Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          tQXNitmGeAMgOOGQB3ec1heHIIFTsXEMkt084dnk3c0=
Subject key identifier:   A4:E3:47:1A:7C:24:83:2D:ED:1A:CE:8A:07:F5:B9:A8:98:0F:D1:95
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       69A87519E1BE64C9DA6E18DC99BD5EFEAAA62ABB
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 05 Feb 2026 05:30:05 +0000
ROA not before:           Thu 05 Feb 2026 05:25:05 +0000
ROA not after:            Thu 04 Feb 2027 05:30:05 +0000
asID:                     22177
IP address blocks:        200.162.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a8:75:19:e1:be:64:c9:da:6e:18:dc:99:bd:5e:fe:aa:a6:2a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Feb  5 05:25:05 2026 GMT
            Not After : Feb  4 05:30:05 2027 GMT
        Subject: CN=A4E3471A7C24832DED1ACE8A07F5B9A8980FD195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:ba:f2:1d:60:f8:79:b6:f6:07:b5:bc:af:
                    a3:54:d4:57:3a:12:99:ae:1e:17:16:fe:21:08:ab:
                    9c:6b:0d:79:20:5b:a3:14:b5:da:8c:79:6d:51:90:
                    e3:f8:30:ef:18:3b:75:10:6c:0e:3a:70:9a:ca:64:
                    50:31:ae:79:e8:2d:58:38:c2:14:34:dd:dd:8f:8f:
                    75:01:fd:37:6c:6a:56:3a:b5:55:cc:72:fe:75:47:
                    fe:fe:52:09:08:0e:d8:e2:ee:dc:de:cd:ef:1c:33:
                    f6:7d:4f:15:2c:99:77:06:67:d1:cf:24:e3:86:89:
                    46:6e:95:79:3e:c2:b4:1f:fd:40:17:43:48:3d:a9:
                    18:fc:b3:0f:8d:ec:b5:35:9f:cb:8f:db:c5:13:cb:
                    5d:04:29:2c:25:0c:a4:16:9e:31:e3:67:c9:b8:0b:
                    d5:26:9d:a4:4e:d0:d0:bc:6a:7b:22:41:d2:2d:4c:
                    9f:05:9a:05:9d:09:99:38:60:bc:bb:6c:6b:4e:f2:
                    df:68:e7:6c:43:60:a5:b4:ae:10:cc:32:70:8b:70:
                    d2:85:6e:9e:5f:9c:9a:33:98:d1:ed:ee:92:d1:c6:
                    8d:48:cc:a5:a1:a5:5d:c9:ea:e7:79:19:7c:d5:97:
                    76:fe:7f:04:f2:37:70:de:e6:06:60:d4:a3:5a:18:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:47:1A:7C:24:83:2D:ED:1A:CE:8A:07:F5:B9:A8:98:0F:D1:95
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3134332e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:11:90:44:da:31:2f:ce:5f:a8:f0:5f:57:b8:c2:8b:1c:68:
         2f:ed:9e:22:e3:b8:c6:fc:34:00:7b:8e:0e:bb:7c:f4:cb:84:
         4c:17:8a:0b:a1:94:11:b1:74:df:66:51:16:70:42:60:e6:36:
         08:3e:af:2b:08:86:6a:7f:4a:b6:10:78:9a:7a:b3:ab:df:cf:
         10:ed:6a:d3:2c:8d:6b:64:fe:90:c2:e2:5a:55:fd:58:2e:a4:
         76:7d:43:72:b0:a9:6a:f0:fc:c8:74:0d:8d:6f:26:2a:56:f2:
         8c:0e:20:d8:38:44:5b:76:00:3b:42:c3:a3:22:c1:78:8d:7b:
         a8:e5:d2:ab:af:bf:52:0d:d4:e0:42:2e:ab:a2:b0:fb:81:4f:
         4a:d7:86:a4:06:f1:c2:98:61:7d:be:9f:b4:ed:b2:6f:32:4d:
         1b:b2:ac:68:34:d5:9a:88:e7:81:14:aa:ea:8d:96:83:6e:fd:
         e7:f2:a2:fd:29:53:e8:c2:31:df:49:db:e8:8d:f6:d2:f0:89:
         a9:50:b2:b4:a7:a1:82:dc:ab:b4:10:93:52:2d:83:4a:bf:a4:
         5e:4b:13:d5:aa:1e:13:2d:0f:13:24:12:24:cb:13:50:60:63:
         c6:fa:ca:52:43:72:47:30:28:8f:b1:50:bf:f0:bd:98:f5:aa:
         e7:30:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:18 2026 by rpki-client