Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa
File:                     3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa (raw, json)
Hash identifier:          smY/SAzd2Fuaf2YaSHRlggXrs8poIzwUXt+Sy0fZuxY=
Subject key identifier:   09:C4:11:48:7B:8A:11:98:85:44:8A:FE:CF:DE:E8:88:11:BB:D6:2E
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       18BBC4595851BB09D39EAB20AC05E69B662D2D22
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa
Signing time:             Thu 05 Feb 2026 06:26:06 +0000
ROA not before:           Thu 05 Feb 2026 06:21:06 +0000
ROA not after:            Thu 04 Feb 2027 06:26:06 +0000
asID:                     263043
IP address blocks:        177.129.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:c4:59:58:51:bb:09:d3:9e:ab:20:ac:05:e6:9b:66:2d:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Feb  5 06:21:06 2026 GMT
            Not After : Feb  4 06:26:06 2027 GMT
        Subject: CN=09C411487B8A119885448AFECFDEE88811BBD62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:76:04:cd:17:ae:0d:46:e7:4a:fc:86:83:
                    3e:24:1c:bf:54:a8:bd:6a:74:a7:7f:74:bf:08:dd:
                    bc:0a:77:b2:cb:9f:7d:52:b5:8e:c4:7d:8e:90:98:
                    e3:99:81:43:49:15:f7:50:92:af:db:3f:8b:c7:39:
                    b0:23:68:70:18:42:0b:52:0b:af:e0:16:3a:63:52:
                    d4:6e:bb:8f:56:f5:80:85:ec:8e:d3:5b:92:72:2d:
                    3c:5d:6d:b4:c1:d8:16:a5:b4:61:12:b2:a7:3a:87:
                    91:46:1d:20:dd:ff:b1:58:f5:91:8e:21:67:cc:8a:
                    db:41:27:ec:2d:64:eb:b5:4c:fc:d1:b5:9c:20:5c:
                    24:2b:5a:67:09:3e:59:7a:9b:1e:9a:65:97:6b:53:
                    bd:a4:7c:3b:cb:d1:8b:98:3f:80:88:14:2f:11:ce:
                    51:e4:45:4f:4f:08:01:50:c5:20:88:97:72:c6:37:
                    6a:97:ff:4c:04:8d:e6:96:68:a4:a3:a1:fc:a4:c5:
                    20:a0:74:88:02:98:ec:72:a0:e2:be:67:e3:02:ce:
                    8b:9b:75:50:21:04:47:93:95:99:37:14:3e:d8:51:
                    be:de:3d:6b:f8:51:e3:ef:9a:32:63:d9:18:18:2a:
                    2a:b3:c1:ae:09:40:9e:34:bf:2a:2e:c7:96:e7:a6:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C4:11:48:7B:8A:11:98:85:44:8A:FE:CF:DE:E8:88:11:BB:D6:2E
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137372e3132392e3139322e302f32322d3234203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:48:91:1c:10:c6:25:36:a4:7c:c8:6d:13:1c:45:12:3a:0d:
         2d:e3:3f:d3:a1:c1:59:d8:40:24:41:5f:6d:10:10:98:b0:01:
         5a:8b:2d:df:c7:a1:6f:77:ef:eb:ab:b4:73:53:c1:95:14:e5:
         52:a5:96:75:cf:1a:9b:64:1f:ee:59:c3:86:c7:41:8c:43:f1:
         f1:a6:50:e1:29:93:09:7b:72:3e:95:ee:52:e2:20:b1:b2:73:
         23:86:f0:53:6b:4e:9f:e8:56:14:ab:31:26:7b:6f:72:6c:97:
         f0:e2:a5:41:cd:dd:49:bf:87:b9:8c:0f:37:46:f8:af:89:cc:
         b1:19:06:6a:ec:e6:e7:3d:21:5d:91:aa:1b:9a:e0:91:db:b9:
         a3:7a:bd:97:0f:5e:95:d6:88:bd:d3:d1:eb:62:59:eb:e2:ed:
         14:77:d1:44:f7:81:90:e9:9f:c0:02:a6:90:93:57:2c:ef:45:
         fb:9c:be:a3:21:12:09:ab:b3:13:5e:3d:3c:a3:a8:d4:6a:a3:
         39:5b:f0:5c:e4:75:1e:4d:fb:f2:ed:bf:22:e0:44:ce:19:f5:
         bc:5b:bb:b8:ec:0f:30:3a:65:cd:97:1e:a9:25:b9:c4:ae:bc:
         31:ba:bf:1d:ed:73:fa:99:bb:f5:f7:75:a7:10:61:29:1e:6d:
         98:f7:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:42:07 2026 by rpki-client