Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          pbefr5ZWeTwND9dEMQRBME6fpKsWT5xVqe92el6oDi4=
Subject key identifier:   5E:E9:1B:B5:17:01:4D:7D:45:8A:4C:B6:D7:2A:A1:0B:1D:57:74:77
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       2588D8575A6C7985A2AA53EE1CCF1A9327BF664A
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa
Signing time:             Thu 05 Feb 2026 07:00:31 +0000
ROA not before:           Thu 05 Feb 2026 06:55:31 +0000
ROA not after:            Thu 04 Feb 2027 07:00:31 +0000
asID:                     270275
IP address blocks:        200.124.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:88:d8:57:5a:6c:79:85:a2:aa:53:ee:1c:cf:1a:93:27:bf:66:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Feb  5 06:55:31 2026 GMT
            Not After : Feb  4 07:00:31 2027 GMT
        Subject: CN=5EE91BB517014D7D458A4CB6D72AA10B1D577477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:f2:3c:97:16:5f:0d:0f:a9:7f:c1:47:07:
                    d8:ce:2f:b9:04:1d:38:97:ea:ea:49:db:6f:9a:b4:
                    32:0b:09:dc:f0:2b:5b:5c:81:9a:95:11:69:37:2b:
                    eb:8f:24:40:6f:4d:64:5a:8e:12:61:0b:6a:67:a3:
                    4e:a9:be:84:54:95:f9:01:5a:af:58:e5:6c:a9:44:
                    36:c7:63:39:3a:c3:90:c5:68:72:49:14:81:c1:96:
                    af:f1:1d:1e:12:9d:16:4a:55:a8:5a:8d:21:13:63:
                    bb:88:df:7b:24:ff:89:52:0a:61:ff:6d:bb:bc:1f:
                    50:da:5b:f3:0f:3b:39:5e:17:7c:05:d7:38:85:31:
                    80:a3:76:a7:5b:37:c3:57:fa:d6:62:6c:e0:6b:21:
                    27:52:18:fa:e3:aa:77:af:1e:66:e5:bf:83:46:9c:
                    58:a4:e4:90:d6:8d:d1:dc:51:c0:5c:b7:05:53:c5:
                    a6:b5:18:ee:2b:49:c1:5b:96:d4:fc:1e:67:4c:04:
                    bf:3f:12:be:4d:39:31:7a:f1:f6:3b:f5:00:d0:05:
                    92:37:16:cd:f6:82:da:1e:8a:81:bd:17:49:df:8a:
                    e5:08:33:bc:6e:c6:b4:b4:b1:9b:45:68:98:3d:5f:
                    4f:5a:7c:8a:aa:de:51:63:21:83:25:59:64:26:f1:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E9:1B:B5:17:01:4D:7D:45:8A:4C:B6:D7:2A:A1:0B:1D:57:74:77
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38392e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7c:b4:f5:d7:63:38:98:76:91:53:61:8a:6f:49:14:5b:3c:
         c5:db:df:11:85:c7:fb:0c:dd:21:63:0c:fa:fd:9e:c7:f9:ff:
         ae:f2:da:a2:61:de:bb:1b:4d:31:a9:00:7c:de:c1:93:88:66:
         13:9f:8a:db:cb:cc:fb:6e:71:9f:99:46:35:d3:6e:e8:6e:83:
         2a:92:73:2d:d5:05:ea:c6:ac:66:45:e9:95:5e:8a:8e:fd:63:
         70:66:c9:27:21:13:63:8c:51:e9:8d:d8:7d:b7:35:51:83:e4:
         66:25:d4:bb:7c:fd:bd:a6:07:97:57:47:d3:a0:52:9e:b0:5b:
         f2:de:4e:3e:1b:4a:43:39:09:7e:88:16:14:39:a7:b2:27:03:
         68:ed:a3:81:b4:e2:11:8d:df:e0:4d:53:e0:09:a1:35:0f:fd:
         0e:8f:0c:4c:75:20:ec:78:ff:aa:6e:bf:72:cc:a5:8f:2c:af:
         26:8d:59:e4:ca:a5:13:83:5f:e9:ff:47:42:03:2a:90:9c:9a:
         fc:07:00:4c:6e:8d:4e:47:ca:20:56:b4:55:70:3e:34:3e:08:
         6a:5d:b7:8d:da:44:7c:41:2c:40:1e:d1:49:f4:de:9b:ec:8c:
         40:ba:90:40:fa:c8:3f:d8:79:b1:e0:7c:75:a2:0f:98:f0:56:
         95:c6:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:36 2026 by rpki-client