Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa
File:                     3230312e35352e3139382e302f32332d3233203d3e203631373932.roa (raw, json)
Hash identifier:          bNFVAIma85Zo38JJw/JHddmotrkMT822P8k2TWhj/80=
Subject key identifier:   6C:55:8E:6F:87:9A:50:15:00:72:F8:0E:5A:46:4E:4F:46:CF:D5:AB
Certificate issuer:       /CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
Certificate serial:       72C5A479CFDEEA7139D29FB951EBEB0D3217774B
Authority key identifier: CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa
Signing time:             Thu 05 Feb 2026 21:20:38 +0000
ROA not before:           Thu 05 Feb 2026 21:15:38 +0000
ROA not after:            Thu 04 Feb 2027 21:20:38 +0000
asID:                     61792
IP address blocks:        201.55.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c5:a4:79:cf:de:ea:71:39:d2:9f:b9:51:eb:eb:0d:32:17:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
        Validity
            Not Before: Feb  5 21:15:38 2026 GMT
            Not After : Feb  4 21:20:38 2027 GMT
        Subject: CN=6C558E6F879A50150072F80E5A464E4F46CFD5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:69:55:b4:c2:27:ac:90:c3:2a:ee:5e:fb:
                    01:3d:f1:ed:da:c4:45:2e:4a:1d:3c:4e:5a:2f:55:
                    74:f4:a8:78:04:45:70:61:8c:a0:e7:12:bf:6a:65:
                    5c:f5:17:3d:bc:7f:94:d1:b1:c6:31:88:67:6d:d3:
                    dd:14:78:9b:42:20:cc:08:6c:ff:f5:f4:a1:f3:4d:
                    ca:18:a1:a3:68:65:7b:78:7d:85:f7:f7:83:52:cb:
                    f0:b9:97:d4:02:54:99:89:7c:c7:0f:c5:e7:51:8e:
                    1e:e3:d3:4c:0d:1b:3c:d0:db:cd:12:0d:55:e0:a5:
                    2c:2c:91:5e:c1:b0:20:65:b2:20:9a:04:de:d6:77:
                    ce:de:48:83:0a:ef:57:ce:06:2f:44:0c:91:34:27:
                    06:98:40:eb:0f:88:ed:9c:2f:30:77:6e:4c:e0:00:
                    e1:d8:fd:54:dd:05:f4:d6:24:41:13:1c:2e:f6:7a:
                    d0:0c:64:7e:aa:73:33:1c:aa:4f:93:6e:da:8d:e4:
                    97:d6:10:a3:2c:2f:01:03:63:65:ca:c8:8d:a2:31:
                    9d:78:fe:48:75:ec:2f:21:72:98:5f:c5:19:f6:ae:
                    09:d1:d3:c7:96:5c:6e:bd:8b:02:e2:20:f5:1c:86:
                    54:69:66:7e:76:5e:89:fc:75:7b:9f:93:84:03:05:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:8E:6F:87:9A:50:15:00:72:F8:0E:5A:46:4E:4F:46:CF:D5:AB
            X509v3 Authority Key Identifier:
                keyid:CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3230312e35352e3139382e302f32332d3233203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:5a:41:70:c5:88:b9:37:1f:48:47:7a:fa:90:06:cb:a2:
         d8:6d:e3:2a:90:06:7e:b5:51:33:37:33:80:5e:5d:42:81:b2:
         5d:42:f9:05:fb:31:b0:21:25:37:ad:88:60:dc:5b:1e:e8:e2:
         e7:c3:5e:5b:8e:36:52:ba:47:80:56:66:79:4e:b0:7a:bf:e7:
         11:27:e1:ae:2c:f1:92:c4:c6:05:2d:0e:4a:11:b5:d5:98:5f:
         ac:ea:99:7e:c0:e8:ed:ac:bf:05:1e:db:82:6f:09:a1:44:dd:
         a5:f6:a4:ef:a8:94:5a:0f:71:b7:b1:0f:0e:67:75:a0:e6:97:
         57:82:20:87:4d:66:54:dd:26:80:c5:16:5c:c8:bf:61:4d:dc:
         86:ae:46:bf:21:fd:fc:3e:d4:43:cb:f7:fa:c5:9b:e8:79:0f:
         b0:f7:a1:23:61:d9:17:f5:47:98:3c:82:1d:80:5e:5e:3b:b9:
         64:4e:f9:b4:62:b5:a9:76:82:b8:f3:b9:89:f5:f0:9d:dd:7b:
         3c:2b:2c:41:32:d5:db:38:1c:f3:23:66:62:01:62:1e:66:5e:
         71:3b:87:55:d7:1a:d6:1f:ca:47:7b:53:4a:b3:96:fc:e2:f5:
         ad:d1:da:8d:03:4b:d3:08:21:59:48:6a:e1:ea:7d:98:76:16:
         85:ca:64:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:38 2026 by rpki-client