Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31332e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31332e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          NxwBJzEDeTCFJ7fDYpI8S9QdZUlkaP8WvLc3HSRVbY4=
Subject key identifier:   3C:45:2E:D2:EF:B9:DE:C1:4B:EC:D5:EF:AF:62:9F:42:E6:98:0F:E3
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       1161212CD396173597534495532A802C9DC4EF31
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31332e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     52977
IP address blocks:        200.53.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:61:21:2c:d3:96:17:35:97:53:44:95:53:2a:80:2c:9d:c4:ef:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=3C452ED2EFB9DEC14BECD5EFAF629F42E6980FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:bb:ff:5c:37:d7:20:af:79:fd:ac:cd:8e:
                    35:b8:4e:4b:6b:56:f2:2d:e8:05:b2:07:c6:13:1e:
                    9c:fc:b5:85:a7:68:bd:f4:18:ef:e0:ab:f2:4b:2a:
                    ac:2d:2d:2e:2b:6f:e9:9e:0d:10:42:3c:20:9c:a6:
                    22:26:48:61:fc:4f:fc:d1:3d:22:cc:9b:46:2d:1d:
                    18:19:cc:9f:ed:b9:89:98:04:3f:be:3b:62:d5:f1:
                    c5:53:b8:d5:8c:f9:07:b3:a9:3d:3c:fd:e1:18:12:
                    d4:15:8b:71:88:f1:21:41:a0:26:1a:54:49:46:17:
                    5e:22:97:d7:55:e3:27:31:b1:38:2f:9b:51:d9:f6:
                    36:fd:5f:e2:48:8f:f2:30:69:bc:38:9c:6b:27:73:
                    6d:c1:dc:ce:1d:56:a3:94:bc:6b:e0:81:f8:71:df:
                    67:62:72:10:b9:81:eb:af:1b:b2:0c:49:c6:4a:6b:
                    de:fb:30:1e:5c:29:bc:a8:62:ff:18:ee:c0:ae:83:
                    bf:37:b8:28:d9:66:b4:e0:b7:19:31:67:65:8d:c5:
                    b8:f8:cb:9c:cb:7c:c0:af:32:79:59:97:f0:4a:91:
                    94:53:a2:c9:94:a4:9e:e0:67:6f:42:40:c1:13:df:
                    5d:dd:90:c6:89:4b:b6:89:2f:0d:d3:d8:ec:e2:65:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:2E:D2:EF:B9:DE:C1:4B:EC:D5:EF:AF:62:9F:42:E6:98:0F:E3
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31332e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a0:d3:2a:aa:84:88:4c:8f:11:88:7f:02:c0:f1:91:11:6d:
         23:2b:e6:63:6e:ce:7b:8c:9f:b6:47:ac:d2:a6:56:71:23:0d:
         74:e9:65:a9:23:4d:51:14:83:28:2c:67:55:05:77:77:d2:42:
         b9:31:f4:31:13:75:35:33:84:7f:ab:dd:a9:b1:3e:f8:b7:ce:
         a3:b5:48:66:46:08:21:3f:6b:f1:1e:de:34:25:2c:65:e0:2c:
         02:b5:bb:6e:c7:a1:84:30:61:88:7c:45:d0:70:df:a4:98:53:
         85:88:07:15:e5:9a:e3:d4:66:72:51:58:90:4b:6f:73:5b:6c:
         e9:7c:ff:c6:bc:f1:2d:a7:43:03:5d:76:f5:f7:55:a3:95:8d:
         81:bd:b9:b9:4a:b4:3a:2b:29:ce:ad:db:3f:01:34:24:d1:bc:
         5b:f4:5e:74:5a:67:86:bb:e1:61:f0:df:9d:31:b8:ea:74:27:
         8d:d4:4b:fd:07:95:05:3f:fa:31:c9:73:4d:d8:11:01:ec:07:
         f7:57:1b:15:83:f0:4a:43:25:ec:7a:2c:e9:42:a9:e2:42:8e:
         5c:a6:56:dd:9a:50:69:7e:81:c9:e9:ab:eb:ea:8a:f1:40:88:
         9e:4d:4e:0b:16:d8:ea:ea:93:de:25:d3:dc:10:36:9c:5f:c5:
         b0:e9:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:20:53 2026 by rpki-client