Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3230312e37362e33322e302f31392d3332203d3e203237373135.roa
File:                     3230312e37362e33322e302f31392d3332203d3e203237373135.roa (raw, json)
Hash identifier:          Pg2//nt5xoYfq6p0P4iD0Ev1v94k5EUqVjZoywCSib4=
Subject key identifier:   FE:1D:79:26:85:C9:B4:B6:AE:9E:A9:75:DB:4E:83:C0:FF:9E:83:6E
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       56021A6D682C7DF320A4FD08D96FEB45A17DFD9A
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3230312e37362e33322e302f31392d3332203d3e203237373135.roa
Signing time:             Thu 05 Feb 2026 02:21:38 +0000
ROA not before:           Thu 05 Feb 2026 02:16:38 +0000
ROA not after:            Thu 04 Feb 2027 02:21:38 +0000
asID:                     27715
IP address blocks:        201.76.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:02:1a:6d:68:2c:7d:f3:20:a4:fd:08:d9:6f:eb:45:a1:7d:fd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Feb  5 02:16:38 2026 GMT
            Not After : Feb  4 02:21:38 2027 GMT
        Subject: CN=FE1D792685C9B4B6AE9EA975DB4E83C0FF9E836E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:88:ff:77:d4:cc:93:69:92:fb:15:fd:d6:
                    1a:da:df:8b:00:9d:0b:3b:5d:44:71:94:ef:ee:ac:
                    41:ff:5e:5d:06:5e:c3:bc:2a:53:ea:67:23:b9:ae:
                    6d:1b:21:f7:b2:80:c8:d7:e2:ca:32:68:9a:1a:8f:
                    b6:4c:9a:26:49:52:bd:c9:ac:8c:23:3c:34:ab:6b:
                    1b:62:4b:28:ea:65:5f:a4:b8:83:4e:dd:e1:c8:e5:
                    2c:89:dd:09:f2:16:a1:36:48:d4:2f:f2:8b:3e:4b:
                    38:88:49:55:4b:62:f0:68:e2:83:62:8e:db:21:d5:
                    1e:1a:5c:86:57:ca:8b:9f:a0:ef:9a:5d:64:94:55:
                    27:29:34:25:d3:11:e4:9d:71:02:67:c3:10:4a:b2:
                    de:95:b5:4f:80:b9:fb:cd:f3:f0:b6:8a:02:56:90:
                    7f:ca:66:4b:de:52:8e:1a:5b:da:85:1a:07:dc:f2:
                    ca:9c:c3:0e:49:27:3b:dc:68:d2:d6:7e:76:bb:db:
                    51:fe:91:a5:85:cd:8a:8c:87:b1:6d:72:96:d8:15:
                    ed:c9:dd:03:61:aa:67:7c:ff:f7:b3:6a:19:bd:ff:
                    1f:62:d9:a4:3b:00:d2:48:77:d6:7f:3e:72:ad:d4:
                    30:66:02:fe:8e:ab:2d:ac:1d:3d:84:a4:55:76:60:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1D:79:26:85:C9:B4:B6:AE:9E:A9:75:DB:4E:83:C0:FF:9E:83:6E
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3230312e37362e33322e302f31392d3332203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:17:a0:7a:5d:5b:39:7f:df:6b:e1:a0:ca:0d:25:4c:21:fd:
         8b:d0:ae:02:47:ca:3a:1c:8f:b8:4b:db:99:30:2b:47:fc:a9:
         21:9c:37:8f:ba:0c:44:a0:ce:28:7a:fe:78:46:76:22:ab:2b:
         ae:90:cc:3d:2d:ce:79:9b:85:cd:00:e0:7d:72:4f:95:3a:02:
         9d:b0:0c:32:9b:34:e9:25:5d:e6:a2:36:6b:54:ff:26:d5:2a:
         50:2a:de:57:96:f9:7a:a7:f3:3b:28:b9:00:44:35:54:5a:5a:
         ea:c5:af:df:53:1c:0f:66:c8:a6:48:ac:2b:8f:67:ea:5f:c7:
         a5:30:89:93:d6:88:41:33:44:c0:22:51:11:8c:d6:4f:4f:e6:
         44:d7:e4:a3:ef:d1:be:92:58:c3:c5:53:4c:64:8e:3f:e7:7a:
         e6:89:51:7a:75:28:d5:02:ec:f6:03:e1:ab:0a:0a:50:79:c7:
         9d:b1:60:82:af:1e:47:22:ca:d4:5d:7e:ac:b0:e1:c4:40:f2:
         42:23:58:e6:dd:9e:02:5f:95:a0:ff:5f:04:fa:b4:f2:bc:48:
         e6:d1:d0:94:e5:e4:85:c1:1d:a7:a9:8e:7a:22:a9:22:5b:be:
         df:a9:c4:f4:af:85:f4:62:14:f1:49:62:61:80:d6:22:1b:49:
         fe:4e:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:55 2026 by rpki-client