Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
File:                     3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (raw, json)
Hash identifier:          a+s2eCS1Qi9XdN+0NGZcybpvGXeVSYAA51idoewPqEg=
Subject key identifier:   46:50:86:6D:04:C9:86:7B:0B:B5:F1:E3:01:01:BB:27:D0:33:9E:64
Certificate issuer:       /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
Certificate serial:       47DF073A415230C3C5F00E3519E6D310F84C4918
Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa
Signing time:             Thu 05 Feb 2026 10:33:25 +0000
ROA not before:           Thu 05 Feb 2026 10:28:25 +0000
ROA not after:            Thu 04 Feb 2027 10:33:25 +0000
asID:                     52869
IP address blocks:        177.128.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl
                          rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 08:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:df:07:3a:41:52:30:c3:c5:f0:0e:35:19:e6:d3:10:f8:4c:49:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17
        Validity
            Not Before: Feb  5 10:28:25 2026 GMT
            Not After : Feb  4 10:33:25 2027 GMT
        Subject: CN=4650866D04C9867B0BB5F1E30101BB27D0339E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:f9:7a:86:88:bc:5f:c8:2e:27:ed:5e:d5:
                    2f:8a:20:be:fe:0e:80:73:22:1a:19:69:3a:4c:49:
                    a7:b7:31:b9:76:dd:31:c5:8b:a5:db:54:f9:6c:f6:
                    28:7d:ae:22:9b:b0:de:e6:0c:00:af:ec:04:27:13:
                    eb:00:71:8d:72:c4:97:20:2e:89:72:a7:71:c9:59:
                    39:57:7c:11:1b:e8:8a:de:49:ff:c7:71:52:7c:ca:
                    2a:6a:81:de:e7:63:78:ca:de:86:c2:3d:0e:1b:9a:
                    2f:e6:96:74:1d:4a:75:19:49:69:41:88:e0:19:da:
                    62:c4:03:38:3d:61:8e:6c:dd:ab:6b:94:11:91:ec:
                    33:98:af:5a:34:74:9b:a4:84:05:a5:88:b8:49:c0:
                    64:6e:53:9b:85:66:77:f5:7e:a8:f2:bf:54:be:e6:
                    c1:15:37:5f:64:3d:f4:f9:7e:7a:98:66:56:5e:88:
                    61:5b:d8:05:3e:49:44:f7:dc:f7:49:f8:85:2a:95:
                    fe:34:95:f3:4b:93:07:06:5b:ed:af:9a:8f:90:20:
                    7f:c1:dc:ec:d8:8c:44:bf:59:b4:62:fd:bd:8b:d1:
                    2e:c9:01:88:f1:21:2f:eb:40:d1:f6:d5:ff:b1:69:
                    5c:d6:81:a0:b7:f7:35:d3:53:35:99:96:a1:a0:29:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:86:6D:04:C9:86:7B:0B:B5:F1:E3:01:01:BB:27:D0:33:9E:64
            X509v3 Authority Key Identifier:
                keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/3137372e3132382e36342e302f32312d3234203d3e203532383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:16:a3:a3:19:0e:fb:20:4f:ba:9e:49:b9:b7:a4:87:8f:f0:
         c3:cd:27:82:91:53:79:4b:d5:ac:d5:db:14:04:e7:95:82:82:
         d4:52:0c:4c:bb:b1:29:69:ed:99:bf:3d:39:8b:36:f6:9c:dd:
         34:ad:c4:8c:1b:9b:ae:60:40:66:54:94:16:69:ba:48:2d:7c:
         de:67:92:60:3e:d9:9f:ad:8b:4f:28:f9:9d:bf:2e:84:af:69:
         b8:14:8d:96:93:25:8f:61:9e:8d:78:4a:09:88:97:77:2d:9c:
         d3:94:5e:86:75:a5:a5:07:36:07:90:c8:64:9a:e1:df:de:1f:
         55:ff:48:d3:16:94:7d:be:15:6f:17:2f:fb:77:01:6b:66:7e:
         89:c7:eb:64:cd:bb:40:44:47:67:4f:88:c9:f9:96:41:70:5f:
         a1:05:49:a0:e6:49:53:d4:32:d2:22:1e:fa:d8:7d:64:8c:16:
         3e:05:d2:16:2e:f3:15:be:2d:95:20:43:66:50:30:b6:58:e5:
         51:a3:b3:ca:50:7e:3c:a2:79:26:f5:9a:14:2e:63:05:d6:1c:
         c0:58:6a:e7:59:41:27:3c:92:d1:c4:92:91:6a:63:cc:4c:69:
         5c:9e:e4:ee:03:d9:77:4f:1a:cd:91:ea:d4:e7:81:22:b4:7c:
         f6:31:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:42:17 2026 by rpki-client