Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa (raw, json)
Hash identifier:          0+CRX28ivABD7/03XOYQjt/LmyhXhinDYUrbWgzBU/4=
Subject key identifier:   49:D6:36:90:E6:B2:CD:8F:21:4C:6A:A1:2F:87:33:78:8B:AE:E9:32
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       668FE637CEBD09F3122583E74CDAF9ED2AAF164B
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:08 +0000
ROA not before:           Thu 05 Feb 2026 05:25:08 +0000
ROA not after:            Thu 04 Feb 2027 05:30:08 +0000
asID:                     22177
IP address blocks:        200.162.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8f:e6:37:ce:bd:09:f3:12:25:83:e7:4c:da:f9:ed:2a:af:16:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:08 2026 GMT
            Not After : Feb  4 05:30:08 2027 GMT
        Subject: CN=49D63690E6B2CD8F214C6AA12F8733788BAEE932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:55:29:43:00:4b:6d:55:41:13:8a:d0:ea:
                    b1:b0:4d:d3:bc:49:b3:1e:3e:9d:66:42:44:af:5b:
                    7e:4b:8a:69:ff:a5:e9:4f:46:a9:6d:47:90:35:f6:
                    65:17:9e:97:72:34:e3:2b:71:5f:92:a7:c6:b7:47:
                    bb:75:85:41:7c:19:bd:1b:3a:40:df:9b:2b:87:36:
                    2c:45:45:32:0f:d6:a6:72:d4:aa:de:49:6e:64:ad:
                    d3:e5:5d:98:0d:a4:63:7c:96:a8:58:dd:cd:f9:6f:
                    b8:c0:c4:cb:90:4a:4b:54:1f:d7:37:f6:2d:f5:f3:
                    f9:91:2b:a3:b7:b2:32:ac:0a:58:e7:05:43:40:a4:
                    3e:88:4e:ab:b9:ad:aa:48:ee:e5:c7:5d:68:ef:1f:
                    ca:dd:38:4b:d5:af:51:62:a3:d5:50:0c:fb:7d:62:
                    46:d3:5e:b0:ac:f5:98:e1:85:e0:fa:40:74:12:58:
                    a9:ab:6b:0d:14:66:84:26:68:b3:b7:57:95:d8:aa:
                    be:9b:66:e9:76:f4:ea:70:ee:0c:93:26:7b:20:f4:
                    9a:b2:17:fa:4d:d5:e7:56:40:4b:07:04:53:04:fb:
                    ff:e3:00:55:19:5c:e8:5d:d7:13:1b:c3:75:d0:84:
                    27:7f:b6:55:79:2f:4c:8f:fa:2a:de:fc:31:c7:43:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D6:36:90:E6:B2:CD:8F:21:4C:6A:A1:2F:87:33:78:8B:AE:E9:32
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:7b:d2:1e:54:43:7e:14:0d:42:d8:ca:67:b5:dc:9f:e7:
         03:6d:78:2a:a7:4c:fe:ee:36:92:04:04:f7:67:9e:ef:9c:99:
         1f:cc:8e:28:aa:98:2b:fa:4c:66:7c:d7:94:62:93:74:8a:89:
         93:e2:7e:90:d8:75:e1:b3:0f:20:4a:e0:cc:be:3e:54:6c:4d:
         27:cb:2c:79:7f:06:f0:05:87:61:b6:c8:51:5d:db:85:93:81:
         fc:b2:00:c4:12:89:f5:22:8b:c0:51:0d:4c:98:c6:86:bf:da:
         32:37:6b:47:db:11:b9:5d:41:57:b3:dd:23:09:79:f2:7c:51:
         50:a8:1a:bb:21:a2:48:ef:fa:bd:e1:68:7d:c9:b9:33:ab:9c:
         11:b5:3c:e3:0b:80:68:d3:03:7f:8e:c7:cd:52:c7:f4:e5:0f:
         79:4d:b4:2a:28:64:5f:b8:16:8f:79:7e:da:ef:23:6a:6c:47:
         c2:a9:69:c6:fb:a0:a6:3b:78:4e:2f:50:3f:24:7d:98:58:80:
         7b:ca:9f:ca:ac:56:1c:02:28:11:f4:3f:89:d6:1e:75:8e:27:
         e0:a9:20:1e:d9:04:54:8d:83:3c:58:cd:13:be:7e:e1:a8:93:
         3f:18:24:62:8f:b4:e6:98:d9:e9:eb:3f:a4:40:c0:dc:d5:95:
         6b:ac:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:10:27 2026 by rpki-client