Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa
File:                     3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa (raw, json)
Hash identifier:          VhpwEHd+Gp5ZeorYPegJSZf3MKKXnHDoYLrPCcWEU/A=
Subject key identifier:   2C:7C:1D:EF:02:0A:FF:C2:EF:D5:BE:A9:34:AD:06:B0:A2:F0:27:FC
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       0EDFDB355E6BC0804622850E06828BDEAE915892
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa
Signing time:             Wed 04 Feb 2026 20:00:19 +0000
ROA not before:           Wed 04 Feb 2026 19:55:19 +0000
ROA not after:            Wed 03 Feb 2027 20:00:19 +0000
asID:                     270279
IP address blocks:        200.124.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:df:db:35:5e:6b:c0:80:46:22:85:0e:06:82:8b:de:ae:91:58:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Feb  4 19:55:19 2026 GMT
            Not After : Feb  3 20:00:19 2027 GMT
        Subject: CN=2C7C1DEF020AFFC2EFD5BEA934AD06B0A2F027FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:52:a7:3c:49:94:5f:54:32:f7:f4:d4:8d:
                    26:f4:b0:36:19:06:70:64:c2:94:b9:71:5d:73:ea:
                    6f:9b:1b:6d:fa:c1:9f:86:f4:e4:cf:be:0f:2d:de:
                    73:2e:f9:89:5a:b3:e8:5f:44:84:16:b0:9d:10:a4:
                    4c:fe:74:df:02:4e:f5:c1:d1:4c:aa:86:46:dd:bf:
                    9e:fb:cf:14:75:f4:0c:c5:12:8d:db:1f:a4:5c:52:
                    3e:03:9c:d4:6f:09:5c:b1:1a:16:46:0c:91:cf:5f:
                    b3:bf:e1:82:45:69:a9:5c:7d:ab:d3:f8:68:a6:7e:
                    43:d9:06:b2:1b:ee:65:e1:db:60:e0:cb:3c:b1:96:
                    9b:4b:1f:75:df:66:c9:a9:1c:4a:0a:3c:ac:e1:2a:
                    24:a3:c3:f2:2d:05:45:d7:82:0c:18:61:82:c4:cd:
                    be:56:9a:47:6b:8d:49:b4:a3:e1:5c:de:85:fe:ad:
                    e7:cb:a0:8f:ad:4a:d4:7c:ab:c3:67:a5:7c:e4:50:
                    6c:df:19:58:0d:04:b0:07:bd:6a:09:dc:3c:f2:d0:
                    0d:d4:53:e5:7e:19:ff:15:62:23:f2:9e:38:ac:ee:
                    ab:ce:d4:68:a7:49:30:cb:11:2c:aa:20:72:1a:db:
                    3a:80:cc:fe:64:90:74:3b:f6:79:83:8f:f5:45:05:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:1D:EF:02:0A:FF:C2:EF:D5:BE:A9:34:AD:06:B0:A2:F0:27:FC
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/3230302e3132342e3137342e302f32342d3234203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f6:40:a2:0c:af:bb:57:9d:56:c7:4d:f1:9c:0a:56:f3:3f:
         52:7f:63:2e:32:fa:24:48:19:22:81:76:bc:2d:1a:56:7e:84:
         2f:4b:ca:ac:fb:bd:b2:9b:eb:36:d2:36:10:2d:8d:e3:21:50:
         ae:26:18:4d:94:0d:36:38:10:c8:40:5f:16:f6:b5:a4:15:69:
         49:57:4d:da:76:27:9a:69:51:7b:5a:86:7f:fc:6a:f4:d5:a1:
         84:ab:4c:19:bd:52:47:ef:40:fb:39:5b:97:40:a8:04:e9:8c:
         e6:d2:eb:a5:b4:7d:ed:5f:aa:af:86:df:be:1a:6a:ea:46:e8:
         46:97:0d:0f:ed:18:f6:ca:f2:81:32:cb:65:28:3f:f1:2a:4e:
         d5:04:f4:02:51:83:a0:d2:2c:c2:df:47:d7:db:ad:fb:ba:f6:
         22:cc:68:d7:63:c1:0b:4b:d5:9f:24:bc:22:83:39:c6:9a:d1:
         40:83:c7:14:e4:db:47:7c:61:51:9f:94:d0:81:2d:40:b4:5e:
         a9:7d:d0:d2:ac:43:ed:59:91:a2:7a:4f:87:ec:6a:c5:45:01:
         90:45:1e:55:a2:fc:67:77:ce:33:70:67:39:7c:9f:4c:f4:fd:
         67:94:48:eb:dc:12:75:4f:1a:4d:de:fb:dc:19:c4:d6:2b:1d:
         61:9c:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:14 2026 by rpki-client