Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32322d3232203d3e20323632373932.roa
File:                     3230312e37362e39362e302f32322d3232203d3e20323632373932.roa (raw, json)
Hash identifier:          Pj+4H2dn0f1cekbnzwOC713X9oIZAi0H9vgTKTpKVjs=
Subject key identifier:   37:19:17:53:75:91:1A:62:29:70:85:7B:86:CC:96:93:43:F3:E9:5B
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       7E5F5C6B82710643B951A5C566E9F29CDFB80C4F
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32322d3232203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5f:5c:6b:82:71:06:43:b9:51:a5:c5:66:e9:f2:9c:df:b8:0c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=3719175375911A622970857B86CC969343F3E95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:f3:2c:07:60:64:c2:ce:af:c8:5f:6a:d2:
                    5e:ec:0f:85:fd:28:63:0d:8e:bb:64:ef:d8:08:cf:
                    e7:c7:5d:05:9d:d9:b0:3a:5a:a2:4b:a2:48:7b:0c:
                    29:f6:49:56:af:a0:6d:15:ab:e2:c8:a2:57:64:69:
                    1b:bd:a7:ab:13:ac:3b:1d:84:3b:2a:dd:76:4a:5b:
                    83:d0:12:a0:55:ce:69:7c:a4:72:2c:c7:ce:b6:ad:
                    ad:47:b2:4f:b5:61:5f:e3:fd:49:f9:19:86:e6:c5:
                    11:c3:19:62:65:3f:9c:ab:09:e4:8c:89:69:67:f5:
                    68:f6:02:54:87:19:b7:ef:8d:53:67:1f:64:7e:5a:
                    54:8d:36:44:8a:4e:36:67:df:89:46:fb:c5:63:98:
                    3e:73:26:83:df:17:1d:32:43:b3:39:c8:20:81:c2:
                    da:2f:a0:35:c1:ca:fb:1c:26:16:00:f7:e2:72:4e:
                    52:1b:ff:5c:39:cc:53:0d:38:8b:8f:68:e5:aa:6f:
                    4b:34:76:af:43:03:c2:fc:cc:a8:84:d7:57:46:5e:
                    8f:34:a8:17:92:d0:e4:74:09:3c:e1:58:64:75:15:
                    a1:f0:e1:d2:3e:8e:d5:5d:d1:a6:e0:03:44:d2:2d:
                    10:12:ca:3c:ab:04:45:d7:2d:86:00:2d:fb:f8:b7:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:17:53:75:91:1A:62:29:70:85:7B:86:CC:96:93:43:F3:E9:5B
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39362e302f32322d3232203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:de:83:47:2b:7c:50:90:4b:e7:7c:a9:ad:43:ff:5f:d5:b1:
         74:47:75:3e:2e:b6:8e:06:84:a6:58:64:72:95:1e:cc:42:c4:
         00:96:eb:e2:d3:f1:26:c4:ba:01:25:ed:95:b4:b9:ca:e8:9f:
         40:52:84:14:6a:b0:bb:26:a0:70:db:f6:54:ec:2b:b7:80:75:
         fe:bc:79:68:32:cc:2c:fa:9b:66:1d:79:70:b4:2b:f4:9e:ea:
         0d:ea:74:e9:bd:26:bf:e5:0b:e6:e8:b0:94:ee:e3:08:46:ad:
         e9:06:cb:3b:a7:d9:1e:c2:14:89:ec:ac:f2:47:3d:c4:7a:c6:
         04:45:9b:09:68:45:71:d1:e1:fe:24:b7:fc:5c:0f:9d:ec:02:
         b7:c2:6a:2a:0f:5f:4e:7c:5b:df:65:09:56:70:ff:6c:24:a4:
         8f:98:70:c7:16:ef:ab:8f:01:0a:67:da:b7:2a:ca:56:f0:c2:
         42:32:1f:6e:85:19:a2:14:69:9e:76:00:64:08:23:6e:bd:a9:
         76:bb:ea:43:db:4a:c7:50:9c:aa:8f:5f:eb:51:2c:24:d1:a6:
         62:bd:f9:9f:3e:35:87:b7:9c:c2:e5:a0:9f:7e:43:5c:c4:0a:
         d5:1e:7f:98:c1:a0:a6:f0:b0:f6:fc:6c:be:a4:89:1d:1c:dc:
         25:95:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:02 2026 by rpki-client