Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
File:                     3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa (raw, json)
Hash identifier:          iYGHak2c5/tzfgtTlTZJH1XRW+oth7Vlz38XDjHyXyI=
Subject key identifier:   B9:43:30:EE:54:B0:5A:8D:87:1B:B2:D9:81:1A:2C:92:AF:00:F2:4E
Certificate issuer:       /CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
Certificate serial:       168201A7C420C0205E04039B7E6170F8CC341914
Authority key identifier: 78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa
Signing time:             Thu 05 Feb 2026 10:23:08 +0000
ROA not before:           Thu 05 Feb 2026 10:18:08 +0000
ROA not after:            Thu 04 Feb 2027 10:23:08 +0000
asID:                     266986
IP address blocks:        200.229.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl
                          rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 17:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:82:01:a7:c4:20:c0:20:5e:04:03:9b:7e:61:70:f8:cc:34:19:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D
        Validity
            Not Before: Feb  5 10:18:08 2026 GMT
            Not After : Feb  4 10:23:08 2027 GMT
        Subject: CN=B94330EE54B05A8D871BB2D9811A2C92AF00F24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b9:da:c2:ca:73:f2:24:7d:fc:4e:4a:04:ae:
                    f6:30:96:bf:0a:c8:1a:19:62:25:87:89:d1:32:c2:
                    87:14:02:b3:c7:69:4f:23:d9:d3:9b:16:7f:e1:09:
                    1d:a3:8a:13:f5:b1:ae:54:9c:7b:4c:17:83:ef:19:
                    0f:d3:84:03:46:41:f3:3d:67:7d:9e:16:32:be:56:
                    06:3a:b3:0f:42:c8:05:2f:0b:2d:bb:ce:26:2d:a1:
                    66:43:40:84:a8:41:37:c9:62:06:58:c0:54:c6:9f:
                    5e:16:f7:85:bf:c3:5b:fc:1d:2a:47:6b:4c:6e:66:
                    95:14:39:95:52:65:0f:37:98:5b:a0:a6:42:fa:f5:
                    59:75:43:46:f8:d5:d9:e5:3a:b4:1e:e8:fa:c9:77:
                    82:98:ce:2c:38:c4:47:dc:e9:ba:00:67:17:f8:3b:
                    e9:9a:f4:07:75:84:d0:d3:e9:44:5f:89:f6:ff:48:
                    77:6d:4f:b3:f4:d4:e0:b9:56:b8:41:9e:a6:ed:3f:
                    35:df:35:ba:8a:58:38:da:b1:8d:e5:19:7f:ba:00:
                    21:ce:e0:26:9b:d3:76:48:4c:3e:84:68:57:f1:40:
                    bf:ed:4b:72:e5:ea:12:da:4d:63:c4:a8:ad:32:81:
                    85:63:b1:4a:a8:e5:05:17:12:73:8f:7f:32:5f:62:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:30:EE:54:B0:5A:8D:87:1B:B2:D9:81:1A:2C:92:AF:00:F2:4E
            X509v3 Authority Key Identifier:
                keyid:78:C3:1F:85:CF:8B:6A:84:18:FA:D2:5A:55:F5:94:2F:3B:AC:DE:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78C31F85CF8B6A8418FAD25A55F5942F3BACDE0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8eVXvmGohob1kAGTiaJDUD1UZnSPEm1m3UdQ2vpDAoU/1/3230302e3232392e39322e302f32322d3234203d3e20323636393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:2d:9f:ee:b7:d7:da:eb:a4:82:a3:0e:1b:b3:e7:68:ca:
         66:a1:7c:72:bd:68:63:62:ca:18:80:e1:2c:33:3e:bf:85:2b:
         c2:60:20:e0:df:0e:87:41:ba:d8:f6:41:2a:bb:3e:16:1d:b2:
         e2:06:26:89:b9:1d:86:ad:8f:18:e8:90:bf:29:3d:7e:70:38:
         da:e4:17:c4:01:30:ae:26:ae:50:f9:66:8a:c3:1c:d4:cb:9c:
         1f:9c:19:1e:93:75:b0:3b:37:87:1f:aa:3d:d4:b4:09:8c:4d:
         6b:84:09:a5:0b:62:6c:c6:34:16:b0:57:6c:f7:48:6c:a7:8b:
         a1:67:5a:21:21:83:d6:34:d1:04:bf:22:d4:f8:2d:9d:52:87:
         ef:1f:67:28:d2:80:25:f5:9d:50:29:cd:25:69:13:cc:6d:c0:
         6a:4b:b0:72:06:57:fd:1d:2b:4d:04:c8:5f:a5:71:21:71:e9:
         13:02:4d:fa:fe:3b:f8:03:7a:b2:1a:43:39:30:77:23:b1:5b:
         75:b5:0d:af:56:62:af:25:68:8d:ff:3b:5c:0a:54:80:f3:a1:
         6f:23:4f:9a:11:87:9f:dd:b0:cd:9c:78:e8:5d:03:38:20:60:
         1f:25:2f:fb:7a:b2:29:2b:b2:de:60:e9:c6:a7:15:35:4a:7a:
         7d:a8:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:49:27 2026 by rpki-client