Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32322d3234203d3e203238353732.roa
File:                     3230302e3139322e3135362e302f32322d3234203d3e203238353732.roa (raw, json)
Hash identifier:          2Vp3VlcoxrH0AipN4uGl5VKgJIpfp2iKNACPVXrpibM=
Subject key identifier:   D0:95:F3:D7:06:B7:E8:87:25:1A:21:8F:05:79:90:9D:99:A9:AE:F3
Certificate issuer:       /CN=4B836A085E4555E9F264F4EFC7779BD8D1259101
Certificate serial:       187D682F298F57AC0BEEB0FCCB7B43CB0E0A1796
Authority key identifier: 4B:83:6A:08:5E:45:55:E9:F2:64:F4:EF:C7:77:9B:D8:D1:25:91:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32322d3234203d3e203238353732.roa
Signing time:             Mon 09 Feb 2026 21:59:40 +0000
ROA not before:           Mon 09 Feb 2026 21:54:40 +0000
ROA not after:            Mon 08 Feb 2027 21:59:40 +0000
asID:                     28572
IP address blocks:        200.192.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 21:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7d:68:2f:29:8f:57:ac:0b:ee:b0:fc:cb:7b:43:cb:0e:0a:17:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B836A085E4555E9F264F4EFC7779BD8D1259101
        Validity
            Not Before: Feb  9 21:54:40 2026 GMT
            Not After : Feb  8 21:59:40 2027 GMT
        Subject: CN=D095F3D706B7E887251A218F0579909D99A9AEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:97:de:a2:5b:48:53:b3:a9:d4:f5:5e:5f:
                    86:6b:78:72:b8:b6:2f:f0:17:05:4b:6e:53:03:76:
                    94:06:c4:38:e5:55:9d:18:e0:32:9c:04:7c:ea:b7:
                    1f:66:8e:31:8a:54:c0:db:26:bd:6a:80:4e:27:64:
                    21:f0:72:4e:9b:37:51:8c:a3:3d:50:ab:60:d5:7b:
                    47:d2:17:2d:5f:d5:22:e0:5d:af:9c:28:d9:7d:cb:
                    0c:a9:88:1c:e6:bf:0a:a3:61:15:f6:02:5c:0d:7f:
                    9a:65:9d:cc:d4:b6:c0:af:89:61:03:7e:fc:e1:0b:
                    02:9c:ed:6b:fc:3f:57:d4:22:3c:5a:a4:0b:5d:2d:
                    bb:85:67:c8:a5:04:ab:2d:2e:66:0d:35:34:99:0c:
                    67:5a:07:fb:24:e6:60:2d:78:01:1f:0f:97:9b:9c:
                    c9:9b:1c:26:9f:cf:9a:5b:5b:8e:4d:ac:9e:c8:35:
                    b9:67:7c:49:27:86:fe:f9:6e:62:8f:6d:87:3e:98:
                    00:8c:9c:c5:dc:5f:eb:b1:2d:c3:f5:be:0f:d1:31:
                    32:f8:89:91:c3:44:61:fa:a6:11:4e:cb:1f:88:ae:
                    b1:31:48:a2:b0:eb:d6:71:49:a5:bc:d6:0d:ea:02:
                    59:ad:c6:ff:05:fb:6e:69:5a:ca:4d:bf:8c:f5:09:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:95:F3:D7:06:B7:E8:87:25:1A:21:8F:05:79:90:9D:99:A9:AE:F3
            X509v3 Authority Key Identifier:
                keyid:4B:83:6A:08:5E:45:55:E9:F2:64:F4:EF:C7:77:9B:D8:D1:25:91:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/4B836A085E4555E9F264F4EFC7779BD8D1259101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B836A085E4555E9F264F4EFC7779BD8D1259101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/3230302e3139322e3135362e302f32322d3234203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:7c:3b:39:fd:c1:cc:40:b8:9e:4e:06:5c:ff:8e:02:15:
         94:a9:32:f9:22:7e:12:61:06:d7:f7:05:6d:62:63:a2:b5:fc:
         8c:67:3f:51:78:10:db:db:62:b4:cf:7f:7f:bb:25:9a:81:90:
         70:1a:02:36:93:dc:c7:bf:51:d7:b6:8f:23:49:f2:48:e2:3c:
         70:55:54:f2:8a:31:a3:93:3b:0d:e3:01:17:51:a9:23:87:f9:
         fb:a5:74:09:27:ef:e0:31:fd:4c:1a:0f:00:5c:ce:c7:10:82:
         5e:e9:74:28:dc:61:cc:68:ae:38:8a:17:e4:69:12:60:69:90:
         cc:7d:08:af:99:f4:6e:7b:8d:94:e9:cf:a8:e4:a5:d8:39:c8:
         3e:4c:6f:63:fd:94:76:95:86:2b:6f:82:ca:ea:7c:32:10:cc:
         87:c1:c4:91:d3:cf:23:b3:e0:af:59:e7:cb:33:d8:cf:4b:b0:
         40:86:b5:a0:91:e8:3b:81:19:b2:fe:ab:e4:18:83:2d:ee:35:
         a3:31:99:d8:56:03:83:d3:b9:13:1a:4e:6a:19:b9:b9:0a:12:
         31:b5:3e:08:04:9a:f0:5c:e7:bd:b5:62:79:1f:de:05:02:71:
         5d:ab:3b:79:90:f5:8d:ad:02:19:85:5a:69:eb:99:b8:dd:c0:
         8b:71:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:53:09 2026 by rpki-client