Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
File:                     3230302e31372e3139322e302f31382d3234203d3e203130383831.roa (raw, json)
Hash identifier:          8KE16m4O62KVUW+WOY9t2gG7FpZpucsjt71rFU3kxLQ=
Subject key identifier:   96:67:5D:9E:F4:5F:A9:0A:97:31:2F:6B:8F:05:1C:C4:72:71:5D:96
Certificate issuer:       /CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
Certificate serial:       63FA2F4DF59CFEDCBE5B7F8A831A45F3F9C8DC02
Authority key identifier: 47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa
Signing time:             Thu 05 Feb 2026 15:15:42 +0000
ROA not before:           Thu 05 Feb 2026 15:10:42 +0000
ROA not after:            Thu 04 Feb 2027 15:15:42 +0000
asID:                     10881
IP address blocks:        200.17.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl
                          rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:2f:4d:f5:9c:fe:dc:be:5b:7f:8a:83:1a:45:f3:f9:c8:dc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470BFABD451A375BCBD5E6F088E3BC9AFB00642A
        Validity
            Not Before: Feb  5 15:10:42 2026 GMT
            Not After : Feb  4 15:15:42 2027 GMT
        Subject: CN=96675D9EF45FA90A97312F6B8F051CC472715D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:41:f4:2e:28:37:df:1f:05:4d:f1:ff:00:fc:
                    fa:79:60:eb:1d:02:a2:8f:c9:dd:c7:3e:57:6d:11:
                    f0:cf:82:c6:4e:b4:7c:00:cc:28:2c:03:3b:39:40:
                    ff:c9:d9:7f:5c:33:3c:5b:d6:95:75:66:3e:45:77:
                    fa:cd:87:cd:19:66:52:b3:15:39:c4:1b:ab:a8:9a:
                    d6:a8:e0:9e:c5:8d:82:a5:90:a8:2a:20:60:01:0a:
                    78:94:b5:10:5b:53:5d:a9:9d:3b:40:83:5a:0b:ce:
                    15:86:6c:cc:01:3a:4c:bc:5d:26:05:1a:d2:69:11:
                    06:e3:09:1c:b6:47:ff:35:c0:fd:b4:3c:59:8e:c6:
                    61:c9:59:40:87:ed:03:55:19:10:c0:e1:49:9d:f0:
                    71:c5:3d:11:0a:bc:d4:b3:75:62:af:77:57:27:24:
                    3c:dc:19:a7:a5:84:ec:d7:85:6e:bf:0d:c4:50:95:
                    46:b3:fd:7f:65:d8:5a:04:f3:af:0b:04:c6:d8:7a:
                    ad:81:4d:79:cb:b0:bb:fa:5a:bd:1a:10:2d:6b:42:
                    ba:f9:01:85:7c:7e:96:80:c5:14:c7:d0:73:f6:be:
                    dc:1f:24:64:f3:aa:40:ac:34:f2:78:a0:fe:d5:06:
                    58:41:9e:12:97:55:4f:59:85:af:41:91:65:91:af:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:5D:9E:F4:5F:A9:0A:97:31:2F:6B:8F:05:1C:C4:72:71:5D:96
            X509v3 Authority Key Identifier:
                keyid:47:0B:FA:BD:45:1A:37:5B:CB:D5:E6:F0:88:E3:BC:9A:FB:00:64:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470BFABD451A375BCBD5E6F088E3BC9AFB00642A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/1/3230302e31372e3139322e302f31382d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:37:bf:00:38:98:3c:2f:7c:7d:6d:10:fb:06:4b:f8:f2:bf:
         0f:f5:39:64:0d:02:be:ad:31:47:53:36:21:b8:48:7c:d9:d8:
         55:3b:ee:5e:8c:fa:7f:2f:15:6b:ff:e1:16:3b:70:8c:ab:9b:
         2f:39:31:26:b1:6f:28:17:33:cb:e4:35:d5:3f:94:8c:e7:1a:
         d8:c7:5b:4b:88:19:40:5c:b6:95:45:da:3e:c2:7e:4a:36:a5:
         c9:b0:b0:cf:53:dd:6b:36:b4:60:a1:0b:b6:21:38:80:6f:7d:
         ac:5e:f8:54:fe:ca:76:00:69:ea:09:e2:27:d0:3b:7c:15:5c:
         bb:fb:fd:6c:37:2f:bb:84:91:80:f7:61:ad:b8:ec:8e:6f:1e:
         56:1b:73:8f:22:51:9c:d3:6e:44:a2:6c:21:6e:6f:d7:1b:05:
         59:0b:fc:f5:90:e9:aa:90:6d:c1:be:6d:db:73:01:3d:3b:42:
         9c:b1:e8:92:6e:27:71:e7:fb:f8:8a:9e:c0:1a:c1:ae:1b:0d:
         8b:3b:cd:e1:38:41:97:cd:36:96:50:05:c0:4d:04:1d:0e:68:
         ff:a5:9d:06:dc:18:e1:45:f8:29:f5:6b:82:8c:23:9f:10:c1:
         d7:06:41:17:21:26:52:5d:72:54:70:9b:09:50:fb:9a:7a:9c:
         b7:17:3a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:43:11 2026 by rpki-client