Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e31352e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          sjXOuzN2oS5rCVHmSL4SYPcaLBwQAQgtVoVTEQDWZJ4=
Subject key identifier:   0E:49:C3:09:F6:B6:9C:93:E6:E9:80:B9:F5:88:88:BF:D2:F4:B4:73
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       375F6557109C7AF08A61B1EFF70EAAE8FE8E0246
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31352e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:04 +0000
ROA not before:           Wed 04 Feb 2026 19:55:04 +0000
ROA not after:            Wed 03 Feb 2027 20:00:04 +0000
asID:                     52977
IP address blocks:        200.53.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5f:65:57:10:9c:7a:f0:8a:61:b1:ef:f7:0e:aa:e8:fe:8e:02:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:04 2026 GMT
            Not After : Feb  3 20:00:04 2027 GMT
        Subject: CN=0E49C309F6B69C93E6E980B9F58888BFD2F4B473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:c3:61:86:34:d6:21:5a:b7:f0:6f:49:35:
                    67:6f:41:2f:ed:42:08:b3:0c:58:97:0d:85:4b:82:
                    f5:d3:26:a5:2e:c7:ea:53:af:80:73:6e:73:67:44:
                    d0:71:fc:cb:cb:c0:09:3d:33:98:c9:df:81:dd:a7:
                    b9:3b:c3:8c:30:b1:ed:79:2c:56:18:de:68:a3:0a:
                    d5:9b:72:db:13:55:8e:39:1a:53:93:f0:6b:4b:81:
                    77:49:9e:f4:91:4d:4d:88:66:27:05:41:f6:c3:e0:
                    1e:f7:4b:04:72:d2:e3:61:a6:9a:8d:1b:c0:a2:12:
                    3c:a1:b0:f6:e5:5b:3a:12:77:e0:dc:12:34:16:3e:
                    d2:b8:5c:4f:c9:60:db:da:27:a2:55:ac:bc:5a:74:
                    a9:63:64:47:29:9e:e9:1b:c2:e5:52:af:5e:49:b7:
                    97:6d:35:a0:38:a5:a8:2d:54:c1:73:dc:62:04:5c:
                    fd:83:93:de:f2:e5:c7:eb:08:f8:e8:09:0d:8f:02:
                    23:f0:74:7b:cb:e4:0a:ec:0d:d7:32:9b:f4:d9:dd:
                    84:0a:32:ff:39:73:8f:a8:dc:6c:fa:3d:95:ae:89:
                    62:bd:c3:6d:43:25:8c:8a:dc:71:b6:43:fb:15:c1:
                    c9:0c:d2:88:51:90:a1:7a:15:c9:fe:7d:b4:25:25:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:C3:09:F6:B6:9C:93:E6:E9:80:B9:F5:88:88:BF:D2:F4:B4:73
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e31352e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:8f:96:36:5e:86:00:69:05:17:56:66:8e:92:12:b0:d4:3b:
         e2:a5:1c:47:30:81:0e:e1:1d:ab:99:89:7f:5d:07:37:b9:67:
         50:c4:71:f6:40:e0:aa:91:04:76:2a:61:0e:ec:4b:c0:50:1b:
         cd:01:4a:33:dc:c8:a4:30:d3:f6:fe:30:ad:b1:33:64:e3:09:
         2a:5b:e9:08:07:44:6a:fd:f2:ef:87:42:54:2e:46:67:d9:ea:
         2e:e1:ab:b7:2c:b4:51:cf:19:b4:3c:f5:ff:2c:fa:e1:24:73:
         47:dd:70:d6:07:32:85:e0:7d:0f:c9:4d:c1:17:fe:e1:5f:e5:
         7e:34:54:52:99:94:1a:c6:20:a5:08:08:5e:df:ad:b3:0e:38:
         7e:39:13:0c:8a:57:03:b3:e4:8d:8c:78:8f:34:48:ff:6b:97:
         4b:38:cf:53:6f:ac:43:3a:a5:60:e9:fd:fd:f5:b0:fa:5c:4a:
         b3:ae:7c:ee:41:7b:0a:00:db:15:54:e2:c3:62:0d:fe:df:ae:
         72:a1:ee:3e:c3:f8:29:ef:c3:32:59:6a:eb:10:09:a4:0f:9d:
         93:fb:09:76:ad:df:db:cb:ac:98:78:15:e9:06:98:9f:e8:85:
         cc:99:d9:52:76:cf:c6:a3:0d:b4:7f:94:30:19:f5:2b:cf:7f:
         bf:c6:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:39 2026 by rpki-client