Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32322d3232203d3e203532393737.roa
File:                     3230302e35332e382e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          wvCWSy74Upshh4iWyONMVh8HoWgt7r3P7qvU2ivXO9M=
Subject key identifier:   F5:B3:0B:6D:3D:CD:51:E6:DB:A8:40:1E:69:C3:C3:75:FF:7D:5E:23
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       0866A7583A8BC96F591809A0DD90DBB5C617E47F
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32322d3232203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     52977
IP address blocks:        200.53.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:66:a7:58:3a:8b:c9:6f:59:18:09:a0:dd:90:db:b5:c6:17:e4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=F5B30B6D3DCD51E6DBA8401E69C3C375FF7D5E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:6e:9a:dc:0c:e4:a7:27:db:ef:1d:11:33:
                    7f:80:93:53:53:be:4d:49:91:cb:39:1c:82:ab:cd:
                    1a:63:7f:64:67:39:48:5b:d6:9f:08:3a:eb:2d:ff:
                    e6:96:88:f0:a9:0b:d4:91:d2:2e:d9:c4:85:21:63:
                    2e:2c:ba:1e:64:97:82:af:34:5c:1f:65:85:95:4e:
                    c2:d1:d5:8c:03:1d:67:68:62:c8:98:4b:9b:d1:5d:
                    a3:14:9e:8d:9e:36:97:b6:92:4b:71:31:4a:6a:49:
                    c4:b8:28:2f:9f:f0:ef:d9:92:ae:6f:46:9a:1e:2f:
                    cb:d0:f7:17:f3:6b:1b:aa:31:0d:b5:9f:69:e2:b9:
                    e9:33:84:4e:4f:61:dd:ad:52:b7:29:f5:79:5a:9a:
                    cc:86:6d:89:84:c5:94:bd:c8:ef:2e:ee:60:ab:d4:
                    19:b0:66:82:6e:71:24:37:b3:19:41:73:c7:28:04:
                    4e:78:03:91:9a:be:f1:36:61:06:91:4f:ac:a2:07:
                    63:cb:b9:a4:4f:4f:9c:92:96:34:fc:5c:2c:be:95:
                    33:bc:08:4d:9b:5f:28:bb:87:06:23:2e:03:43:e0:
                    ca:d1:08:b3:1e:ef:3a:78:6d:8e:ef:30:47:7f:c1:
                    3f:75:0d:7a:c2:f9:73:cd:46:4c:ff:b3:8c:bf:dc:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B3:0B:6D:3D:CD:51:E6:DB:A8:40:1E:69:C3:C3:75:FF:7D:5E:23
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e382e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:1a:9e:ba:d5:7c:7b:bf:45:3f:5c:1e:5b:d2:64:5b:2f:
         ed:89:de:a1:48:33:20:0a:b5:05:f4:de:e7:ed:2a:18:1e:87:
         99:99:55:2e:f4:43:50:e4:e9:80:fe:a1:e9:82:11:cf:44:29:
         2b:88:c2:34:1d:15:af:8c:de:3c:6d:19:6d:cf:b0:bf:28:f8:
         45:f4:9c:1f:f1:ef:39:5b:31:94:f2:71:ba:e2:09:d0:a7:94:
         90:7e:ba:7a:cf:fd:c9:75:46:bc:12:e8:2a:52:c5:fd:d1:0c:
         17:0e:7d:f1:44:3e:9c:c2:e9:88:b8:a1:2c:1f:61:a7:dc:ad:
         7c:ab:de:2b:0a:e6:61:bf:81:b7:a7:68:f5:2b:f5:7f:c8:24:
         1d:ca:29:b2:88:0b:cf:35:ac:cd:d4:dc:81:42:ea:32:01:40:
         e8:ff:1a:bf:b4:1f:bf:07:1d:6f:7f:bb:ea:37:59:d3:8c:40:
         a9:72:49:d6:34:70:01:34:2b:f4:15:02:98:96:05:e4:0e:6f:
         5f:f0:ca:ad:57:62:97:34:7b:44:61:a9:c8:bd:1b:78:60:13:
         13:f6:86:68:b0:6d:53:9b:7f:3c:3b:fb:ae:4e:f1:60:0a:e0:
         ec:7e:a2:63:c9:5f:b5:6b:20:bc:51:e4:91:fd:50:27:ef:58:
         64:61:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:51 2026 by rpki-client