Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa
File:                     3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa (raw, json)
Hash identifier:          3FEoNticSVOrmHssvTY3Iku9etduy0JUjUMWvmqj/Bw=
Subject key identifier:   5F:F4:8B:1B:29:10:80:B2:94:2F:DC:2A:BE:BF:74:6F:43:D5:9B:3B
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       0C45A981204AF5FE47BB1F5D61CA868AA5381048
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa
Signing time:             Tue 10 Feb 2026 11:31:24 +0000
ROA not before:           Tue 10 Feb 2026 11:26:24 +0000
ROA not after:            Tue 09 Feb 2027 11:31:24 +0000
asID:                     262460
IP address blocks:        143.255.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 01:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:a9:81:20:4a:f5:fe:47:bb:1f:5d:61:ca:86:8a:a5:38:10:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Feb 10 11:26:24 2026 GMT
            Not After : Feb  9 11:31:24 2027 GMT
        Subject: CN=5FF48B1B291080B2942FDC2ABEBF746F43D59B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:08:82:12:e7:ab:61:91:a7:9c:e0:4d:53:
                    26:29:5c:12:c1:ac:59:16:88:39:90:66:06:4a:09:
                    64:30:37:c2:c0:6a:59:2f:8d:b3:a2:06:0a:cf:9f:
                    29:c9:e5:8d:cb:c0:9e:ff:32:d9:18:99:18:57:ae:
                    ac:c9:5c:0b:a4:fb:91:8e:ce:33:1f:4c:67:e0:4e:
                    27:08:b6:2c:05:93:06:bc:ad:34:d4:77:32:54:c0:
                    67:14:81:5f:ca:6c:54:27:68:76:d8:2a:81:b2:0b:
                    81:52:70:5c:cc:4f:b2:b5:6f:88:ea:73:cf:b6:db:
                    a5:5c:c4:1f:b6:41:26:01:96:60:d7:b8:80:b3:3f:
                    48:59:0a:7b:8a:a5:8d:fc:91:84:ba:dd:11:c1:6a:
                    c5:28:35:c4:7f:9d:bf:b9:3b:d4:4d:c9:e1:8e:f6:
                    86:2a:4e:44:fa:80:e2:2f:06:7a:a4:67:83:55:07:
                    35:a0:cc:3c:85:fc:75:74:53:52:bc:b1:6b:ae:11:
                    f3:d1:37:4f:4d:17:dc:76:55:b9:b5:36:30:78:fe:
                    bc:07:e1:cf:3b:cd:f0:b8:b8:eb:10:56:21:ee:67:
                    8c:61:48:c7:97:5b:3a:b0:2c:6d:26:9a:fe:c4:04:
                    f9:cd:af:53:52:af:10:e3:a2:ba:6d:5c:80:a3:ce:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:8B:1B:29:10:80:B2:94:2F:DC:2A:BE:BF:74:6F:43:D5:9B:3B
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/3134332e3235352e37322e302f32322d3234203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:de:e3:76:55:f7:af:1b:b0:6d:72:99:b3:f6:86:b6:8d:
         36:0a:fe:a2:c0:0a:ca:f2:8b:3f:84:61:a3:eb:70:ae:7b:89:
         68:94:0f:e6:7f:5b:5d:ac:43:3e:d9:60:c6:e2:bd:77:c4:12:
         6d:a6:7e:60:5d:68:21:bb:6c:29:8a:18:43:a3:32:ad:a2:45:
         ab:5c:50:94:6d:20:ed:fb:76:92:35:85:d4:f7:81:53:3b:fb:
         df:56:dd:5e:b3:39:f6:b5:05:93:ba:f8:04:90:95:f2:5a:da:
         aa:e8:60:7e:a3:2a:c0:8f:1b:44:a8:37:52:2c:68:32:f9:2e:
         c7:66:10:4d:9f:4e:c2:20:0d:88:e3:41:69:d4:62:a7:e9:2d:
         40:31:6a:26:12:38:5f:fc:db:d8:9a:af:f8:10:36:10:43:aa:
         59:c4:5e:07:1a:ea:4a:6c:fc:48:c5:6e:c8:cf:89:4c:c9:5b:
         0a:f5:23:ed:25:c8:ad:57:02:9b:56:6f:60:3e:83:4d:d1:b1:
         05:65:03:8c:9d:f7:31:e8:7b:d2:c7:ba:8a:d5:73:31:80:e5:
         2a:f0:ba:ec:1b:64:27:7e:1a:99:28:34:2a:8e:a7:a1:3d:79:
         f5:ee:67:bf:04:55:6d:a7:2d:b4:4c:fd:da:8f:76:84:9e:19:
         dd:c2:c9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:58 2026 by rpki-client