Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa
File:                     3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa (raw, json)
Hash identifier:          1SgjGF+lQzZvDEjgbYwVs5XuzfKDLAQotW+huU1vEVA=
Subject key identifier:   62:8B:21:45:19:2B:CD:19:54:71:7D:72:B5:D0:18:63:1F:41:42:A6
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       127305B66B2B3814C07987E5DFA7DA98A10F0816
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa
Signing time:             Fri 06 Feb 2026 02:46:30 +0000
ROA not before:           Fri 06 Feb 2026 02:41:30 +0000
ROA not after:            Fri 05 Feb 2027 02:46:30 +0000
asID:                     271018
IP address blocks:        200.52.228.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:73:05:b6:6b:2b:38:14:c0:79:87:e5:df:a7:da:98:a1:0f:08:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Feb  6 02:41:30 2026 GMT
            Not After : Feb  5 02:46:30 2027 GMT
        Subject: CN=628B2145192BCD1954717D72B5D018631F4142A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:fe:06:d3:d4:20:70:d0:40:82:aa:31:2c:
                    38:fd:8e:b2:3a:0c:e5:9a:3a:b6:44:aa:90:06:46:
                    07:ad:a1:37:44:d7:e4:78:f3:9d:e5:71:35:c1:d0:
                    a7:0f:da:45:09:ca:2f:e4:16:47:97:eb:c5:f5:a8:
                    1a:8d:c4:f4:22:ee:25:0a:e8:2e:3f:a6:7f:a4:13:
                    2d:6d:54:40:1f:97:0f:df:3a:07:4c:ac:0d:52:19:
                    03:72:8a:c3:60:28:8f:a3:fa:2f:90:fd:a6:a6:8b:
                    75:f1:2e:96:9b:4e:e8:2f:75:df:04:c4:35:38:a7:
                    f8:8d:64:ea:24:4c:d6:57:12:97:4f:30:88:69:51:
                    1d:40:8e:98:fb:d6:09:f8:e4:fa:c4:90:d3:c1:0e:
                    69:38:a5:67:9d:42:1f:86:2f:fb:29:43:dc:db:c1:
                    4b:80:04:03:cb:3c:ba:6d:9b:58:11:af:3d:90:8d:
                    91:7f:60:b9:c4:96:0c:40:9a:53:fe:ff:e9:e7:e6:
                    a5:ad:78:be:63:7a:c3:bb:ea:54:45:c4:6d:91:6f:
                    40:75:58:9e:01:72:c4:be:fb:00:f7:8c:06:35:1c:
                    70:60:92:48:01:2d:08:ff:75:af:4b:82:fe:09:7d:
                    1b:b0:84:9d:74:e3:85:0f:b8:93:88:2d:63:40:5b:
                    e5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:21:45:19:2B:CD:19:54:71:7D:72:B5:D0:18:63:1F:41:42:A6
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3232382e302f32342d3235203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:32:23:cb:df:cc:91:93:d8:b4:2b:5f:a3:88:d6:7e:33:
         c6:78:55:c9:46:09:a0:6e:24:9e:08:fc:5d:25:10:48:76:57:
         b1:67:2a:9f:28:0e:5a:1e:08:6c:36:e0:35:80:56:2a:f5:12:
         56:fb:a8:7c:d5:7e:01:ae:0a:2b:5b:73:39:26:88:62:29:4b:
         4b:e1:23:3f:0f:a5:79:83:6e:2a:06:70:53:e0:f9:27:ad:69:
         83:82:14:22:77:1e:1c:b1:38:50:dd:01:b8:58:8a:53:ec:4b:
         3d:27:36:88:e2:58:ee:6f:37:c8:c5:11:b2:7f:ca:76:69:a7:
         11:a7:ad:a0:62:44:8a:3d:10:6d:45:ad:f1:c8:56:28:d3:4d:
         15:e0:15:58:39:94:64:60:31:16:a4:f4:09:c3:06:73:b9:fd:
         1e:5b:01:fa:70:b9:02:04:b4:a9:14:9d:b1:a1:d4:99:76:8a:
         1a:95:1b:d6:bb:bd:90:78:57:68:26:e9:0a:ff:64:a1:24:59:
         b4:a5:3c:74:cf:78:77:9d:d3:f5:a5:4c:81:88:2a:f5:82:f6:
         ba:d3:57:11:40:3f:32:d4:71:74:29:17:f9:37:85:d8:52:15:
         7b:93:50:c0:00:ab:0b:c1:46:22:e9:92:23:33:0a:ac:6e:fa:
         fc:f9:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:25:05 2026 by rpki-client