Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          6sOn6XZpMm1YWn2z3LfelvXZHS5m1YQtuRLw1SufoS8=
Subject key identifier:   EE:37:49:28:DF:B5:74:AD:AA:9B:E9:40:52:C1:2B:72:1A:BC:0C:57
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4AAEDAFDEF39F49070EBC12D50AE7322ED14D963
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 05 Feb 2026 16:27:26 +0000
ROA not before:           Thu 05 Feb 2026 16:22:26 +0000
ROA not after:            Thu 04 Feb 2027 16:27:26 +0000
asID:                     262352
IP address blocks:        170.246.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ae:da:fd:ef:39:f4:90:70:eb:c1:2d:50:ae:73:22:ed:14:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Feb  5 16:22:26 2026 GMT
            Not After : Feb  4 16:27:26 2027 GMT
        Subject: CN=EE374928DFB574ADAA9BE94052C12B721ABC0C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:ff:6b:4e:a0:6e:10:77:80:4f:aa:bc:88:
                    a7:9d:63:fe:d0:5f:85:30:e2:ab:72:6d:9f:83:dc:
                    fd:6f:c4:1f:1a:a3:ee:71:bc:4a:34:a7:95:58:3a:
                    54:05:3c:46:a8:f8:97:37:58:01:ad:57:61:8e:fc:
                    01:f3:00:0e:9e:43:2f:15:bb:3f:66:64:3e:72:b8:
                    1a:b2:8e:7c:d1:ef:bf:d8:61:57:8b:aa:ef:7e:79:
                    cc:fa:b3:0a:b7:01:a7:ec:03:cf:1c:df:42:95:c6:
                    fa:71:bf:ac:39:11:a8:12:15:be:8f:55:01:75:ad:
                    9d:c6:bd:27:a3:18:65:16:1a:bb:cc:b2:bd:76:87:
                    34:c5:9d:5e:19:11:91:72:78:e5:03:fb:a5:c3:a3:
                    da:57:74:5c:30:5e:4c:39:f7:c3:a2:46:77:5b:6d:
                    e5:3e:ed:2c:1e:30:72:4d:ec:cf:1e:37:1c:27:9b:
                    5d:30:b4:28:da:54:c0:c7:23:9b:e3:57:c2:a6:cb:
                    2c:d9:58:ca:df:39:dd:f5:de:c1:b1:c6:7e:ff:54:
                    21:04:d0:66:89:be:64:2f:04:04:42:c2:ab:55:9e:
                    06:1c:e0:67:df:bb:99:e7:05:07:60:77:a8:03:89:
                    a8:c4:7d:c4:1c:71:40:c4:2c:97:2c:a2:a4:81:0f:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:37:49:28:DF:B5:74:AD:AA:9B:E9:40:52:C1:2B:72:1A:BC:0C:57
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:00:24:6e:11:4c:84:bb:07:76:35:1b:30:c1:93:89:ce:
         5d:17:0d:01:c2:b5:12:85:27:5e:4e:c3:b1:01:e8:b4:ae:11:
         0a:dc:13:d3:6c:1f:68:32:1f:37:14:e8:9a:9e:46:df:23:0a:
         bf:01:c8:67:b6:36:bf:b0:4d:9b:8a:b8:e2:0c:e9:2c:1e:54:
         e3:f2:c4:b6:2a:74:04:11:34:05:94:20:e9:14:f3:f9:d2:65:
         ff:18:db:fa:c6:cd:11:0c:2d:34:49:00:ba:fd:8c:85:05:b0:
         f1:7b:8f:8a:6d:0b:c0:7c:c0:79:6c:e9:20:d1:44:c4:16:ad:
         89:51:ed:5b:12:1b:98:80:1e:d1:e9:8a:19:b1:55:8d:e6:b6:
         0e:38:9b:b2:87:10:ff:b5:41:e8:10:0c:2c:e8:01:13:9c:99:
         7b:2a:ee:3e:ae:40:59:eb:be:d7:4b:c7:f1:3e:0b:5c:c0:fa:
         2e:f7:97:42:2e:e7:08:3e:97:fe:ad:53:13:9e:56:02:ac:0c:
         92:2a:ac:ac:a8:32:7b:be:ff:d1:f3:6f:36:3e:93:77:66:88:
         3b:90:94:4c:fc:79:23:bd:d8:70:bc:0f:ee:28:8c:88:e2:27:
         c5:ce:e8:8a:42:f3:7b:98:5c:76:ce:3f:bd:bd:28:25:e7:97:
         7f:e0:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:01 2026 by rpki-client