Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/3137302e37382e39362e302f32322d3234203d3e20323636323639.roa
File:                     3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (raw, json)
Hash identifier:          mctWdYoLxhK723PiTkrXwIvl4IBRh+PuMCHlAIwJusU=
Subject key identifier:   3C:02:8F:0C:B4:5C:F9:23:86:01:C9:31:C0:E6:9F:A0:7C:45:0D:17
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       24F0F0585F5E9E88388DCB0A11F507F5DE6262BF
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/3137302e37382e39362e302f32322d3234203d3e20323636323639.roa
Signing time:             Fri 06 Feb 2026 00:28:31 +0000
ROA not before:           Fri 06 Feb 2026 00:23:31 +0000
ROA not after:            Fri 05 Feb 2027 00:28:31 +0000
asID:                     266269
IP address blocks:        170.78.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:f0:58:5f:5e:9e:88:38:8d:cb:0a:11:f5:07:f5:de:62:62:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Feb  6 00:23:31 2026 GMT
            Not After : Feb  5 00:28:31 2027 GMT
        Subject: CN=3C028F0CB45CF9238601C931C0E69FA07C450D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:30:ac:0d:de:12:ae:95:06:d1:34:25:3d:
                    e3:26:96:11:45:12:52:6c:17:e0:11:01:88:27:cb:
                    52:62:3f:3f:56:e1:8a:e1:34:32:99:f2:0a:2e:98:
                    29:8e:21:0b:29:91:f2:ea:30:b4:63:82:39:78:8e:
                    ed:f9:95:5d:3e:c5:bb:7a:7a:b5:79:1f:36:03:af:
                    0d:8e:60:93:c3:31:0f:e3:80:b9:f9:52:2d:7f:b5:
                    00:4e:d0:a6:aa:24:c5:8e:6f:ce:66:ac:45:40:3c:
                    2a:9c:93:bb:42:2b:4c:d4:80:cd:37:02:f5:34:ea:
                    a1:5f:7f:8e:4c:c9:aa:ce:0c:2d:51:5a:dc:a6:0f:
                    2d:ac:7a:d5:83:7a:1c:01:5c:ab:94:b3:12:c9:65:
                    6a:4f:6d:9b:73:a6:df:79:a3:66:30:18:32:f2:2b:
                    61:34:96:b4:cd:0f:ff:d5:d0:8f:7f:79:87:33:33:
                    94:31:ba:6e:f7:10:fa:a6:ca:48:df:33:aa:0f:26:
                    79:b0:62:65:a6:b3:7e:52:ae:da:7a:dc:7a:71:d2:
                    21:b9:5e:4a:24:6e:58:63:1c:a7:63:76:12:ad:9e:
                    f7:7e:46:04:6a:96:12:41:a6:b6:42:31:e2:79:fe:
                    e6:d9:3e:d5:75:a9:55:fa:d2:d3:fa:ae:ee:98:8a:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:8F:0C:B4:5C:F9:23:86:01:C9:31:C0:E6:9F:A0:7C:45:0D:17
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/3137302e37382e39362e302f32322d3234203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:7c:32:4d:a0:4f:89:d1:6a:3a:db:5c:13:e9:c6:c8:d2:cf:
         87:9b:45:0b:fc:ae:76:c3:de:74:05:55:26:c3:ad:e1:41:8f:
         d4:0a:46:6e:3e:3a:75:4b:08:48:c8:66:3d:54:06:48:29:31:
         9f:50:6d:06:d1:4b:5d:9b:bb:dc:be:1c:a1:64:26:ec:24:4c:
         0b:81:6e:b3:c9:78:89:b3:1b:ca:c9:bd:59:01:01:76:8d:e9:
         2a:6b:d4:e1:a3:50:5b:ce:20:5b:1a:83:14:eb:1b:86:19:ce:
         6d:b7:4c:3c:2c:bc:fe:15:db:a5:9d:09:ce:d3:10:27:b4:f0:
         78:38:e5:74:7f:81:b2:39:d8:62:66:b8:78:ad:5e:d8:68:8d:
         cf:7d:a8:51:c6:02:b1:dc:ec:6b:51:41:56:c9:fb:44:e4:56:
         48:1b:3e:ec:d2:30:32:a7:73:92:36:55:27:96:01:1d:3c:32:
         b5:53:d2:c6:cc:b8:eb:d3:3e:cf:ff:9d:43:bf:e1:0d:b4:89:
         3f:1f:a2:4c:50:5f:5a:60:e0:72:4b:a4:92:3e:a6:45:61:8f:
         26:80:c8:87:9b:b3:67:f6:5d:47:d1:07:b5:ba:43:0c:36:b3:
         f4:f8:40:24:a4:a6:f4:0c:17:a5:79:c5:04:a0:4d:c8:7c:ed:
         6f:b5:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:38 2026 by rpki-client