Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa
File:                     3137302e38332e3132382e302f32322d3234203d3e203631383132.roa (raw, json)
Hash identifier:          w4MqEY4SF7QFyaEbsdEQGeVHttm/0Xwm1VwaqpPjqdU=
Subject key identifier:   A4:16:6F:33:E5:3C:E3:E7:BC:3C:5C:A9:94:19:06:98:5B:D1:74:DF
Certificate issuer:       /CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
Certificate serial:       66E0A3756C6EC1236EF65E898C80BEB5A1D60413
Authority key identifier: 30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa
Signing time:             Thu 05 Feb 2026 13:08:34 +0000
ROA not before:           Thu 05 Feb 2026 13:03:34 +0000
ROA not after:            Thu 04 Feb 2027 13:08:34 +0000
asID:                     61812
IP address blocks:        170.83.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl
                          rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:a3:75:6c:6e:c1:23:6e:f6:5e:89:8c:80:be:b5:a1:d6:04:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30CB0F58B1D79A759D914AF97BA1287C39FE9DFD
        Validity
            Not Before: Feb  5 13:03:34 2026 GMT
            Not After : Feb  4 13:08:34 2027 GMT
        Subject: CN=A4166F33E53CE3E7BC3C5CA9941906985BD174DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:c2:74:07:1f:46:91:21:40:cc:22:b0:4d:
                    b5:3d:a7:f7:b8:31:c6:c3:7d:47:32:37:b9:97:23:
                    31:80:30:17:bb:d3:ee:b1:9b:41:0d:4b:97:d9:4d:
                    dd:c0:25:27:41:12:eb:a6:ef:8a:c7:fa:62:e3:b1:
                    10:e9:de:e5:81:9c:cf:73:24:9a:76:87:51:6e:c2:
                    ee:28:dc:d8:ee:09:b0:7a:d9:a9:e1:1e:e8:65:ac:
                    8c:5d:27:0e:08:11:0f:3a:12:86:e0:5d:21:a4:c8:
                    52:84:b3:f6:fb:c8:5e:6a:44:a3:df:1a:7b:e4:23:
                    6c:0b:c8:4d:30:9b:1b:07:59:3b:7e:28:ed:9a:b1:
                    f0:57:44:b5:63:ae:a9:48:35:ac:d8:dd:18:ee:12:
                    61:8a:b5:cf:e7:88:26:85:e6:cc:81:e8:43:bf:43:
                    89:f2:ef:fb:ec:6b:bb:25:e8:67:ef:45:0b:72:dd:
                    eb:82:c1:65:06:ce:33:6b:22:2f:56:31:b0:02:4f:
                    52:94:09:bc:e0:45:f4:28:d8:11:eb:dd:8b:a7:a6:
                    b4:dd:73:63:c9:ed:63:93:de:cf:57:98:0d:3a:28:
                    56:c5:89:f7:ae:71:10:25:77:58:4c:50:88:c3:00:
                    36:08:07:1d:cb:9f:23:1a:1e:6d:d1:ca:2c:96:c0:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:6F:33:E5:3C:E3:E7:BC:3C:5C:A9:94:19:06:98:5B:D1:74:DF
            X509v3 Authority Key Identifier:
                keyid:30:CB:0F:58:B1:D7:9A:75:9D:91:4A:F9:7B:A1:28:7C:39:FE:9D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30CB0F58B1D79A759D914AF97BA1287C39FE9DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPtcDQGWGem1rgyqomM7k1KigumvXPzjf3GqBueYnEE/1/3137302e38332e3132382e302f32322d3234203d3e203631383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:d1:13:0b:03:d0:ff:00:3b:e3:7d:18:94:08:c1:e9:d2:f8:
         44:c6:8f:be:be:e2:75:1d:1e:0d:03:09:dd:03:10:72:1d:e1:
         dc:6c:14:23:84:77:12:8b:c3:e6:77:3b:d3:19:a1:95:ed:44:
         db:45:84:6f:91:b0:97:c2:0d:97:ca:f6:15:fc:d1:36:b2:6e:
         8c:d4:46:05:65:f4:b6:db:b2:8e:f5:8f:0a:7e:d9:1d:5c:2d:
         90:51:24:f2:ad:28:7f:96:8d:41:83:c6:cd:c5:10:b6:84:57:
         0f:7c:10:95:d6:a5:dc:c9:c5:84:1e:a0:88:16:10:63:27:c0:
         3e:80:30:fa:be:73:5a:80:e9:d1:58:54:29:d0:00:96:9f:3d:
         15:73:64:59:b6:ba:17:b7:0a:98:f5:7c:88:ef:a2:41:c3:5f:
         4d:56:4a:b3:28:71:74:d0:ff:f5:29:f6:7b:d9:f3:3d:9a:8e:
         4f:c2:7c:4d:e8:a9:d6:58:a5:f6:e0:d8:23:c0:3e:68:b2:28:
         bd:bb:6c:0e:ce:02:1d:0b:a1:82:cd:98:40:72:28:a0:23:a5:
         41:a8:58:d9:49:f5:fe:55:28:e7:d3:0c:f7:f4:30:67:af:67:
         d1:37:7f:f7:d0:78:46:b9:7e:2d:45:1a:94:b8:0b:65:05:ca:
         41:a7:a7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:00 2026 by rpki-client