Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          v9qbYBbhHMIjxA/n1XkVL9g+IEiwJRsijmZjf6laD7M=
Subject key identifier:   F7:44:33:E2:4E:BD:FE:F8:35:E7:2D:8C:67:FD:8B:3D:F6:04:8A:52
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       3BC19D59C1ACA493D1F4CB46D7EFD39B5DC31628
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:07 +0000
ROA not before:           Thu 05 Feb 2026 05:25:07 +0000
ROA not after:            Thu 04 Feb 2027 05:30:07 +0000
asID:                     22177
IP address blocks:        200.162.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c1:9d:59:c1:ac:a4:93:d1:f4:cb:46:d7:ef:d3:9b:5d:c3:16:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:07 2026 GMT
            Not After : Feb  4 05:30:07 2027 GMT
        Subject: CN=F74433E24EBDFEF835E72D8C67FD8B3DF6048A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:e7:2d:63:a3:41:c8:b0:0d:08:0d:37:3e:
                    f3:78:02:c1:39:6b:21:94:1f:3a:fb:f4:ef:6b:79:
                    85:fd:e1:4e:d6:d3:ec:08:72:c5:6b:46:da:a1:4c:
                    a6:63:21:ee:41:67:a8:d4:d6:43:fd:fc:6f:b1:26:
                    06:aa:e9:f3:fe:52:3a:ed:0f:97:73:9d:a1:fc:f1:
                    2e:df:ef:31:cb:a9:5a:2e:2f:d7:7d:f9:97:40:60:
                    37:0c:27:b5:3a:57:a6:78:6e:d5:4a:db:8e:85:0a:
                    b0:0b:8f:96:01:4a:45:f9:58:94:81:db:ea:82:80:
                    cc:53:d0:79:87:7d:a9:ac:10:a2:c9:91:51:3d:7a:
                    38:f8:4b:91:9c:5a:39:42:42:a8:1a:8e:96:88:8a:
                    fa:07:bd:ab:c0:93:74:28:31:e6:3f:e5:17:dc:9d:
                    a4:6c:07:59:87:93:5f:07:63:6c:24:24:fc:8b:ad:
                    86:df:f2:74:0d:a8:24:a5:ac:1e:12:8c:90:90:c4:
                    58:5b:a7:77:44:b3:f5:f9:9a:be:81:b5:e4:21:70:
                    10:3a:a7:48:f1:f4:ba:86:1e:4f:8a:bc:36:56:6a:
                    72:89:71:ba:de:48:67:41:f4:d3:7a:d7:58:6e:2c:
                    74:28:d3:d3:94:fd:ac:4c:3b:2a:ea:54:b3:87:30:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:44:33:E2:4E:BD:FE:F8:35:E7:2D:8C:67:FD:8B:3D:F6:04:8A:52
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134312e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f9:84:e4:12:43:1a:a3:7c:7d:e4:27:f4:57:30:b5:5d:a2:
         93:6a:4f:90:fb:75:4a:2d:41:fb:4e:09:1f:ff:6d:88:63:bc:
         f4:a8:37:4a:6e:8b:e2:54:af:d8:61:ff:70:13:04:31:a9:16:
         97:00:9d:0c:f3:50:23:fa:20:2c:ac:6b:6f:e3:bb:6a:90:30:
         34:6b:21:88:d5:b6:96:66:82:87:40:ec:7d:b9:f5:cf:d7:0c:
         8c:7c:27:3f:5d:14:25:f1:dd:18:7a:09:b7:b4:4c:c5:08:7b:
         16:fd:5b:1d:63:10:e5:13:4f:41:90:14:bf:b6:64:e8:35:02:
         c9:63:8d:b7:30:91:a3:fe:62:85:f8:21:8c:ef:12:16:e2:e4:
         87:ec:ee:6d:50:f4:4a:ff:5c:2a:99:83:7c:70:64:10:d0:27:
         1a:38:cf:b2:ad:e9:8c:31:8f:a3:b5:28:a4:b9:69:5b:3d:f9:
         8c:25:bc:20:32:35:30:3a:a1:a5:0c:4b:a8:43:ee:63:26:47:
         75:b9:71:75:ac:30:76:7a:eb:aa:74:ed:b2:88:e5:62:5a:70:
         86:c3:fe:45:d0:ed:00:be:b4:c9:c1:98:72:cf:88:eb:d7:d0:
         2f:b8:d3:26:68:e4:f6:56:ff:a7:90:23:9f:00:57:05:47:d8:
         9a:4f:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:13:31 2026 by rpki-client