Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          RrOLCM6hMdKRaEV+3EvyCtyP7u5mGgwR0kcbN90+VS4=
Subject key identifier:   1D:28:1B:84:1F:97:BA:19:80:6E:B1:72:5B:8C:25:95:34:84:04:25
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       6A4824B83A71268480D9FA7990CB9ACB832427DF
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa
Signing time:             Wed 04 Feb 2026 20:00:19 +0000
ROA not before:           Wed 04 Feb 2026 19:55:19 +0000
ROA not after:            Wed 03 Feb 2027 20:00:19 +0000
asID:                     270279
IP address blocks:        200.124.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:48:24:b8:3a:71:26:84:80:d9:fa:79:90:cb:9a:cb:83:24:27:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Feb  4 19:55:19 2026 GMT
            Not After : Feb  3 20:00:19 2027 GMT
        Subject: CN=1D281B841F97BA19806EB1725B8C259534840425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:36:e7:ab:2b:0f:4d:15:5e:5f:5a:f4:d9:
                    ba:e2:24:6b:7a:6a:8e:f1:3a:f2:5b:af:6f:91:14:
                    54:c9:28:10:4d:af:5c:d4:b4:22:c8:ce:35:93:91:
                    94:8c:c2:71:5a:9f:af:0e:72:1d:b6:2b:bd:f3:33:
                    f9:c3:cb:a3:e7:d0:5d:11:1b:a1:cc:67:20:88:ef:
                    5c:ad:95:58:3e:ce:7b:86:30:56:0b:2b:0a:e1:d9:
                    3a:c3:ec:10:01:c7:9d:8b:e9:00:ba:e0:1d:14:64:
                    90:42:70:69:44:39:9e:40:73:2b:b1:48:20:e8:4e:
                    6d:6b:8d:fc:79:c4:5e:ae:79:b5:d1:04:92:5b:e2:
                    a3:b0:f6:e9:23:00:ca:a1:1b:43:2f:9c:75:c8:e0:
                    18:b1:e5:61:e1:bd:f6:e3:86:38:52:d7:e3:30:e9:
                    26:8c:66:bd:90:40:43:27:f6:b8:04:d1:ea:d7:cc:
                    f8:ca:3c:51:75:49:5a:45:f0:83:18:78:58:7b:69:
                    f9:fb:1d:af:bc:7c:f9:b8:ae:a9:c9:d7:52:29:af:
                    d2:f8:bb:48:14:31:69:72:a5:4e:1e:09:41:b1:46:
                    55:cc:bf:82:9f:25:a6:6e:44:61:5b:50:cf:cf:af:
                    ea:54:da:8c:01:0b:f9:c2:99:37:23:5d:d1:fa:4e:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:28:1B:84:1F:97:BA:19:80:6E:B1:72:5B:8C:25:95:34:84:04:25
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137322e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:cd:41:0d:69:0d:22:ed:78:ea:a6:cc:81:c5:2b:15:b3:
         66:72:5f:f3:87:62:5b:12:6d:0a:da:5c:63:b8:ef:50:b2:8e:
         d4:b0:e9:9f:28:ac:2a:22:8d:1f:8e:7a:3a:41:a7:ba:27:15:
         b6:03:e0:08:fd:04:be:3f:fb:e9:86:07:e2:c0:ec:0f:bf:d7:
         36:1b:44:42:fc:68:28:cb:cd:cb:84:c4:e6:b3:8a:fe:a7:7e:
         34:da:fa:34:0f:a6:d7:65:da:d4:14:ea:3f:69:5a:df:f0:56:
         a9:d9:ca:25:8f:84:65:57:23:e8:ea:ff:14:7b:39:2e:ed:55:
         fe:4e:3d:04:21:36:1e:d1:fc:e3:c3:2a:75:ea:34:c1:6d:40:
         46:a9:e3:52:de:c3:9d:fc:1f:63:31:6c:ee:f5:87:81:4f:36:
         f7:cf:ee:56:5a:0f:d8:02:58:f6:64:ba:1b:b4:f8:f4:ff:0d:
         cd:03:ce:f8:82:16:5e:da:44:40:0a:bf:f1:38:d3:21:17:7b:
         57:95:ac:fb:82:3e:02:06:b2:06:6c:62:c2:5c:56:a8:e7:1b:
         67:c1:ec:ed:e7:e3:b8:e9:95:65:0c:0b:bd:2b:ff:d0:d9:13:
         2d:08:9c:43:a4:17:d1:46:5e:d4:ee:ac:dc:d2:1d:6a:3a:4a:
         82:73:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:52 2026 by rpki-client