Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          HIMR8299sImbGEhWgoK4tnpERYMib9Wd7IHIk7qtkqI=
Subject key identifier:   67:D2:4C:7F:3B:C8:51:1B:79:DC:64:FB:10:EF:4F:B8:B7:FA:67:3C
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       6EC8A7DD549DC1362ACB135460C32509D7169EFF
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:07 +0000
ROA not before:           Thu 05 Feb 2026 05:25:07 +0000
ROA not after:            Thu 04 Feb 2027 05:30:07 +0000
asID:                     22177
IP address blocks:        200.162.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c8:a7:dd:54:9d:c1:36:2a:cb:13:54:60:c3:25:09:d7:16:9e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:07 2026 GMT
            Not After : Feb  4 05:30:07 2027 GMT
        Subject: CN=67D24C7F3BC8511B79DC64FB10EF4FB8B7FA673C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c7:7d:bc:c0:25:f0:83:03:75:27:a7:16:50:
                    ce:e0:d8:fa:ee:0c:61:5e:a3:4e:79:91:09:f3:03:
                    73:b6:ef:99:3d:26:74:8f:2e:41:60:c5:51:2f:24:
                    6c:e5:66:41:54:1c:6f:6a:b9:2f:4f:38:72:5d:07:
                    2d:78:52:b0:0d:11:c6:a7:91:65:fd:16:f6:c2:34:
                    a6:ee:70:b6:1f:1d:0e:39:79:18:9e:6a:9f:25:7c:
                    7a:fa:ea:c4:f0:25:e5:d7:9d:42:05:cf:a8:d6:f3:
                    74:b4:06:4b:02:e2:e8:86:b2:b9:a8:a6:be:96:d2:
                    ed:ff:72:8c:de:4e:0c:a3:ba:6a:c4:b7:56:5f:0c:
                    a6:ab:72:7f:b9:88:ac:f0:35:84:86:f6:d3:bf:02:
                    5c:10:bc:1d:00:b5:a7:97:57:6a:07:bd:18:8a:5b:
                    3d:3f:cc:26:c1:44:e6:bc:f7:2b:18:4f:9d:ae:41:
                    6e:cf:9a:55:30:ed:18:27:42:55:7e:87:22:62:51:
                    b2:57:da:84:9d:37:3a:6a:c9:db:3d:eb:68:06:a1:
                    47:1a:c2:bd:89:c8:45:47:85:2c:71:49:35:9b:1a:
                    7c:fc:29:4d:6f:e0:7c:7b:44:34:54:d3:47:e8:05:
                    44:c3:e3:e2:70:4e:4b:25:cd:90:d1:7f:d6:9c:4e:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D2:4C:7F:3B:C8:51:1B:79:DC:64:FB:10:EF:4F:B8:B7:FA:67:3C
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:13:0c:38:63:bb:f1:dd:d5:da:b8:16:72:7d:a2:d0:d2:b0:
         85:49:60:9a:a0:aa:1c:c2:4a:80:16:5a:68:eb:04:60:62:eb:
         ae:13:48:fb:09:f9:6f:e6:4d:be:60:b4:f1:0d:a3:43:91:42:
         15:e7:d4:66:c4:ed:e8:94:01:da:cc:7e:0f:17:5c:de:b2:0d:
         26:e6:db:cf:12:cb:f9:0a:db:3b:ed:b3:f6:03:d7:39:4d:14:
         01:b9:b6:f2:16:e1:66:56:44:30:16:30:77:65:e9:06:cd:3a:
         04:53:aa:bd:cf:f0:e6:09:f4:a2:eb:bd:03:c0:3d:bf:fe:14:
         e8:e6:9f:35:cf:5d:15:3e:fb:86:16:41:12:18:10:4d:4b:98:
         2c:dc:36:fa:25:11:47:7e:bb:a7:4a:42:6b:a1:45:f1:a1:db:
         e2:70:3a:0d:43:de:c6:a1:e0:38:b8:ed:6a:5a:4d:03:60:d5:
         fb:a9:2e:84:07:d4:fe:81:86:3f:37:b1:a9:24:b2:c8:be:54:
         0e:d4:0f:38:ae:b5:ab:7c:4c:18:7f:7f:bd:60:95:ef:c8:7a:
         65:c8:d5:5e:f6:6e:e3:63:16:01:16:e0:e1:a3:ef:fd:8e:41:
         62:cc:fb:28:4b:4b:5b:a4:e4:82:22:94:d2:8c:9b:41:8f:fa:
         0c:ec:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:24 2026 by rpki-client