Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
File:                     3230302e35332e31302e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          0ENnwXfGuouRj+pGnma3jRiPNaS+ig07qnythRtea6E=
Subject key identifier:   FB:F8:8B:44:72:59:27:01:63:C0:94:33:5F:D1:49:6C:95:72:60:C8
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       7DF4850E7C27EA05819BB1E14A7EC4F5A4646290
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     52977
IP address blocks:        200.53.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f4:85:0e:7c:27:ea:05:81:9b:b1:e1:4a:7e:c4:f5:a4:64:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=FBF88B447259270163C094335FD1496C957260C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:3e:e9:3f:6d:08:4c:34:1b:6b:da:d6:d7:
                    44:99:5f:3c:14:7f:01:fa:05:a9:40:8f:7b:30:80:
                    ce:8a:55:78:67:73:ba:00:f8:61:74:3e:cd:ef:5b:
                    02:e2:91:9f:2a:51:8c:c9:07:e3:1b:9e:c8:d9:df:
                    0a:17:db:92:5e:c9:bb:2c:8d:cd:d0:c8:c1:9c:72:
                    f2:b5:d7:b7:7d:a3:10:7b:e6:c0:ab:53:89:f4:00:
                    66:37:4f:92:9b:4e:4a:a2:df:bd:5d:e4:01:99:d0:
                    34:af:bf:a3:f2:8f:25:92:d6:fb:e5:18:c3:c5:3b:
                    87:5d:12:08:e9:13:02:52:70:72:96:c8:e4:0c:7e:
                    88:30:4b:af:67:b7:b2:6a:2a:3e:4c:e5:ec:6e:17:
                    da:e3:59:a5:17:a6:05:ee:ba:22:4c:13:1e:bf:9b:
                    03:5e:01:7c:e6:5e:15:ee:db:e9:59:bd:95:aa:6c:
                    c6:4e:8b:56:d2:46:2e:b0:7f:be:e3:cf:b4:4d:1a:
                    69:9c:a5:8e:0d:9f:57:45:81:25:24:1a:09:9d:bf:
                    d0:4c:0b:5c:c5:72:64:7c:f6:8a:d2:5c:2a:a0:15:
                    e2:61:1b:25:1e:0c:32:5f:da:0e:cb:18:51:a6:43:
                    55:3c:8b:e3:4d:7d:40:27:d7:e1:d0:d9:80:57:7f:
                    6a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F8:8B:44:72:59:27:01:63:C0:94:33:5F:D1:49:6C:95:72:60:C8
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31302e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:2f:64:e3:0a:86:8f:7b:8f:65:d8:c6:b8:77:02:88:bb:
         58:50:89:3a:6f:5a:48:43:22:89:c6:19:ff:c0:cc:db:5c:9d:
         80:17:cd:d9:61:26:f3:93:b3:70:01:c9:8f:47:1c:76:af:78:
         54:01:b9:ed:81:f8:ac:17:a8:fd:cb:f2:4c:eb:3e:05:d8:39:
         74:57:39:70:83:4e:a7:52:b3:c7:94:23:da:48:a2:67:1d:63:
         9f:99:63:50:37:9f:b9:88:36:24:c9:5c:91:cc:4a:4e:1e:ef:
         5d:e2:23:39:8f:a3:0b:33:fe:a4:f4:7f:fa:c3:27:4d:1f:cb:
         97:45:19:13:c0:eb:a5:ef:aa:aa:d3:c9:89:01:01:48:4f:7e:
         36:24:ec:93:83:81:16:e2:4b:ed:7a:83:a9:bd:0f:41:61:88:
         59:3c:2f:6b:4a:10:1e:18:34:84:1b:01:e8:bf:bf:37:63:e1:
         19:a1:b3:78:cf:f1:e1:91:e2:6d:dd:10:89:6c:71:7b:26:21:
         b6:3b:e2:9d:ea:d7:b9:88:46:74:97:90:8e:ca:0a:a7:06:b1:
         10:86:91:2f:36:69:0c:8d:fa:6a:ac:6e:22:a4:c4:6e:88:e8:
         5d:67:d2:d2:f4:fa:b3:e2:d2:f3:1e:01:ef:21:ea:89:0c:d7:
         fe:5e:49:bf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUffSFDnwn6gWBm7HhSn7E9aRkYpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNjAyMDQxOTU1MDFaFw0yNzAyMDMyMDAwMDFaMDMxMTAvBgNV
BAMTKEZCRjg4QjQ0NzI1OTI3MDE2M0MwOTQzMzVGRDE0OTZDOTU3MjYwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgT7pP20ITDQba9rW10SZXzwU
fwH6BalAj3swgM6KVXhnc7oA+GF0Ps3vWwLikZ8qUYzJB+MbnsjZ3woX25Jeybss
jc3QyMGccvK117d9oxB75sCrU4n0AGY3T5KbTkqi371d5AGZ0DSvv6PyjyWS1vvl
GMPFO4ddEgjpEwJScHKWyOQMfogwS69nt7JqKj5M5exuF9rjWaUXpgXuuiJMEx6/
mwNeAXzmXhXu2+lZvZWqbMZOi1bSRi6wf77jz7RNGmmcpY4Nn1dFgSUkGgmdv9BM
C1zFcmR89orSXCqgFeJhGyUeDDJf2g7LGFGmQ1U8i+NNfUAn1+HQ2YBXf2qTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+/iLRHJZJwFjwJQzX9FJbJVyYMgwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcg1CjANBgkqhkiG9w0BAQsFAAOCAQEAIi4vZOMKho97
j2XYxrh3Aoi7WFCJOm9aSEMiicYZ/8DM21ydgBfN2WEm85OzcAHJj0ccdq94VAG5
7YH4rBeo/cvyTOs+Bdg5dFc5cINOp1Kzx5Qj2kiiZx1jn5ljUDefuYg2JMlckcxK
Th7vXeIjOY+jCzP+pPR/+sMnTR/Ll0UZE8Drpe+qqtPJiQEBSE9+NiTsk4OBFuJL
7XqDqb0PQWGIWTwva0oQHhg0hBsB6L+/N2PhGaGzeM/x4ZHibd0QiWxxeyYhtjvi
nerXuYhGdJeQjsoKpwaxEIaRLzZpDI36aqxuIqTEbojoXWfS0vT6s+LS8x4B7yHq
iQzX/l5Jvw==
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:00 2026 by rpki-client