Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          Y/QXP3T5a4RMmRVNvM28uUcedHSfsWMBPKADaOAPX/g=
Subject key identifier:   2B:4F:A6:D7:F8:4C:92:EE:AF:AD:8C:24:13:E2:EF:B3:51:FA:4F:C5
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1469C545B3861228B127EC7ED59C4AF52A121A25
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa
Signing time:             Thu 05 Feb 2026 16:27:26 +0000
ROA not before:           Thu 05 Feb 2026 16:22:26 +0000
ROA not after:            Thu 04 Feb 2027 16:27:26 +0000
asID:                     262352
IP address blocks:        177.126.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:69:c5:45:b3:86:12:28:b1:27:ec:7e:d5:9c:4a:f5:2a:12:1a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Feb  5 16:22:26 2026 GMT
            Not After : Feb  4 16:27:26 2027 GMT
        Subject: CN=2B4FA6D7F84C92EEAFAD8C2413E2EFB351FA4FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:83:aa:74:01:1a:8f:b2:ed:5c:a9:fa:5a:
                    72:d4:81:16:32:95:e6:ba:25:c1:fd:6a:f0:0b:a5:
                    94:8c:c9:59:eb:ce:34:7f:8d:ff:f3:26:9c:9b:7a:
                    53:e8:1e:88:c0:9c:28:12:76:2c:da:b6:31:57:fa:
                    29:81:41:bc:5d:48:a9:06:54:de:05:56:ee:40:74:
                    9d:21:09:52:12:17:27:0d:d5:8c:1b:37:f7:4f:0f:
                    a8:73:bf:5e:a4:3c:35:c0:d6:f3:e9:fc:68:02:cf:
                    8f:0a:2f:af:7e:5c:6c:e1:f7:ee:1d:39:7c:93:f2:
                    75:98:f5:e9:57:b2:cd:81:29:78:0e:fc:ac:1e:70:
                    ea:21:30:89:a7:86:a1:5a:2b:e8:a3:24:d8:24:19:
                    28:fe:b5:72:d3:6a:49:c8:6b:6a:96:29:b4:36:ae:
                    cb:a1:18:69:a2:e0:b5:c1:63:1a:cb:e0:ec:ad:13:
                    d8:06:b9:91:69:64:82:3f:53:b0:15:a2:41:2d:42:
                    3d:08:94:b5:2b:04:2b:3b:5e:19:6c:c8:9f:f5:f9:
                    4d:9c:2d:dd:10:8b:db:c9:54:fd:ab:4a:d6:fc:00:
                    64:19:66:ff:92:5d:4d:a1:f1:e0:d6:1c:16:71:cf:
                    1b:86:9f:d1:ae:56:56:09:12:d9:40:92:10:e1:ad:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4F:A6:D7:F8:4C:92:EE:AF:AD:8C:24:13:E2:EF:B3:51:FA:4F:C5
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137372e3132362e39342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:28:e9:1c:98:72:aa:e1:30:26:4d:9b:33:4e:dc:e4:7a:c0:
         5f:8e:d9:a5:ea:f3:c7:93:4b:62:85:fc:e0:21:95:99:4c:59:
         09:de:07:37:ab:4f:74:42:8f:2f:b4:24:e6:c9:0c:f3:72:7f:
         ca:4e:11:a7:14:46:58:c7:70:af:eb:0f:21:0d:e0:fd:69:d6:
         41:ae:4d:28:f2:47:ea:0c:4f:9b:db:41:52:70:28:e4:d7:2a:
         44:dc:39:44:02:6b:b8:f5:7a:93:5b:7b:bf:cf:a0:10:ec:ca:
         73:13:29:23:78:f5:1d:02:27:88:19:66:84:ce:63:70:2b:ad:
         d8:fc:7c:f1:07:88:a2:4e:d0:9f:8c:de:4e:62:ab:86:45:30:
         80:d2:6f:12:9d:a5:e8:b6:e3:96:3d:6a:c2:72:88:99:db:4a:
         40:2a:a9:21:ad:98:93:72:6b:99:78:3b:24:a8:ab:18:18:f0:
         ed:5f:c7:9b:98:6c:cb:26:4d:34:95:98:f4:59:3a:7e:7a:d9:
         24:67:8a:cf:91:6d:9e:6a:0e:fe:88:4c:ff:f5:94:83:73:1a:
         63:2b:33:d2:56:a8:34:9f:1f:11:e9:d9:d1:96:36:49:1b:d7:
         7f:7b:f7:5b:84:5a:f0:0d:2d:b2:de:20:1c:00:23:fd:5e:6c:
         8b:18:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:14 2026 by rpki-client