Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39382e302f32332d3233203d3e20323632373932.roa
File:                     3230312e37362e39382e302f32332d3233203d3e20323632373932.roa (raw, json)
Hash identifier:          6uc9Y/wGoexC97349gTWk7m1WtVbLjYEPzi+Qiywlws=
Subject key identifier:   B7:A8:85:0D:10:BA:1D:98:7F:ED:30:58:97:F2:98:8F:8C:1F:65:6B
Certificate issuer:       /CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
Certificate serial:       60F06988956767C79AAEAE3EE00F444777D6F88D
Authority key identifier: D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39382e302f32332d3233203d3e20323632373932.roa
Signing time:             Fri 06 Feb 2026 21:48:45 +0000
ROA not before:           Fri 06 Feb 2026 21:43:45 +0000
ROA not after:            Fri 05 Feb 2027 21:48:45 +0000
asID:                     262792
IP address blocks:        201.76.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl
                          rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f0:69:88:95:67:67:c7:9a:ae:ae:3e:e0:0f:44:47:77:d6:f8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0CF04C23641F510AABA7D7CC977ACC6E3B03F81
        Validity
            Not Before: Feb  6 21:43:45 2026 GMT
            Not After : Feb  5 21:48:45 2027 GMT
        Subject: CN=B7A8850D10BA1D987FED305897F2988F8C1F656B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:52:74:74:9c:76:63:00:fd:39:9a:7a:df:
                    06:ea:41:72:00:f4:e6:e4:8a:32:d2:43:94:df:e2:
                    41:5a:45:30:69:90:d7:d0:27:a0:31:9d:e1:0a:3c:
                    9f:20:49:8f:44:8a:77:a0:3c:7f:11:84:52:ce:92:
                    95:33:47:40:e4:4b:a1:3b:db:be:58:94:d7:11:0d:
                    e0:b0:fb:e4:82:b4:75:cb:11:1c:16:6f:ad:fc:30:
                    52:e3:07:07:20:63:2b:fe:07:08:f0:9f:f0:1a:69:
                    d4:a4:0a:75:c2:c8:a3:a9:b2:19:6b:c3:b9:51:e5:
                    7f:ea:04:fa:67:31:34:e2:ea:9f:43:9b:fe:4a:4e:
                    c8:4f:37:11:6d:bb:b2:3d:9f:a6:43:3d:7c:5e:97:
                    72:1a:26:0a:64:67:30:60:98:51:09:1d:ae:69:31:
                    30:cd:58:74:98:d4:d0:eb:94:be:4d:f9:4c:1c:b3:
                    f2:d4:31:5d:bb:32:42:ee:70:0f:6e:8e:cb:db:47:
                    c2:e9:1a:ae:c0:57:20:cf:52:04:a5:9c:1b:d0:c7:
                    34:da:aa:1b:9d:0b:56:bf:27:44:19:a3:b0:af:22:
                    f6:5c:1f:1e:87:75:25:7a:1b:49:5b:44:0e:40:77:
                    55:58:cc:a7:11:12:9f:cb:79:aa:3d:57:4b:cf:d7:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A8:85:0D:10:BA:1D:98:7F:ED:30:58:97:F2:98:8F:8C:1F:65:6B
            X509v3 Authority Key Identifier:
                keyid:D0:CF:04:C2:36:41:F5:10:AA:BA:7D:7C:C9:77:AC:C6:E3:B0:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0CF04C23641F510AABA7D7CC977ACC6E3B03F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NXqwsfDoQqimmwgdmaGsDW6BjzVB8bt83xpQ9FzEw9S/1/3230312e37362e39382e302f32332d3233203d3e20323632373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:ed:96:18:80:84:cf:2f:ef:47:a7:53:04:0f:27:0e:c3:
         d5:0d:60:b2:81:08:26:6b:22:7a:92:72:84:af:40:20:81:4b:
         40:24:38:73:48:55:c2:61:a7:cc:e8:15:37:ac:d0:96:59:18:
         b4:d8:4a:e2:6c:32:53:ad:2c:7a:b1:7b:e5:65:36:f9:9c:e7:
         a7:a6:75:5f:c0:e8:5a:7b:b7:bd:a7:74:2f:6e:04:c1:0e:4f:
         80:50:fd:ba:93:7a:7a:5b:f5:89:7f:db:63:3d:05:cf:d9:b2:
         31:bd:84:7f:ed:b1:54:70:b5:2d:f3:06:7a:fb:da:40:a9:ae:
         30:82:59:6d:20:d7:eb:18:73:83:7f:96:94:f8:53:40:9b:85:
         fc:26:44:f0:65:bd:10:3b:da:65:4c:20:d1:60:74:16:6d:44:
         46:9e:5e:db:1d:8f:33:c0:fd:da:ce:62:49:1c:0b:fe:df:ce:
         79:ed:fc:78:5d:0c:30:2b:7e:b5:fe:4a:93:6d:e9:9a:49:c4:
         4f:4c:45:68:3f:f1:e2:ad:8a:35:63:ea:d3:c1:b2:05:99:d1:
         c2:b5:72:99:64:8a:cd:7d:ea:f6:60:f2:11:ab:e4:13:7b:35:
         98:6c:33:67:4f:ee:37:83:66:b5:08:f3:a2:ea:c1:78:f8:08:
         71:4c:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:13 2026 by rpki-client