Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
File:                     3134332e3235352e39362e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          C/LSbDW7e6Q8qZx8yc6r65k/HB9KwP+kXv7739f0HdA=
Subject key identifier:   A0:A9:30:6B:4E:86:ED:92:7F:6D:9E:8E:99:E6:E4:45:48:71:0A:E4
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       1071150A7CCE45A69B239A9B8C38174CEF5B1E65
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     52977
IP address blocks:        143.255.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:71:15:0a:7c:ce:45:a6:9b:23:9a:9b:8c:38:17:4c:ef:5b:1e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=A0A9306B4E86ED927F6D9E8E99E6E44548710AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:7c:26:7e:68:80:e4:ca:ff:37:c8:90:5a:
                    b4:7d:99:bc:4a:2c:7b:3e:1e:52:da:40:ad:68:be:
                    b5:1d:b7:60:a6:3c:61:c6:9d:b5:3e:e3:49:d4:00:
                    ff:8b:e4:c0:95:4a:58:b2:5d:77:29:ca:49:96:e9:
                    6b:14:f6:4a:d1:c1:e3:db:c3:06:5f:7b:fc:6d:90:
                    a1:0c:05:64:81:97:5c:9b:54:ee:fd:6b:9f:af:6a:
                    af:84:89:45:28:e7:c3:0c:e8:34:6c:57:c3:4c:c0:
                    d1:92:8e:e2:ea:af:12:41:68:1f:5e:85:cd:65:dd:
                    5e:0a:2b:26:75:07:ff:ba:ad:d4:a7:30:b0:83:2e:
                    32:41:6f:d8:ac:2b:b1:af:2a:53:0f:57:46:71:73:
                    d1:54:4b:ac:8f:47:62:af:94:de:14:eb:17:5a:57:
                    52:8e:84:0e:1e:57:20:cc:41:fe:e1:13:dd:0e:3d:
                    fb:b2:97:77:fa:de:a0:63:4e:be:e6:a4:c2:96:d0:
                    1b:b5:3d:dd:0a:58:e7:57:df:27:b6:d8:fe:07:77:
                    da:6a:ee:5c:c0:60:8b:f8:e9:56:c1:28:25:af:82:
                    bc:dc:d5:6c:c5:77:76:37:34:99:b8:13:78:ae:8a:
                    4f:df:5d:fe:6b:34:01:06:9b:45:ff:68:97:89:ab:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A9:30:6B:4E:86:ED:92:7F:6D:9E:8E:99:E6:E4:45:48:71:0A:E4
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:fa:e3:3d:bc:c1:28:5e:dd:4c:b6:eb:f0:55:a3:09:6f:f9:
         96:b9:ef:9b:db:cf:0a:59:90:8c:26:42:c7:94:0d:e2:89:63:
         81:ea:a1:9b:6a:8a:24:2b:7f:5e:64:5a:fc:1d:f3:de:b3:c8:
         af:d3:64:cb:88:10:20:7a:46:47:b4:7e:c8:69:67:9d:e7:a9:
         36:ec:95:97:af:15:02:1b:db:2b:bb:aa:4e:17:e3:af:9e:88:
         b6:aa:9e:8b:2b:4b:26:d9:32:fd:fe:7b:84:e2:43:0c:14:9b:
         40:a1:8a:84:f4:a5:5e:a0:06:d8:bd:5c:ab:1a:f9:f0:ba:02:
         2c:6e:e9:1a:14:3a:95:9f:0a:92:7e:44:04:65:fa:a9:1f:0a:
         4e:41:1a:5e:a3:7c:bf:a8:9f:1a:7f:b1:57:13:9a:2c:62:ff:
         ae:57:d8:d5:2e:36:88:67:e2:b9:77:4a:04:07:2f:ea:99:a2:
         78:d5:0a:12:46:7a:79:32:e0:6e:83:9b:c9:12:7e:e1:f7:64:
         8e:d4:47:27:0f:cf:4e:47:e8:9b:0b:39:a9:65:10:f6:2a:1c:
         95:54:02:8f:19:1e:85:99:29:f1:d5:1f:36:e9:59:79:74:62:
         b6:d5:bc:6d:91:1d:95:04:f8:09:4b:ab:f0:fe:14:ce:f1:19:
         57:c4:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:38:33 2026 by rpki-client