Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
File:                     3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa (raw, json)
Hash identifier:          Q7mfJ7sBUVp1NkTS+KqCsNcheeox1VBqUiDeG4TPTZo=
Subject key identifier:   0D:14:6A:7D:8F:0C:E6:67:71:49:04:95:20:EB:6D:E3:03:90:C2:0F
Certificate issuer:       /CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
Certificate serial:       661CDCF73A1DA9FFA682357391BFA1631519A4B9
Authority key identifier: D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa
Signing time:             Thu 05 Feb 2026 12:48:06 +0000
ROA not before:           Thu 05 Feb 2026 12:43:06 +0000
ROA not after:            Thu 04 Feb 2027 12:48:06 +0000
asID:                     272435
IP address blocks:        201.216.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl
                          rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1c:dc:f7:3a:1d:a9:ff:a6:82:35:73:91:bf:a1:63:15:19:a4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74EFE2D47A320A7B31005AF365FC275085C95CE
        Validity
            Not Before: Feb  5 12:43:06 2026 GMT
            Not After : Feb  4 12:48:06 2027 GMT
        Subject: CN=0D146A7D8F0CE6677149049520EB6DE30390C20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:23:f3:2c:54:1b:f6:d7:d3:08:02:3b:97:
                    03:2c:24:9b:1d:1f:13:97:b5:e4:d2:7d:b3:66:c8:
                    18:ad:4c:7d:09:20:0d:01:4f:da:3d:07:70:bf:ba:
                    87:40:95:95:97:54:70:ff:e9:ad:0a:79:9f:7d:66:
                    70:b1:b3:1a:ef:cd:e1:36:dd:41:7c:56:ca:9f:71:
                    4b:9c:ab:c7:c1:f6:af:eb:e9:e5:af:c9:e3:19:a4:
                    5b:81:15:9b:1a:d5:54:fc:ac:ff:f4:fc:b2:de:14:
                    75:01:0d:dc:63:4a:8d:ac:8f:56:0d:d8:a7:a2:f8:
                    06:9f:76:eb:9d:e7:4f:47:2d:a2:17:50:ed:a9:c6:
                    54:36:85:76:89:e1:13:a2:62:78:14:6e:7c:8a:e8:
                    c8:23:6c:00:d1:b0:03:db:9b:e9:20:29:9c:52:70:
                    38:40:90:26:55:1c:c4:70:4c:1c:df:49:3f:81:7f:
                    93:92:73:be:41:8d:09:43:84:c6:c3:9e:2a:52:ae:
                    b8:bf:c6:b9:db:1e:98:c2:c3:7e:31:11:43:e1:e3:
                    c2:21:bf:f9:53:7c:01:76:9d:52:e3:44:e7:a8:af:
                    3d:de:97:4e:d2:e5:36:fa:bc:00:ca:16:e2:8d:b1:
                    10:14:95:a0:8d:0a:a7:e6:6c:5d:fa:8d:8d:e1:a3:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:6A:7D:8F:0C:E6:67:71:49:04:95:20:EB:6D:E3:03:90:C2:0F
            X509v3 Authority Key Identifier:
                keyid:D7:4E:FE:2D:47:A3:20:A7:B3:10:05:AF:36:5F:C2:75:08:5C:95:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/D74EFE2D47A320A7B31005AF365FC275085C95CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D74EFE2D47A320A7B31005AF365FC275085C95CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DM7ecfQu6nuzazixvUyZD3eW9yPSZaN1AtHUMVKVGugK/2/3230312e3231362e36382e302f32322d3234203d3e20323732343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b3:3b:aa:08:bf:01:ea:28:54:c6:79:27:b3:eb:a7:1f:5d:
         0a:a8:cb:26:ba:6a:ba:b7:82:90:00:2c:5b:c5:3d:20:96:5b:
         ab:2b:3b:91:7e:81:a0:35:df:00:e4:dc:83:fe:48:81:72:bc:
         25:24:ed:3a:11:8f:9d:36:fc:0b:aa:79:d8:07:50:6b:eb:b4:
         b4:bf:e3:24:66:3a:06:9f:6f:cf:7f:e8:d0:ba:98:c0:a2:51:
         3f:37:fa:fa:bb:7d:7c:a9:89:bd:56:56:ec:06:52:ef:92:f3:
         ef:eb:8a:84:b2:a2:c8:95:23:aa:e2:92:f1:d1:31:c5:74:81:
         75:a1:a1:32:90:a6:74:15:28:44:c9:9b:bc:90:fe:54:b4:ea:
         d0:0b:61:57:c3:77:42:1c:e0:ea:ec:32:f8:84:c9:80:1f:5f:
         6a:f8:e1:c6:fd:b5:fa:30:36:c8:19:1c:d0:65:44:97:f1:70:
         9c:ca:cf:dc:3b:78:b0:c0:c1:ad:08:90:bb:fa:ae:b1:4b:05:
         5e:ca:d4:5a:87:62:7f:ad:dc:40:6c:62:8d:dd:a0:68:b1:b8:
         ab:b3:69:4d:cb:c0:41:28:d2:54:c0:59:ea:4d:a0:39:45:3e:
         1f:fb:fc:b7:8d:0b:c7:b3:2f:33:85:da:8b:97:ea:bd:ab:02:
         0c:b8:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:55 2026 by rpki-client