Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa
File:                     3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa (raw, json)
Hash identifier:          Fl4L51MnBo8Nj2nFJT2yMtW+78P2kjJD7yZnYta/7g8=
Subject key identifier:   3D:65:EB:F0:44:71:A6:89:6A:18:7B:AF:38:16:3B:B8:C4:67:7E:87
Certificate issuer:       /CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
Certificate serial:       104D1D5BF7ECAE821A97E84411B03FF22EB50FB6
Authority key identifier: 50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa
Signing time:             Wed 04 Feb 2026 22:34:12 +0000
ROA not before:           Wed 04 Feb 2026 22:29:12 +0000
ROA not after:            Wed 03 Feb 2027 22:34:12 +0000
asID:                     266618
IP address blocks:        128.201.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl
                          rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4d:1d:5b:f7:ec:ae:82:1a:97:e8:44:11:b0:3f:f2:2e:b5:0f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500BE7BB5F89AF961567F51B45FD813BDFA6B436
        Validity
            Not Before: Feb  4 22:29:12 2026 GMT
            Not After : Feb  3 22:34:12 2027 GMT
        Subject: CN=3D65EBF04471A6896A187BAF38163BB8C4677E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:d3:fd:e4:05:e2:1e:bb:d8:ed:20:00:8c:
                    ad:94:9e:18:26:22:5e:46:ab:69:9a:3e:f0:24:87:
                    3c:1e:c4:54:d5:2b:53:d4:8a:92:e3:7b:b5:12:ae:
                    92:73:23:1a:1f:9f:cd:25:b5:86:ca:25:17:6c:81:
                    e0:38:a1:60:d1:fb:27:08:95:44:bb:e1:6e:0e:c1:
                    99:83:7a:d3:1b:1e:91:de:4f:fc:20:c6:86:65:c9:
                    b1:db:74:a0:ad:d0:60:2b:3d:15:d8:99:ba:f4:31:
                    61:57:96:58:91:07:c8:bb:fe:df:d4:9a:8a:1e:06:
                    3f:80:12:19:0f:40:a3:b2:dd:57:91:e3:56:a7:14:
                    5c:8b:a5:94:91:ce:05:20:76:7c:d1:d6:0c:ec:c7:
                    0b:b0:21:31:59:c8:c9:f7:70:b5:2d:97:73:83:fa:
                    6f:53:8e:80:48:fa:08:a7:7f:43:a2:d9:be:68:6c:
                    ef:1d:48:5a:8b:08:56:67:6c:5f:10:1a:86:4b:c2:
                    1f:ad:a1:d6:8b:40:30:9a:e7:b7:3d:ab:b3:da:41:
                    bd:88:55:98:cd:5c:45:2f:e0:00:06:ac:31:35:47:
                    86:e2:17:a2:e2:26:51:63:06:b2:66:d9:94:e1:ad:
                    17:5f:b5:d5:7a:5f:f0:39:7d:6a:ee:fe:71:e0:37:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:65:EB:F0:44:71:A6:89:6A:18:7B:AF:38:16:3B:B8:C4:67:7E:87
            X509v3 Authority Key Identifier:
                keyid:50:0B:E7:BB:5F:89:AF:96:15:67:F5:1B:45:FD:81:3B:DF:A6:B4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/500BE7BB5F89AF961567F51B45FD813BDFA6B436.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GN8konmjKNptMUDyBc7KpBJhXewUxvmqfkqG63qhn1Fq/1/3132382e3230312e37322e302f32322d3332203d3e20323636363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:86:09:ee:11:cb:2c:84:97:5f:54:5c:04:83:6c:50:cb:e4:
         03:51:07:ef:16:7d:b7:c0:aa:ff:c4:a4:93:72:2f:39:ad:26:
         b7:a5:0b:c9:40:5b:4c:01:e5:86:e7:34:f3:d8:ee:62:a0:c3:
         a3:aa:56:b3:9a:2a:da:d7:b1:ff:52:7d:c8:a7:01:1b:d5:9d:
         74:f1:f6:7b:1f:1b:63:d5:e9:b0:a2:d6:47:9f:b2:a4:59:a5:
         99:22:98:f2:c4:d9:c0:99:ec:0d:16:f6:01:3b:68:34:dc:31:
         fe:29:49:31:9d:5e:c9:0d:d2:ec:4a:28:92:2a:1b:1c:a2:6c:
         25:d3:b6:22:fb:bf:7c:99:14:7c:b4:c1:7d:70:6a:9f:30:2b:
         52:0f:39:c0:51:5a:b9:2d:22:39:8c:64:65:6b:53:5b:29:f4:
         17:5a:b7:b1:25:af:3c:3a:65:e6:a7:de:96:46:13:23:48:34:
         4f:b8:a7:cb:f0:f9:6f:2a:05:83:eb:b4:57:a6:49:ed:07:a9:
         e1:29:9c:ca:c4:32:18:8f:f9:65:29:0d:ca:43:88:83:0f:f7:
         01:da:32:7b:7a:7f:2b:66:f6:1f:97:db:ae:09:ce:dd:33:61:
         55:85:9d:27:57:e7:4b:f3:ab:97:c7:ea:7b:11:aa:ed:e6:1e:
         f8:bc:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:24:16 2026 by rpki-client