Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39302e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e39302e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          RUzz+MSTQwBHkuuTjARzjUySndiI7RqhDFNnJ2VlqEQ=
Subject key identifier:   B0:59:2C:42:E9:23:43:45:1E:7E:33:CD:6F:A1:0F:44:85:AF:10:80
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       530853B683A0628D8264986F93C2A3DFDEB88076
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39302e302f32342d3234203d3e20323730323735.roa
Signing time:             Thu 05 Feb 2026 07:00:32 +0000
ROA not before:           Thu 05 Feb 2026 06:55:32 +0000
ROA not after:            Thu 04 Feb 2027 07:00:32 +0000
asID:                     270275
IP address blocks:        200.124.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:08:53:b6:83:a0:62:8d:82:64:98:6f:93:c2:a3:df:de:b8:80:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Feb  5 06:55:32 2026 GMT
            Not After : Feb  4 07:00:32 2027 GMT
        Subject: CN=B0592C42E92343451E7E33CD6FA10F4485AF1080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:ef:93:2b:5b:5f:77:17:22:89:bd:c4:09:
                    e8:b7:75:2e:00:0e:24:85:00:3d:4e:24:b6:cf:35:
                    87:99:f1:0f:f9:f9:b1:eb:ec:bd:11:10:90:b1:8c:
                    e4:fb:e6:ef:97:a3:8a:68:ef:7a:f0:ff:f4:1d:41:
                    47:e4:29:ec:1e:ab:af:e5:32:14:f8:22:bc:f6:8d:
                    70:55:1c:b1:4b:30:b8:59:de:34:2d:c7:05:ef:a7:
                    65:fd:3c:f4:72:a6:a1:18:26:4f:29:3c:2d:a5:68:
                    c8:b9:e0:6d:59:b0:7b:52:8e:79:5e:89:a0:b4:01:
                    75:a3:df:bf:7f:34:00:81:39:b8:0f:1f:5b:75:89:
                    49:44:a0:4f:8d:2b:83:a9:fd:1c:af:38:f5:d0:31:
                    01:82:3b:d4:48:4a:53:69:c9:ca:1d:2f:85:24:7b:
                    60:d8:c0:f4:c8:8c:04:f6:ca:ec:30:90:59:3b:ca:
                    d1:ad:1d:38:13:c7:94:61:b7:d7:f1:36:14:b7:30:
                    24:4a:9e:9d:be:65:d6:23:13:d6:dd:47:c9:91:a1:
                    fe:14:a3:32:1d:99:db:f1:8c:8f:d8:0a:6e:43:95:
                    4b:4b:8b:ce:8c:ab:60:33:a5:ba:b1:53:55:f6:28:
                    83:f3:94:8b:e2:f3:a6:05:76:9f:6d:2d:d5:54:17:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:59:2C:42:E9:23:43:45:1E:7E:33:CD:6F:A1:0F:44:85:AF:10:80
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e39302e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:30:03:a7:fb:dd:22:ee:f3:4d:6f:8b:c5:19:e4:a8:45:53:
         11:8b:cb:f2:2b:44:b8:62:d0:bf:76:3f:06:5a:85:26:d8:f8:
         49:9c:bc:ac:62:27:72:97:cf:c8:95:23:bc:54:21:93:2a:98:
         64:76:b1:63:55:c2:c3:7b:d5:b0:7e:54:31:b8:8f:e9:4c:81:
         f6:c8:58:85:20:2c:96:3b:6d:92:cb:85:11:df:73:30:e9:cd:
         96:3b:1a:91:ca:6b:30:d9:2e:64:94:de:1f:3f:1b:69:95:87:
         7e:dd:1f:46:79:90:47:f9:9b:99:10:65:f7:87:35:db:12:ec:
         e4:61:a2:fc:0b:78:ba:02:6a:df:bd:e9:85:80:0c:3c:06:a8:
         73:1d:b4:48:c5:b3:d0:18:81:61:87:2a:0c:a2:b4:b2:8c:53:
         85:58:7b:c2:e8:b1:92:b3:3a:0d:42:9f:fc:47:e2:13:a8:85:
         fa:7d:ed:0a:a6:bd:aa:15:61:64:36:5c:26:6a:83:5c:e6:46:
         c1:36:2c:72:98:85:f2:68:ca:16:47:63:e9:d0:cc:eb:f9:16:
         26:9e:d4:96:0d:dd:a1:09:22:d7:27:f8:a7:0e:b4:cf:d7:ee:
         9c:25:51:2a:7c:99:84:14:f2:b7:ed:80:41:05:45:f6:1c:8d:
         d0:18:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:51:05 2026 by rpki-client