Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3230302e32342e38382e302f32322d3232203d3e203631383737.roa
File:                     3230302e32342e38382e302f32322d3232203d3e203631383737.roa (raw, json)
Hash identifier:          9WesmofwcIPw/MdahPaM3Z2uqzsCTfBJuWzZHxit+ZA=
Subject key identifier:   65:8D:51:1B:B4:9E:A5:01:C7:E9:1D:96:C4:3F:5B:84:85:0B:4D:84
Certificate issuer:       /CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
Certificate serial:       56DDD255597261879FB1E0F70B7D40F37B744301
Authority key identifier: 2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3230302e32342e38382e302f32322d3232203d3e203631383737.roa
Signing time:             Fri 06 Feb 2026 15:46:42 +0000
ROA not before:           Fri 06 Feb 2026 15:41:42 +0000
ROA not after:            Fri 05 Feb 2027 15:46:42 +0000
asID:                     61877
IP address blocks:        200.24.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl
                          rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:dd:d2:55:59:72:61:87:9f:b1:e0:f7:0b:7d:40:f3:7b:74:43:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
        Validity
            Not Before: Feb  6 15:41:42 2026 GMT
            Not After : Feb  5 15:46:42 2027 GMT
        Subject: CN=658D511BB49EA501C7E91D96C43F5B84850B4D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:96:f7:b1:4d:92:0e:f3:7b:a5:7c:0c:77:
                    2c:d4:20:69:bb:d0:00:f6:4b:42:05:b6:67:84:90:
                    c0:f3:ea:a5:35:c7:31:91:71:37:5b:d4:84:29:da:
                    75:9e:e5:b2:be:e2:3f:60:87:69:3b:6d:57:f5:0b:
                    da:01:5f:15:e6:a4:8f:6c:30:ce:34:43:09:7b:ac:
                    f6:10:42:79:40:b9:f6:58:1a:32:1a:ee:2b:ec:3c:
                    3b:c4:d3:d8:cd:50:00:27:e8:a3:03:a4:31:2e:90:
                    69:d7:1b:93:36:ee:b1:74:41:6a:46:0e:1e:d4:b6:
                    81:97:71:7d:44:76:37:db:19:47:74:5a:d6:57:94:
                    93:d8:fb:2e:8e:28:cb:d7:d2:d3:6d:6c:e8:9a:90:
                    95:12:41:c2:74:66:56:02:e4:ee:2c:99:cd:fb:4a:
                    6f:f3:f3:c2:e3:e7:18:6e:84:12:09:ab:51:81:4c:
                    6a:2b:d4:df:ce:1c:61:02:c8:82:b9:91:c2:49:6a:
                    c6:4f:7b:38:15:4e:e1:c3:39:29:3d:e9:0a:11:83:
                    27:94:74:35:25:04:bb:c3:e8:82:c1:8a:d8:ac:8e:
                    11:28:13:0a:f9:38:79:52:64:43:92:56:5f:ec:8f:
                    33:79:0b:a7:56:20:93:41:eb:cc:62:72:e9:88:33:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:51:1B:B4:9E:A5:01:C7:E9:1D:96:C4:3F:5B:84:85:0B:4D:84
            X509v3 Authority Key Identifier:
                keyid:2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3230302e32342e38382e302f32322d3232203d3e203631383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:de:89:0e:5f:69:d9:13:0e:64:2e:e2:31:db:34:c4:f1:
         9e:55:1c:1a:25:c6:fd:08:75:ef:e4:63:71:4d:99:71:cc:21:
         e9:7c:e4:31:75:38:9b:b5:fd:e9:83:e9:95:63:28:aa:89:41:
         a4:98:7c:74:2c:ae:19:86:9c:66:d3:a6:96:6e:8c:53:2d:7b:
         76:6c:3d:63:02:59:5b:96:af:b1:b8:12:47:ae:28:b4:e1:a4:
         ba:ac:78:a5:e2:76:80:2e:19:3c:78:2f:6d:17:9e:b8:7c:42:
         74:e8:09:46:95:03:8a:c8:e6:22:82:b0:29:29:0b:34:88:b6:
         a2:20:bf:79:8a:b9:26:33:6d:27:ba:48:63:10:d1:dd:55:97:
         21:45:91:c8:89:59:5f:28:83:0b:10:09:bc:cb:01:49:0d:fb:
         7e:50:b0:6d:ec:da:1d:37:df:93:8f:78:11:b5:e7:43:e5:28:
         89:8b:a9:9f:a0:6b:1d:d6:4b:9b:2b:fa:07:76:f9:91:3a:da:
         36:e0:ec:16:24:51:a1:d8:35:25:cb:05:3e:50:26:a9:f1:9a:
         7c:a6:28:0d:35:c2:e1:4e:8a:ca:35:af:72:34:97:ae:74:4d:
         a8:68:15:1d:ec:17:92:a5:3a:c0:53:32:f1:91:0a:8e:71:6b:
         dd:82:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:52 2026 by rpki-client