Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3230302e32342e38382e302f32332d3233203d3e203631383737.roa
File:                     3230302e32342e38382e302f32332d3233203d3e203631383737.roa (raw, json)
Hash identifier:          vADTNh1DJ7JBXZEGGHEuja84K8BOKbnqvuH7r7vAAl8=
Subject key identifier:   75:90:1D:E1:CD:39:3C:EA:E9:C1:EB:D4:E1:62:30:DA:31:05:1B:D7
Certificate issuer:       /CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
Certificate serial:       63A0E0F87F2CD7B73A3B79FBC587932A1BD4F1DA
Authority key identifier: 2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3230302e32342e38382e302f32332d3233203d3e203631383737.roa
Signing time:             Sat 07 Feb 2026 11:22:21 +0000
ROA not before:           Sat 07 Feb 2026 11:17:21 +0000
ROA not after:            Sat 06 Feb 2027 11:22:21 +0000
asID:                     61877
IP address blocks:        200.24.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl
                          rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 20:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a0:e0:f8:7f:2c:d7:b7:3a:3b:79:fb:c5:87:93:2a:1b:d4:f1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586
        Validity
            Not Before: Feb  7 11:17:21 2026 GMT
            Not After : Feb  6 11:22:21 2027 GMT
        Subject: CN=75901DE1CD393CEAE9C1EBD4E16230DA31051BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:8e:ac:b5:a6:d8:b5:b0:b8:6a:f7:8d:02:
                    52:f8:30:06:2e:dd:72:de:9d:bc:43:25:dc:bc:8b:
                    56:65:88:b7:a6:17:1a:77:25:95:05:48:ae:84:c3:
                    98:26:41:2b:06:38:c2:47:36:f8:4d:4d:d8:fa:ad:
                    4c:ad:e9:3b:95:14:52:b5:fc:ec:1f:33:cf:98:4a:
                    8f:83:62:fa:ae:d3:3a:60:dd:c6:14:67:14:73:c3:
                    4f:c6:5e:d8:f9:93:fc:98:08:21:c2:0d:a5:57:bd:
                    76:db:8c:33:23:f9:23:b0:e6:4e:31:b1:6e:da:10:
                    bd:b4:5e:14:1c:67:8e:03:c8:65:e3:d7:83:7f:56:
                    e9:15:57:54:38:97:c8:4e:4e:e6:f7:e5:3a:ad:cd:
                    66:89:a5:49:18:0e:f5:be:d8:63:4a:74:56:6b:fa:
                    2c:3f:0d:14:2c:e8:aa:d3:80:d3:2e:39:73:6d:b1:
                    19:21:79:7b:7f:23:49:c6:3c:53:b7:63:39:a4:72:
                    7a:df:89:77:eb:d9:2b:72:28:d7:19:53:3d:2f:99:
                    e0:af:e7:ea:f6:17:81:13:6e:54:3b:31:91:2d:3d:
                    d1:cd:44:81:fe:f2:1f:cc:cc:e8:a2:2d:63:cf:5c:
                    b8:17:68:40:1e:a3:7f:ad:20:b8:e1:87:4a:49:9c:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:1D:E1:CD:39:3C:EA:E9:C1:EB:D4:E1:62:30:DA:31:05:1B:D7
            X509v3 Authority Key Identifier:
                keyid:2C:B0:A4:F9:7E:58:54:FF:26:43:BF:14:74:C7:0D:B5:C3:FB:B5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CB0A4F97E5854FF2643BF1474C70DB5C3FBB586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uPZi9i2HCp7RgHeDqHKn64KAKQpwbXzoz9XXf576U4G/0/3230302e32342e38382e302f32332d3233203d3e203631383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:5d:97:80:0e:70:e5:3d:04:4b:00:c4:66:3b:1f:f3:72:
         2d:da:c5:81:cb:5c:1e:13:e3:fe:1e:7f:66:ef:0f:96:05:6d:
         6a:05:89:1e:c7:f8:6f:87:16:f9:5a:16:25:51:9b:6b:4f:98:
         2a:bc:b8:4b:fb:1c:6c:32:de:7f:16:0b:20:1d:aa:c3:a5:02:
         21:18:84:62:dd:88:e9:ec:d4:7f:6d:df:a2:15:a9:8f:41:46:
         78:ce:99:20:f2:66:b9:1b:0f:c7:2b:31:9b:63:d3:29:f1:8a:
         d8:89:f5:67:12:d8:3d:45:c9:02:d2:b3:4c:99:e2:42:95:2d:
         86:58:3f:70:e3:b7:29:c6:09:ee:84:a3:e1:95:3c:7f:f0:f1:
         70:cc:ac:ab:ac:9b:4f:76:bc:89:17:6f:92:0a:b7:a6:87:9b:
         a7:1f:07:8c:17:6a:be:a5:c8:40:33:e6:20:c7:22:0d:6e:df:
         66:d5:ed:40:bc:b7:fd:ef:40:8a:82:57:de:3c:19:75:6b:53:
         7b:f1:1b:ca:55:15:35:da:ee:61:38:5b:2a:66:9b:88:97:1e:
         95:3e:5a:05:1e:37:13:b0:19:d7:f9:19:49:3f:95:02:53:01:
         5b:80:e7:be:ec:96:07:65:ef:9c:05:a1:71:e0:da:18:4d:96:
         99:0a:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:30:56 2026 by rpki-client