Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
File:                     3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa (raw, json)
Hash identifier:          Rpl+l4nH/a27/RoWw9zc/cLZLoKXGaEu/3uyXvAIfOQ=
Subject key identifier:   64:5C:A7:70:BA:1B:85:80:E1:C4:6E:B7:E7:73:17:C2:7D:40:13:B0
Certificate issuer:       /CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
Certificate serial:       11602A64DA93D218C3863B4CC6093BF08DF93168
Authority key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
Signing time:             Thu 05 Feb 2026 19:00:01 +0000
ROA not before:           Thu 05 Feb 2026 18:55:01 +0000
ROA not after:            Thu 04 Feb 2027 19:00:01 +0000
asID:                     52863
IP address blocks:        143.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl
                          rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:60:2a:64:da:93:d2:18:c3:86:3b:4c:c6:09:3b:f0:8d:f9:31:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
        Validity
            Not Before: Feb  5 18:55:01 2026 GMT
            Not After : Feb  4 19:00:01 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:1c:37:94:2f:2c:63:ad:db:39:46:7b:6c:
                    ff:0c:eb:36:07:a4:d9:22:a5:07:83:80:b5:40:95:
                    19:b1:9b:8d:d1:43:af:05:79:37:65:b8:5b:00:3b:
                    49:a8:c0:43:47:ae:f0:6a:b5:04:e8:7d:49:2c:16:
                    79:f9:58:89:b6:4f:57:7e:70:6c:82:80:cf:fa:c7:
                    46:45:98:97:ab:a2:ff:df:34:8d:e9:6a:5d:ea:32:
                    79:71:43:78:12:fa:52:17:8f:1f:77:52:35:5e:ca:
                    f1:03:83:c8:d3:9f:af:f8:4d:99:ba:2f:c9:c1:df:
                    2b:43:5c:b2:67:d6:27:49:c6:cd:39:3d:2d:1d:c3:
                    c8:bd:7e:16:ed:b6:b7:bb:80:a8:05:72:dd:76:2d:
                    59:16:28:28:17:10:a7:60:98:34:f9:5b:80:8e:12:
                    d1:5e:a8:16:53:95:d2:33:5f:88:b3:4f:3e:3e:ae:
                    53:1c:97:72:0b:ec:79:ea:84:19:ff:8d:a2:19:e8:
                    77:0a:1f:43:df:84:ca:36:d3:04:dd:3f:34:57:72:
                    91:a3:c2:0b:93:30:a1:4f:47:d8:5b:d6:ef:2e:d3:
                    37:3d:db:53:2f:f4:44:45:be:74:34:83:f1:9b:82:
                    d0:23:c6:41:7b:b5:52:0f:98:0c:cf:0a:fa:0e:0f:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5C:A7:70:BA:1B:85:80:E1:C4:6E:B7:E7:73:17:C2:7D:40:13:B0
            X509v3 Authority Key Identifier:
                keyid:D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:e1:59:80:a1:a5:01:2b:c9:01:e2:c1:16:c4:1b:03:4e:a5:
         b7:c1:b3:5f:a5:fe:9d:e0:c3:ab:cf:8d:73:de:f2:bd:db:79:
         0b:21:75:8e:78:bf:24:53:d6:f4:73:0e:76:97:82:00:23:69:
         90:fc:47:7d:a2:d3:0c:47:7e:32:9c:50:ba:06:aa:a2:97:55:
         ad:9d:be:b7:99:34:b4:5f:65:f1:5a:7c:2f:01:b7:a6:cc:fe:
         f5:7c:c6:55:8f:2c:df:b0:a0:e0:9b:c5:e8:93:89:9f:17:4d:
         c3:7b:33:36:03:bb:e9:6e:ff:f7:59:b8:4a:ed:8b:dd:e3:24:
         2e:5e:dc:4d:bb:a1:68:c7:9f:70:b6:2a:e5:a0:f2:5b:48:ae:
         bd:e4:cb:76:39:2d:74:17:ba:b0:b7:5d:89:d5:56:33:cc:85:
         22:60:2d:d2:4d:09:32:49:33:d8:ad:3a:97:3c:70:ff:a4:6c:
         a3:26:47:41:c2:55:8c:9c:de:50:49:12:ee:03:eb:7e:17:b3:
         c2:32:ab:0f:e2:25:08:8b:40:7c:c9:c0:f2:20:35:5b:30:3a:
         ff:90:ae:df:56:1f:24:e2:ea:1d:99:15:54:69:d0:98:0d:60:
         51:f6:76:68:74:27:67:28:fc:db:20:57:d1:22:c1:29:0e:f3:
         b0:d8:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:31:09 2026 by rpki-client