Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          pDoo1WhOG32kg0PuB5rXZ49eoVIgpk01MJ2NFJEG98g=
Subject key identifier:   7F:44:D0:9E:D8:F9:6E:48:CA:38:BB:40:5E:F4:A6:D7:3F:9F:91:C5
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       18062FCA6916473F7373DC5A886942B6E60BD61C
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:07 +0000
ROA not before:           Thu 05 Feb 2026 05:25:07 +0000
ROA not after:            Thu 04 Feb 2027 05:30:07 +0000
asID:                     22177
IP address blocks:        200.162.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:06:2f:ca:69:16:47:3f:73:73:dc:5a:88:69:42:b6:e6:0b:d6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:07 2026 GMT
            Not After : Feb  4 05:30:07 2027 GMT
        Subject: CN=7F44D09ED8F96E48CA38BB405EF4A6D73F9F91C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:25:db:99:c0:16:bc:34:f7:3d:cd:27:d9:
                    e2:1f:93:71:ca:42:3a:c7:3c:cd:1e:25:86:bf:c5:
                    a4:0a:c6:61:7f:2e:09:d0:fb:84:e3:ae:91:f8:2b:
                    46:bb:f2:92:3f:54:21:6d:6e:4f:c8:4d:23:9e:1e:
                    cc:94:40:e1:3c:0f:84:db:5f:f9:52:34:b4:61:26:
                    68:d5:22:6b:1e:b4:53:b3:3e:fc:02:f6:29:5c:10:
                    68:ed:bb:0c:af:c0:03:53:4c:6f:4b:c1:ae:3b:90:
                    2a:5c:76:be:7d:e8:b9:9e:98:4d:5e:17:aa:2e:69:
                    d1:dc:d7:f7:bd:15:1f:84:42:96:26:9a:13:a7:96:
                    68:c8:db:f9:c6:11:72:a9:99:7b:19:4a:58:c1:67:
                    41:b3:90:ed:24:2c:16:78:a1:39:73:74:3e:08:a5:
                    29:69:03:6b:68:4e:5a:ac:95:d2:7a:c3:68:5f:c4:
                    f7:42:c9:19:85:0f:1f:e6:5b:7e:1b:69:51:64:39:
                    96:d1:21:89:77:80:97:38:56:dd:49:36:2f:a6:78:
                    ec:d4:c6:95:4c:12:f7:42:71:c2:ce:14:23:12:3f:
                    aa:a1:b6:31:15:75:09:84:a3:f7:26:21:5d:4f:17:
                    af:5f:d5:ad:26:83:de:2a:fb:b6:b1:fa:d5:3e:f6:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:44:D0:9E:D8:F9:6E:48:CA:38:BB:40:5E:F4:A6:D7:3F:9F:91:C5
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:ac:b3:72:bd:1e:16:40:a1:84:d9:78:47:a4:de:22:28:
         b1:b8:f4:e6:56:17:2f:9f:d8:fd:85:d1:5c:8b:b3:87:f6:c0:
         6e:f5:73:17:f0:98:54:17:f6:c0:8a:86:a8:48:80:68:4e:07:
         4c:4b:18:25:39:d5:cd:2a:2e:14:17:6d:69:6b:d6:04:3d:df:
         61:ba:2c:f4:c2:fc:98:1d:db:49:8e:b7:f5:b9:b5:47:b7:4e:
         5a:1a:f8:dc:17:2b:93:d6:e8:bb:e8:fe:aa:72:a6:68:da:60:
         81:08:73:06:80:fb:0a:11:7d:f6:45:a6:56:cc:62:92:cf:14:
         0e:35:03:7c:9c:a1:34:6e:fe:4e:a4:8a:82:e8:78:2e:e1:5b:
         28:3a:bf:6c:2b:8a:64:d8:74:b9:1a:b6:56:76:f3:7e:b0:b3:
         e1:7b:e9:5d:1d:b8:2a:87:81:87:ac:4b:8e:15:36:f1:f9:0a:
         be:f2:8d:52:51:6d:5c:a0:25:e8:ef:63:aa:ab:87:65:8e:53:
         9d:17:d2:ae:af:1c:a8:84:d7:72:77:30:53:02:50:10:3b:40:
         94:f4:6b:fd:52:d9:b1:1c:11:39:79:a4:90:08:07:de:d1:a1:
         5e:96:39:13:d5:bb:ac:ca:b3:6c:5e:c1:b0:9c:62:84:78:ab:
         89:96:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:20 2026 by rpki-client