f7:2a:c4:8f:a7:
         c2:25:84:4a:46:83:42:51:93:e8:68:be:39:3f:ed:9d:c3:97:
         82:ae:ec:53:fc:af:1e:15:f5:ef:17:8b:10:11:ee:64:2b:ba:
         9c:7b:9f:74:0f:2c:0d:5a:b8:ba:d9:22:19:38:b6:d0:96:fa:
         cc:47:b5:ff:1e:7f:e6:76:b5:08:f4:ee:b0:45:70:df:7e:66:
         32:28:2b:ea:ea:db:8e:32:7d:5b:01:52:d1:73:d4:1b:cc:3a:
         9c:23:16:6d:7b:b2:b5:2d:43:80:ca:89:8e:5a:1a:23:bb:91:
         2e:42:af:41:5b:4a:79:8c:28:c6:6d:e8:57:18:cb:c6:38:09:
         86:4e:b9:5a:f8:75:c3:70:f8:34:ab:9b:ba:1c:1b:00:42:34:
         7a:80:f7:cf:e0:45:2a:1d:90:8a:b1:63:c1:d6:fc:0b:cc:f5:
         be:72:4a:72:4e:96:0b:a1:af:0d:4f:41:34:02:e5:31:cb:78:
         3e:e2:d6:b0:c8:bc:b0:0c:31:75:e8:2a:ca:18:5c:d6:48:24:
         64:4d:3c:2e:42:ea:a1:7f:db:bd:47:31:bf:a7:34:af:ac:02:
         86:73:d6:63:be:40:e0:2e:43:b6:1c:48:77:a5:2c:3c:8e:3a:
         c2:e3:61:9d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE8WnuSnbKzkr/Vcx1bDwgojyF04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDRjA0QzIzNjQxRjUxMEFBQkE3RDdDQzk3N0FDQzZF
M0IwM0Y4MTAeFw0yNjAyMDYyMTQzNDVaFw0yNzAyMDUyMTQ4NDVaMDMxMTAvBgNV
BAMTKEVFMTA4N0I5QTA1MDIyOThBMDEzMTk4MjlGNTE1MEFDM0RFOTIzQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOHG82Mlu1QX65Yvw9lbKSh7L
dbgwyuqbCrB2VlMCjygqlQxHT3K8hiOlO5EFgNnFetVbZCs03jW33tjI6FAxEy1T
MDDkiv2LxtiwIV7Cpi0R6MfpfOGzV0fo9S++XYB31X3Z8BPBwxyjtdnz5V1g32yc
cUtMZQwsRfYUkzIyZtGNjvh4ZliTBn6fWqfeo2b0T52bwlztyCYx8gxnttFrRQXF
Aup+QtP2rBVAI/3PTEuQHro1Oeb5Lgbrkyt8bcV1pgi22D3Ft40SUb30KoxASS4X
DQYp0X1vEJYpwTCN3g4ORSoZ56krh9Oe9pZfsRjXp9x+RBwIB4AODU36VLh/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7hCHuaBQIpigExmCn1FQrD3pI6kwHwYDVR0j
BBgwFoAU0M8EwjZB9RCqun18yXesxuOwP4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU5YcXdzZkRvUXFpbW13Z2RtYUdzRFc2Qmp6VkI4YnQ4M3hwUTlGekV3
OVMvMS9EMENGMDRDMjM2NDFGNTEwQUFCQTdEN0NDOTc3QUNDNkUzQjAzRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwQ0YwNEMyMzY0MUY1MTBB
QUJBN0Q3Q0M5NzdBQ0M2RTNCMDNGODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlOWHF3c2ZEb1FxaW1td2dkbWFHc0RXNkJqelZCOGJ0ODN4cFE5RnpFdzlTLzEv
MzIzMDMxMmUzNzM2MmUzOTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyUxgMA0GCSqGSIb3DQEBCwUAA4IBAQCAIhk7QABv
sc4ETBAn9yrEj6fCJYRKRoNCUZPoaL45P+2dw5eCruxT/K8eFfXvF4sQEe5kK7qc
e590DywNWri62SIZOLbQlvrMR7X/Hn/mdrUI9O6wRXDffmYyKCvq6tuOMn1bAVLR
c9QbzDqcIxZte7K1LUOAyomOWhoju5EuQq9BW0p5jCjGbehXGMvGOAmGTrla+HXD
cPg0q5u6HBsAQjR6gPfP4EUqHZCKsWPB1vwLzPW+ckpyTpYLoa8NT0E0AuUxy3g+
4tawyLywDDF16CrKGFzWSCRkTTwuQuqhf9u9RzG/pzSvrAKGc9ZjvkDgLkO2HEh3
pSw8jjrC42Gd
-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:03 2026 by rpki-client