Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32372e302f32342d3234203d3e20323732353534.roa
File:                     3137392e36332e32372e302f32342d3234203d3e20323732353534.roa (raw, json)
Hash identifier:          EphUmRMBbTsVnpqU5A5NgeP3qUDK/9B/az/Z9hB/9TU=
Subject key identifier:   D9:D2:CC:85:21:FC:38:63:B0:4B:A2:81:4E:CF:D2:3C:91:5B:E0:AE
Certificate issuer:       /CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
Certificate serial:       2957A6E9B9544566160E01DAB5DA0F510252C131
Authority key identifier: 19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32372e302f32342d3234203d3e20323732353534.roa
Signing time:             Thu 05 Feb 2026 05:52:34 +0000
ROA not before:           Thu 05 Feb 2026 05:47:34 +0000
ROA not after:            Thu 04 Feb 2027 05:52:34 +0000
asID:                     272554
IP address blocks:        179.63.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl
                          rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:57:a6:e9:b9:54:45:66:16:0e:01:da:b5:da:0f:51:02:52:c1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19C9E939FDE3ECCA217048709E87CDA9D76B36B8
        Validity
            Not Before: Feb  5 05:47:34 2026 GMT
            Not After : Feb  4 05:52:34 2027 GMT
        Subject: CN=D9D2CC8521FC3863B04BA2814ECFD23C915BE0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e1:41:9d:5f:2c:a8:c0:55:b9:fa:98:ff:c4:
                    af:01:b6:ad:a6:a8:83:14:40:35:26:e4:8f:cd:f9:
                    eb:d3:13:30:2d:2c:60:a7:0f:27:77:35:eb:23:7b:
                    97:55:5c:cd:d1:3e:fd:85:d9:14:92:50:34:89:58:
                    6c:b6:70:76:91:4b:93:72:37:59:e3:b1:08:14:ad:
                    8d:78:ff:46:5a:3d:a0:f2:4c:eb:c3:3a:5a:c9:72:
                    f0:2d:e5:0b:5f:99:69:8f:08:c6:d2:fe:8d:d6:b4:
                    f2:d7:1b:8b:ee:c8:d6:22:78:7d:e7:67:3f:de:0d:
                    bb:d1:27:d9:ee:ce:e8:18:b6:0a:79:60:0d:8b:50:
                    4e:3e:75:ac:ac:81:19:be:a3:19:7e:b5:d2:ca:3b:
                    e5:c4:36:bb:3f:fd:ff:53:5d:53:a0:bc:72:ca:bf:
                    49:44:28:15:d9:bb:14:0f:e4:e2:8f:10:24:86:8d:
                    7c:05:9b:13:d1:11:9c:9d:f5:f6:3a:f7:20:8a:ac:
                    a1:4a:61:76:fa:94:32:ad:20:5e:ad:ff:2f:3a:cd:
                    8c:40:02:79:62:88:8f:18:27:9e:da:d6:af:a8:b8:
                    a2:ba:52:1e:c2:e5:bb:55:03:9d:ec:94:4a:08:e9:
                    c3:82:67:cd:2d:1b:e2:24:c6:e4:b7:23:de:75:e0:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D2:CC:85:21:FC:38:63:B0:4B:A2:81:4E:CF:D2:3C:91:5B:E0:AE
            X509v3 Authority Key Identifier:
                keyid:19:C9:E9:39:FD:E3:EC:CA:21:70:48:70:9E:87:CD:A9:D7:6B:36:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19C9E939FDE3ECCA217048709E87CDA9D76B36B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/1/3137392e36332e32372e302f32342d3234203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:1f:ba:78:56:a2:6d:32:42:4c:22:ed:c7:a0:05:e9:71:
         9d:63:2f:c8:80:d7:3d:71:67:13:cb:af:a3:38:26:7b:da:57:
         ad:68:38:20:ce:93:8d:d7:f2:b1:bb:df:21:d0:6d:37:e1:ec:
         05:e7:9e:48:20:be:cb:c6:5b:b8:13:cd:fc:0e:42:ce:92:21:
         1f:dd:70:f8:c5:43:e5:97:d8:19:14:7c:7b:32:c8:5f:ea:cf:
         98:fd:b3:ce:27:8d:5e:0c:8a:51:f6:ef:43:04:d0:2a:cf:c4:
         ee:69:35:52:99:91:1a:28:7d:fc:ab:6a:08:af:38:c3:c5:ae:
         62:78:e8:82:71:81:bd:52:96:8b:86:1b:53:63:90:2a:5f:05:
         a6:a7:ae:0f:6b:7f:25:60:a5:40:8b:3b:18:e6:09:df:35:05:
         e2:1e:d4:79:89:e2:cd:a3:45:88:94:59:4e:47:ed:1b:1f:ec:
         19:c8:fc:ee:65:f3:0a:37:00:88:ea:88:2a:39:b4:39:10:47:
         68:49:7b:2f:c6:fb:eb:90:43:71:18:2f:02:25:06:1a:aa:76:
         d8:cd:4f:15:9f:c4:0d:44:07:f9:eb:6a:2c:73:4b:2e:91:88:
         78:38:52:15:1a:2f:dc:cb:ce:22:ee:55:c0:4f:36:c5:ec:0a:
         2b:30:76:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:49 2026 by rpki-client