Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa
File:                     3230302e35332e392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          sHGTI7UWFBUywHqcLx88XnQGUZYu+8EqdFCACVWzQ2w=
Subject key identifier:   DE:A3:32:C2:75:46:CF:DE:64:87:30:41:10:72:8C:D7:51:0D:E1:5A
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       51401765B6389A9BB7620B6C75049096DBEDACA6
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     52977
IP address blocks:        200.53.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:40:17:65:b6:38:9a:9b:b7:62:0b:6c:75:04:90:96:db:ed:ac:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=DEA332C27546CFDE6487304110728CD7510DE15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:ff:da:9b:e8:a8:34:b4:84:2f:eb:a0:40:
                    6b:f3:d0:36:21:88:42:02:5e:37:47:ee:d0:03:06:
                    d1:1f:f0:ed:00:3f:ba:1d:90:13:79:f9:00:01:eb:
                    87:ab:5b:e1:71:e7:3e:0a:1c:e0:cb:94:7d:96:19:
                    31:7c:e7:44:0c:0a:cd:95:e0:39:f4:d6:67:b6:c4:
                    b1:26:40:2e:b1:17:2b:6c:7d:30:1f:bb:2c:b8:2b:
                    8d:ed:be:f3:e1:e1:52:d9:ee:14:9a:86:5a:b4:19:
                    bc:4b:0d:cb:94:c1:c1:38:e2:dd:c7:73:03:d0:bd:
                    a9:2c:43:79:ad:2f:0b:0c:7f:12:22:fe:4c:fa:78:
                    2f:67:eb:1f:43:2c:ea:4c:ac:28:67:f4:f7:fa:8f:
                    03:66:57:0e:a6:d8:49:f1:c3:86:7e:70:46:37:0d:
                    ef:e3:ea:36:b0:75:36:30:30:94:fd:28:2a:68:f6:
                    6c:56:2d:81:7e:0a:8e:d5:59:f2:ce:4a:13:86:ba:
                    d0:d9:00:72:6a:6c:7f:fd:af:a1:74:b0:44:f4:da:
                    b3:e6:c4:fc:6d:3a:10:da:e7:5a:16:72:37:f9:9d:
                    e6:63:38:81:e8:c2:ff:b2:99:91:b6:ba:5b:c9:f5:
                    b4:fb:f8:3c:fb:db:84:a4:3b:05:24:e8:94:83:e2:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A3:32:C2:75:46:CF:DE:64:87:30:41:10:72:8C:D7:51:0D:E1:5A
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3230302e35332e392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:26:c0:e0:46:15:a3:20:65:3b:24:4b:bf:c6:46:cf:60:cc:
         94:d7:c4:af:98:f0:a3:50:69:90:e4:49:27:01:2b:c7:30:2d:
         b7:4a:70:bd:c0:01:84:3c:65:e0:a0:d5:37:ec:b4:39:44:89:
         7c:91:c4:d2:d4:c8:a8:31:6f:3f:59:6a:07:3d:15:12:3a:fd:
         42:71:e5:3d:9e:b8:e4:18:9a:ea:cd:77:a6:64:a8:79:de:04:
         7c:0a:17:dd:ac:3b:f8:80:52:59:f2:12:36:70:73:25:eb:cc:
         a9:61:49:1a:13:21:60:94:ee:eb:1d:d9:b8:71:21:1c:12:0d:
         15:44:9d:01:7c:09:23:33:2b:ef:69:1f:1e:44:0a:02:16:6a:
         03:cd:37:cf:77:7b:24:ef:fd:99:dd:bc:1f:3a:93:3b:88:de:
         d3:38:5e:fe:0d:39:30:86:c3:e9:7a:fd:2a:f4:2e:a6:0f:70:
         e8:0b:c3:bc:8c:2d:13:6d:cb:a4:d7:70:58:d0:88:82:ed:05:
         ee:38:ce:dd:51:b8:96:95:c8:40:ab:9f:03:29:a5:85:f9:9d:
         ec:cd:15:47:9a:ca:2f:d2:88:b2:a3:bb:77:11:38:c1:e4:c3:
         73:ea:98:ee:7e:01:87:b8:4b:dc:dd:ea:11:db:80:4f:dc:ad:
         56:44:26:27
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUUAXZbY4mpu3YgtsdQSQltvtrKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNjAyMDQxOTU1MDBaFw0yNzAyMDMyMDAwMDBaMDMxMTAvBgNV
BAMTKERFQTMzMkMyNzU0NkNGREU2NDg3MzA0MTEwNzI4Q0Q3NTEwREUxNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW3f/am+ioNLSEL+ugQGvz0DYh
iEICXjdH7tADBtEf8O0AP7odkBN5+QAB64erW+Fx5z4KHODLlH2WGTF850QMCs2V
4Dn01me2xLEmQC6xFytsfTAfuyy4K43tvvPh4VLZ7hSahlq0GbxLDcuUwcE44t3H
cwPQvaksQ3mtLwsMfxIi/kz6eC9n6x9DLOpMrChn9Pf6jwNmVw6m2Enxw4Z+cEY3
De/j6jawdTYwMJT9KCpo9mxWLYF+Co7VWfLOShOGutDZAHJqbH/9r6F0sET02rPm
xPxtOhDa51oWcjf5neZjOIHowv+ymZG2ulvJ9bT7+Dz724SkOwUk6JSD4rD1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU3qMywnVGz95khzBBEHKM11EN4VowHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzIzMDMwMmUzNTMzMmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzOTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADINQkwDQYJKoZIhvcNAQELBQADggEBANomwOBGFaMgZTsk
S7/GRs9gzJTXxK+Y8KNQaZDkSScBK8cwLbdKcL3AAYQ8ZeCg1TfstDlEiXyRxNLU
yKgxbz9Zagc9FRI6/UJx5T2euOQYmurNd6ZkqHneBHwKF92sO/iAUlnyEjZwcyXr
zKlhSRoTIWCU7usd2bhxIRwSDRVEnQF8CSMzK+9pHx5ECgIWagPNN893eyTv/Znd
vB86kzuI3tM4Xv4NOTCGw+l6/Sr0LqYPcOgLw7yMLRNty6TXcFjQiILtBe44zt1R
uJaVyECrnwMppYX5nezNFUeayi/SiLKju3cROMHkw3PqmO5+AYe4S9zd6hHbgE/c
rVZEJic=
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:51:00 2026 by rpki-client