Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31322e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          zXkKrjRbucCgfgnAZ3E8pub5lTwfi/1wmp64UbB6y0Y=
Subject key identifier:   1C:95:8B:86:83:FC:66:D6:FB:67:B6:85:E6:6A:A4:65:41:34:69:C0
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       5DBB1A2E2BEBBFD30BB9F2626B9CB80817FB7759
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:09 +0000
ROA not before:           Wed 04 Feb 2026 19:55:09 +0000
ROA not after:            Wed 03 Feb 2027 20:00:09 +0000
asID:                     52977
IP address blocks:        200.53.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bb:1a:2e:2b:eb:bf:d3:0b:b9:f2:62:6b:9c:b8:08:17:fb:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:09 2026 GMT
            Not After : Feb  3 20:00:09 2027 GMT
        Subject: CN=1C958B8683FC66D6FB67B685E66AA465413469C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:4d:6c:f1:58:42:5f:2f:94:e3:24:50:5c:
                    d0:89:8c:e2:d3:79:a2:17:5c:52:c4:c1:c2:b1:f3:
                    aa:2a:e0:12:6f:ea:c2:60:22:a2:05:8c:a8:1d:e9:
                    b9:a1:b9:0f:c3:29:e8:71:4b:83:53:b8:46:d9:ac:
                    53:b4:23:2c:a4:d1:2a:b0:5c:4b:d6:58:af:e5:57:
                    93:78:2f:3d:c9:b0:f7:ba:62:63:b2:db:61:1b:b1:
                    bf:ea:c9:c3:1e:9a:7d:09:96:3f:a3:3b:b7:4f:5f:
                    52:6f:cd:58:de:61:43:3f:7b:dd:71:b8:d3:98:f6:
                    30:78:38:57:a4:32:99:bf:b5:81:b3:3c:eb:eb:2d:
                    64:2f:e0:d8:2a:c7:5d:8e:c8:37:18:8e:31:7e:61:
                    f3:c1:59:77:cb:40:7a:bc:7d:8e:8f:59:f8:ad:09:
                    cf:47:86:f5:93:85:47:0c:48:d4:79:26:94:97:6e:
                    59:13:df:5e:b8:0d:b1:ce:fe:01:a9:16:cf:38:95:
                    55:2f:5d:4d:fb:a4:80:9d:7a:c8:21:d3:7e:e1:4c:
                    af:68:9a:b6:ef:8b:a5:f5:fc:c3:24:bb:63:60:5d:
                    a3:28:75:1f:cd:0d:d5:52:b6:19:6c:b7:09:77:37:
                    70:45:2b:5e:bc:89:95:da:a4:27:15:24:7e:32:be:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:95:8B:86:83:FC:66:D6:FB:67:B6:85:E6:6A:A4:65:41:34:69:C0
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31322e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a6:50:ea:05:8d:42:05:79:8a:c4:31:c0:a3:90:26:59:14:
         93:66:22:6c:f6:55:52:83:f7:e7:16:e3:8c:1b:2d:14:1f:a3:
         32:5f:d3:26:3e:d2:f0:02:c6:9d:c5:63:a5:97:f3:ea:9c:0a:
         fe:6a:aa:94:52:c7:49:49:22:52:20:0c:d3:14:67:62:ab:21:
         39:46:ef:2c:08:15:7f:47:50:d2:b5:54:a8:1f:3d:01:6d:4d:
         6a:48:58:2d:1e:02:ab:12:99:4a:5f:29:e8:88:b9:be:c0:29:
         20:4a:ae:4e:96:af:ce:25:67:b0:5a:f3:a7:19:cc:d5:2c:8e:
         34:7c:98:7e:40:46:e7:4c:c9:c7:5e:50:a0:56:17:c3:a4:91:
         15:e6:64:3d:ec:03:8a:89:e3:19:43:75:65:95:a2:21:d7:bb:
         05:53:af:0d:04:76:cf:d8:d5:04:88:78:f7:55:4f:df:5b:99:
         09:b2:44:d3:1e:1a:e3:aa:4b:74:ce:62:7d:ab:b2:c6:7b:14:
         51:f8:66:d5:d9:9a:08:03:83:ff:55:f4:a7:f0:9a:1b:ae:12:
         d0:d6:21:ca:44:a4:5f:89:09:02:0e:9c:6a:57:3a:a2:2c:4c:
         c1:12:1a:98:74:34:e5:77:83:a7:bc:e1:a0:cb:40:f5:47:c7:
         25:b7:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:34 2026 by rpki-client