Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          a7RfiYF9zwob9+uSUJt+vTzhAqsLL4WlYxkM+y7K5BQ=
Subject key identifier:   ED:50:05:2C:13:FB:7D:C0:8B:78:2A:9B:38:3F:95:93:AB:3F:D1:CE
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       1822EB5FA30FD36656D242591D1A8F9C0B29ED93
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:05 +0000
ROA not before:           Thu 05 Feb 2026 05:25:05 +0000
ROA not after:            Thu 04 Feb 2027 05:30:05 +0000
asID:                     22177
IP address blocks:        200.162.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:22:eb:5f:a3:0f:d3:66:56:d2:42:59:1d:1a:8f:9c:0b:29:ed:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:05 2026 GMT
            Not After : Feb  4 05:30:05 2027 GMT
        Subject: CN=ED50052C13FB7DC08B782A9B383F9593AB3FD1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:cd:5e:1d:1d:8d:2d:8e:d7:d0:f3:8b:ab:
                    e2:8f:83:6a:e5:08:60:78:ad:0a:51:ae:9c:fa:24:
                    f6:8b:1e:49:44:d5:76:e9:07:dd:cb:28:ee:b8:e6:
                    3f:46:11:c7:e0:17:2d:d0:09:85:8c:4b:70:a0:bd:
                    d9:50:df:55:98:75:71:fe:00:f6:cd:d1:2d:97:fc:
                    eb:d9:ef:85:58:93:34:19:6b:22:05:a0:3d:15:28:
                    aa:ec:6b:5a:88:3f:f9:08:dd:dd:03:5f:51:af:66:
                    ae:17:2b:5c:ff:16:00:3a:ab:f0:d0:7e:cf:a7:19:
                    ae:1e:48:15:91:38:39:04:52:10:aa:49:c7:2b:a2:
                    28:24:78:4c:54:14:ca:6b:75:64:47:bb:6a:2a:d3:
                    c8:38:66:fb:36:25:61:b5:33:d5:b4:0f:c2:64:73:
                    04:7a:45:73:2f:57:82:0e:ae:ad:fa:09:d0:01:c2:
                    9a:a6:d2:f1:ac:73:a6:f7:a8:d2:6c:69:4b:d5:4e:
                    e2:08:82:16:ca:95:06:c6:d4:43:7c:5b:aa:c2:0d:
                    ae:2b:87:aa:d4:4a:5f:20:69:b0:92:81:c1:bf:23:
                    5d:e2:b2:64:f9:b0:00:b6:c9:a2:5c:6f:d2:02:0a:
                    2a:59:5f:1e:ae:c5:18:5a:1b:ae:c0:56:e8:65:b1:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:50:05:2C:13:FB:7D:C0:8B:78:2A:9B:38:3F:95:93:AB:3F:D1:CE
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133392e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:df:76:75:cc:74:06:68:8f:b9:40:db:20:53:29:e6:ba:
         3a:a4:2c:38:16:be:1e:72:bb:15:06:11:8e:fb:db:fe:d0:fa:
         6a:71:03:85:1c:47:68:31:c7:26:7a:eb:44:f6:ef:26:ed:a6:
         f7:eb:83:8d:3d:2d:0a:4f:4a:a8:30:28:70:ba:94:c4:36:ab:
         f0:7f:7c:fc:1d:30:92:1b:51:26:6a:a8:a3:c7:f5:85:3a:03:
         24:e1:19:9d:60:fc:4b:b3:85:a9:6f:76:b9:cd:8f:e5:f2:ec:
         ce:22:7b:c0:ef:3f:40:1f:f2:3a:b4:49:e0:d5:9a:29:9d:c2:
         f5:27:fa:9d:f6:a5:b8:da:19:54:55:b9:2f:4f:8f:5e:39:e6:
         dc:6c:cf:dd:3b:8c:91:37:97:b4:69:aa:36:99:52:93:de:c1:
         18:bb:0f:3f:53:93:28:e6:e8:71:77:26:db:eb:33:32:d4:ee:
         34:7c:62:39:94:17:96:6c:2e:c9:37:9e:cf:88:c7:b3:b5:53:
         98:fb:6f:59:c5:f9:7f:97:73:2e:0b:98:ab:07:82:3c:ac:6c:
         c3:b7:5f:e8:dd:ad:16:c9:cf:0a:fd:0c:76:04:a5:50:26:85:
         51:bb:64:ce:38:ff:e0:e7:2d:0b:7a:07:27:67:05:cc:47:b0:
         5d:e3:5d:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGCLrX6MP02ZW0kJZHRqPnAsp7ZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNjAyMDUwNTI1MDVaFw0yNzAyMDQwNTMwMDVaMDMxMTAvBgNV
BAMTKEVENTAwNTJDMTNGQjdEQzA4Qjc4MkE5QjM4M0Y5NTkzQUIzRkQxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOs1eHR2NLY7X0POLq+KPg2rl
CGB4rQpRrpz6JPaLHklE1XbpB93LKO645j9GEcfgFy3QCYWMS3CgvdlQ31WYdXH+
APbN0S2X/OvZ74VYkzQZayIFoD0VKKrsa1qIP/kI3d0DX1GvZq4XK1z/FgA6q/DQ
fs+nGa4eSBWRODkEUhCqSccroigkeExUFMprdWRHu2oq08g4Zvs2JWG1M9W0D8Jk
cwR6RXMvV4IOrq36CdABwpqm0vGsc6b3qNJsaUvVTuIIghbKlQbG1EN8W6rCDa4r
h6rUSl8gabCSgcG/I13ismT5sAC2yaJcb9ICCipZXx6uxRhaG67AVuhlsY+3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7VAFLBP7fcCLeCqbOD+Vk6s/0c4wHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIooswDQYJKoZIhvcNAQELBQADggEBAACi33Z1
zHQGaI+5QNsgUynmujqkLDgWvh5yuxUGEY772/7Q+mpxA4UcR2gxxyZ660T27ybt
pvfrg409LQpPSqgwKHC6lMQ2q/B/fPwdMJIbUSZqqKPH9YU6AyThGZ1g/Euzhalv
drnNj+Xy7M4ie8DvP0Af8jq0SeDVmimdwvUn+p32pbjaGVRVuS9Pj1455txsz907
jJE3l7RpqjaZUpPewRi7Dz9Tkyjm6HF3JtvrMzLU7jR8YjmUF5ZsLsk3ns+Ix7O1
U5j7b1nF+X+Xcy4LmKsHgjysbMO3X+jdrRbJzwr9DHYEpVAmhVG7ZM44/+DnLQt6
BydnBcxHsF3jXbU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:38 2026 by rpki-client