Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31342e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          cy3IGrTB5fb939zrBySb2c3L/ju7PY6m2+UygbVigdc=
Subject key identifier:   3D:73:AA:F8:A0:27:15:1A:67:39:26:9F:B9:A3:E6:C8:29:C4:E4:42
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       15A6B0DD14BD38A29581B328F5204C48BA26B939
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:01 +0000
ROA not before:           Wed 04 Feb 2026 19:55:01 +0000
ROA not after:            Wed 03 Feb 2027 20:00:01 +0000
asID:                     52977
IP address blocks:        200.53.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a6:b0:dd:14:bd:38:a2:95:81:b3:28:f5:20:4c:48:ba:26:b9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:01 2026 GMT
            Not After : Feb  3 20:00:01 2027 GMT
        Subject: CN=3D73AAF8A027151A6739269FB9A3E6C829C4E442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:d7:54:76:77:b3:ba:45:d3:45:1b:21:6d:
                    88:59:55:73:fc:56:d7:6c:fb:1f:99:fd:75:4e:cc:
                    f2:b7:32:5b:fd:b3:a0:97:3a:82:ee:97:9d:03:4d:
                    04:cb:d2:3d:24:90:f4:87:5c:ed:1d:10:5d:4b:f3:
                    bf:d5:bc:9b:11:d8:95:40:01:83:5e:5b:28:93:bb:
                    04:70:47:20:a6:a7:b1:01:82:ba:1f:f8:41:f5:16:
                    6e:ec:c9:ac:34:46:4c:be:33:84:da:4d:9d:2d:4f:
                    0f:a0:a2:29:37:2c:e6:97:12:82:ae:05:a7:32:05:
                    cc:d8:11:c6:9e:7b:ed:2d:5b:2f:72:a1:97:97:31:
                    88:4e:a1:19:a5:1c:4a:2f:cc:86:56:cb:04:38:3a:
                    59:93:c1:65:ba:bb:88:eb:17:8e:f2:15:ac:df:a5:
                    33:3e:50:c7:1a:e4:c0:63:22:59:b2:d7:d0:8c:5c:
                    01:d1:d3:0d:8a:be:ff:b2:a0:a3:91:a5:4f:59:41:
                    f9:34:ec:5b:76:9e:dd:1d:78:dd:c6:9b:d6:9c:1f:
                    e4:62:cd:23:2e:2e:53:c8:b7:b2:a5:dc:3a:8f:e4:
                    f4:44:6a:85:90:6d:9b:f3:16:e4:7d:c9:a3:c9:06:
                    40:d0:54:99:a6:47:f0:a5:13:55:49:f4:1e:d9:ae:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:73:AA:F8:A0:27:15:1A:67:39:26:9F:B9:A3:E6:C8:29:C4:E4:42
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31342e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:6c:e8:02:87:de:16:73:6f:20:73:60:42:38:55:27:26:
         01:7d:c0:c6:eb:b5:cb:dc:36:47:07:b2:68:45:c1:d7:b0:71:
         cc:9b:49:14:41:93:87:15:5f:df:a1:25:7d:2d:22:40:75:b8:
         35:83:8e:8c:d0:6c:58:71:bd:75:2a:6a:56:34:d1:33:ca:e8:
         9f:a5:87:38:f0:0a:65:5d:19:94:61:2d:99:54:e3:0e:7e:72:
         64:8f:af:58:ce:be:02:18:b9:ed:f3:d3:b7:9d:34:71:31:00:
         75:c1:b8:b6:15:5f:48:3c:eb:09:bd:c8:6b:3c:bc:c3:a7:a5:
         51:72:db:4d:93:49:d9:a6:ed:38:8c:9c:55:27:54:f0:d0:a4:
         5d:c7:af:0e:11:04:6a:f8:8a:52:21:0e:f6:3e:a2:37:22:26:
         13:af:d3:e6:58:da:22:9e:60:c5:6d:ce:72:b6:f0:ba:4c:2e:
         bc:57:3e:b7:09:3f:d6:ba:78:fe:69:54:73:54:6b:ad:2c:68:
         58:cb:47:07:12:c2:24:ef:e9:a0:83:3a:d8:1d:69:aa:46:9a:
         31:95:da:ac:ca:89:29:2e:b7:d3:da:53:b7:18:63:2e:c6:d0:
         2e:c6:f4:b1:2c:f8:ce:38:ea:0b:1b:7e:79:df:2b:64:cb:95:
         b5:79:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:42 2026 by rpki-client