Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa
File:                     3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa (raw, json)
Hash identifier:          mcAUKuD5ydZnNsgQA2+fdvsz+Oxzq5sColcqn1GhF7U=
Subject key identifier:   55:25:FE:F3:C7:46:35:DB:99:9A:6F:30:EF:C4:ED:0F:81:27:E1:CF
Certificate issuer:       /CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
Certificate serial:       2D9E0CFB6D81D8053A1B1E6070F5D32485D18237
Authority key identifier: EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa
Signing time:             Fri 06 Feb 2026 02:46:30 +0000
ROA not before:           Fri 06 Feb 2026 02:41:30 +0000
ROA not after:            Fri 05 Feb 2027 02:46:30 +0000
asID:                     271018
IP address blocks:        200.52.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl
                          rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9e:0c:fb:6d:81:d8:05:3a:1b:1e:60:70:f5:d3:24:85:d1:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBEA1A61631F1E68C28E0457230DB74CDB16F7F3
        Validity
            Not Before: Feb  6 02:41:30 2026 GMT
            Not After : Feb  5 02:46:30 2027 GMT
        Subject: CN=5525FEF3C74635DB999A6F30EFC4ED0F8127E1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:b2:25:52:40:f2:ed:23:2d:3f:5c:df:32:
                    65:ea:dd:8f:a3:25:94:7f:56:4f:66:73:c4:0a:50:
                    3b:56:65:bc:95:7e:13:ea:e0:b9:9a:7c:d3:ef:e1:
                    dc:f5:a0:5b:0c:41:1b:e5:52:f5:97:da:01:43:ca:
                    93:9e:7a:99:65:32:f5:75:9a:28:e9:23:86:25:cd:
                    00:6b:1f:7c:de:01:5e:84:06:cd:ac:ab:4b:12:cf:
                    a3:ce:c4:aa:76:53:4f:03:51:8f:a1:f5:c6:e3:45:
                    34:76:4d:8e:7d:4c:27:ce:ba:3d:ec:06:82:90:86:
                    72:30:b2:36:2a:a4:55:c6:3e:17:17:f6:bf:86:bf:
                    86:9c:a3:f4:c6:ac:1b:86:fe:91:93:a8:ee:53:e4:
                    6a:32:2d:a3:b9:b1:45:bc:b5:b3:fe:a5:bc:f4:a0:
                    a5:b7:ff:7d:e8:94:45:f1:59:82:52:fc:e3:0e:08:
                    8b:2a:fe:04:38:8a:47:21:8a:5a:bf:e4:af:70:41:
                    28:5a:59:84:3a:b5:8c:3b:ed:a8:b6:e6:6b:e8:55:
                    3f:01:d9:af:ed:03:e7:27:6e:b9:49:d1:8e:40:70:
                    28:ef:75:de:63:e5:93:46:b4:5a:4a:c5:a6:44:ec:
                    92:22:b4:7c:55:b1:03:38:e6:f8:fa:a8:40:08:ef:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:FE:F3:C7:46:35:DB:99:9A:6F:30:EF:C4:ED:0F:81:27:E1:CF
            X509v3 Authority Key Identifier:
                keyid:EB:EA:1A:61:63:1F:1E:68:C2:8E:04:57:23:0D:B7:4C:DB:16:F7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBEA1A61631F1E68C28E0457230DB74CDB16F7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwVb3wJLKgTUfreY9egU6y4NZAK1K64VxuN6Hm5fwi1/1/3230302e35322e3233302e302f32332d3234203d3e20323731303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:1c:0d:81:08:e2:63:95:d1:20:a2:b6:03:26:bf:ca:2b:d5:
         48:e3:83:f7:fe:cf:76:03:e7:a2:c2:4f:5f:5a:8d:b7:23:5f:
         6f:44:e0:0f:f3:b4:6c:7e:5b:58:f4:27:ca:65:b5:33:48:7a:
         2e:35:58:98:7b:e9:3c:2e:42:db:b3:40:66:b1:b2:45:97:da:
         0a:b8:aa:84:b8:50:47:97:61:8e:33:66:91:59:e3:66:53:b0:
         2a:28:d5:57:96:bb:7e:f4:ba:79:cb:20:a7:a4:4b:57:b8:72:
         00:22:d7:12:e2:e0:38:8a:ff:fd:ff:3b:c9:93:e8:7a:42:bb:
         88:3f:bc:6e:3c:ff:72:83:bb:58:05:81:0f:48:1e:f2:cd:44:
         5d:3e:f0:24:cd:c9:7a:1f:4d:c0:9b:82:53:3b:41:e9:bb:b4:
         bc:86:5f:f9:ac:b4:fa:99:f1:f8:61:dd:ef:13:94:b6:b8:42:
         9e:6b:37:d3:fc:8f:0c:e6:de:0d:ef:14:d3:d7:28:53:df:26:
         ad:2c:ee:be:b1:02:1e:59:3f:b7:9d:c8:1f:70:a2:e4:51:1f:
         2d:a5:0c:c2:09:97:e8:2a:82:ab:49:f9:c3:b8:ed:f0:24:38:
         1e:db:5d:78:20:32:2a:49:0e:45:e3:4a:96:8d:01:67:d0:26:
         6f:42:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:41:25 2026 by rpki-client