Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          ozMQmx6799LM/O+Il5f1wm+ySisfoesg7PKYb4KKXyc=
Subject key identifier:   ED:AD:5B:0F:19:65:F4:7D:E2:34:C7:21:30:18:8A:9F:B2:50:65:C5
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       52E15E2354F71F7DD4D83FC6FC3084D80C1CACB6
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa
Signing time:             Thu 05 Feb 2026 16:27:26 +0000
ROA not before:           Thu 05 Feb 2026 16:22:26 +0000
ROA not after:            Thu 04 Feb 2027 16:27:26 +0000
asID:                     262352
IP address blocks:        177.126.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e1:5e:23:54:f7:1f:7d:d4:d8:3f:c6:fc:30:84:d8:0c:1c:ac:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Feb  5 16:22:26 2026 GMT
            Not After : Feb  4 16:27:26 2027 GMT
        Subject: CN=EDAD5B0F1965F47DE234C72130188A9FB25065C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:cb:50:f5:f3:96:e2:b0:4e:35:c6:7c:5e:
                    67:e0:55:33:90:f6:52:e4:2f:cc:76:68:31:24:b5:
                    9f:3c:12:cd:62:f9:d4:61:31:58:ac:83:b7:95:f5:
                    07:28:04:5e:1a:2c:89:9d:c7:78:af:79:31:fb:5d:
                    cc:68:a6:19:af:42:79:ba:f3:53:17:cb:c8:46:b0:
                    e4:24:5c:23:70:2e:c0:73:fb:3a:0a:19:e7:d3:21:
                    b5:4b:73:78:2d:ad:bc:ea:4e:66:47:59:00:9f:80:
                    28:69:6b:a4:a2:32:b1:81:d9:c7:39:67:97:75:54:
                    60:e0:2c:29:dd:70:a6:bf:e4:9f:53:56:d5:2c:a1:
                    9a:48:60:d4:de:33:c6:7c:03:6a:a4:68:ca:57:69:
                    1c:67:c7:c3:e9:a7:49:17:ad:eb:cc:8d:91:5d:42:
                    47:63:97:0e:2f:8b:b1:13:a5:fc:bb:2c:8f:89:62:
                    82:4a:84:3a:53:10:fb:81:f7:cf:81:58:0a:54:c6:
                    e4:d8:df:f2:04:c0:f4:9c:79:f5:8e:77:40:49:5b:
                    d4:c4:b6:24:aa:ca:7e:65:84:75:f0:26:62:26:80:
                    d7:5e:35:c9:95:c1:9c:46:ca:32:d0:04:ed:8e:03:
                    27:b5:a0:1e:79:64:8c:1a:11:8e:01:7b:e9:b7:a2:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:5B:0F:19:65:F4:7D:E2:34:C7:21:30:18:8A:9F:B2:50:65:C5
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e38342e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:d8:9a:18:56:3a:f6:46:17:ca:bb:9a:61:f8:77:ee:33:
         4a:e9:00:79:c5:47:72:cd:46:06:f9:b4:b4:ad:6d:86:d4:d3:
         25:36:05:6b:0d:47:57:f2:8a:84:9b:bc:d8:d3:52:fe:0f:2b:
         30:0e:67:01:c1:e3:c3:d8:67:44:60:a6:32:55:93:ce:b3:61:
         4a:06:10:53:57:d4:65:55:67:a7:71:90:ae:e6:0a:66:60:52:
         96:b7:3b:92:14:52:1b:c4:f5:26:84:34:57:d5:12:a0:93:9b:
         1a:f2:13:13:0d:c3:70:7e:7b:c6:b6:17:53:c9:53:7b:e6:34:
         eb:dc:89:5e:ef:9f:9c:3d:21:e7:0b:80:c2:f5:a7:0a:ec:40:
         f5:50:ca:30:c9:c6:2c:52:3e:4b:33:e2:ce:f2:d1:af:2b:61:
         42:86:cc:41:b6:23:38:9f:4f:0b:d4:9f:40:f3:3a:6c:9a:2b:
         32:64:f2:62:c8:fb:9d:73:72:8f:1e:b9:5a:89:6a:47:c1:00:
         9c:8f:4f:e9:0f:18:fa:e7:88:c7:f5:31:82:36:b5:f5:30:59:
         80:af:ec:d0:71:af:ae:f5:19:db:41:17:21:f2:db:b1:35:33:
         30:52:f6:18:d4:01:9d:cc:2c:5b:3b:50:33:65:53:52:0c:83:
         65:e1:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:05 2026 by rpki-client