Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          B3sjGqR5zzIRasku53H4+qj7/XAinLYSNHaOOWRLRIY=
Subject key identifier:   86:98:97:A9:AC:A3:E1:6F:6A:35:6D:3D:2B:44:FE:15:0D:7B:7B:C5
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       43A0D9E85D7BBCB77D6845E304F1C138644D40D9
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     264509
IP address blocks:        132.255.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a0:d9:e8:5d:7b:bc:b7:7d:68:45:e3:04:f1:c1:38:64:4d:40:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:4d:67:bb:cb:8a:d1:f6:61:f7:34:45:d3:
                    4e:15:7c:c9:5b:bd:fd:17:1c:ab:0e:08:bb:ed:e1:
                    1a:36:f3:2b:77:2e:58:19:8c:b5:b6:a2:50:ec:01:
                    6d:13:a8:1e:d4:97:ad:e2:34:6e:a6:b0:ff:f1:f3:
                    c1:da:2e:89:f4:80:78:85:08:d9:18:29:74:46:f6:
                    f1:55:60:d6:24:a1:f2:db:5c:6d:ed:b6:f5:28:fb:
                    ad:b9:0f:62:af:cb:0e:c1:9e:7e:9f:ad:84:67:03:
                    43:1b:84:37:bc:f0:59:4f:61:01:6b:63:db:26:ac:
                    54:6b:34:1d:7e:a9:59:09:86:ef:eb:ab:14:01:05:
                    9f:78:52:3c:f0:c5:c0:b5:3e:04:26:bd:f5:37:14:
                    37:3c:db:35:28:45:2e:98:fb:eb:9a:0f:5c:9d:1d:
                    c7:6c:4f:e6:b3:77:bc:24:c0:bc:75:e5:df:5c:ee:
                    13:14:a8:08:d1:a8:4c:1d:2c:9d:98:af:03:18:99:
                    ed:c0:e4:c8:fa:e7:09:30:8f:18:0f:c2:55:91:5a:
                    b1:d1:0c:09:8f:fc:fb:50:9d:08:91:6a:50:31:d6:
                    8b:ce:6d:6a:61:c3:13:3c:8b:49:56:0a:6b:a4:63:
                    18:96:40:ff:4c:6c:4d:1a:50:4c:f1:2c:f0:87:c5:
                    fa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:98:97:A9:AC:A3:E1:6F:6A:35:6D:3D:2B:44:FE:15:0D:7B:7B:C5
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:b7:08:88:3f:22:bc:ac:03:e3:3e:13:60:ad:a8:b0:fe:62:
         f7:49:67:8c:0e:9e:82:bd:a4:4e:8b:77:81:a7:11:ac:69:7f:
         bc:96:24:cd:e9:7f:96:35:29:06:b8:99:69:6e:29:ab:fe:a7:
         02:80:e8:0c:c4:15:c9:7e:b3:47:82:ec:80:ed:3e:79:09:76:
         87:e6:f7:1d:93:dc:1b:dc:13:aa:66:31:ce:e9:58:87:25:97:
         5b:32:ee:de:84:e2:da:61:3c:44:f1:58:be:3a:11:df:d8:c4:
         90:2f:3b:a2:98:3d:3e:65:14:5d:15:b5:b9:9b:3e:09:d4:66:
         f7:98:51:c7:93:56:d8:d6:66:a9:54:6a:72:08:b8:bb:02:b2:
         1c:ba:3f:0e:c5:c9:48:42:94:4e:c2:f4:ee:ea:6c:05:0c:45:
         74:9b:42:f0:a9:55:60:f9:42:a3:d1:ed:6c:b0:fd:1c:90:c5:
         8e:24:98:c5:c4:31:f1:e2:2b:e3:10:c2:e4:b0:94:2f:f8:aa:
         10:f9:d2:d8:11:23:1e:3d:68:9f:e4:10:80:01:90:02:71:54:
         6f:2a:a2:0d:77:f1:13:96:7a:97:5c:f8:03:98:ed:be:89:e6:
         e2:7e:42:05:22:3a:1c:d1:fe:e8:bf:29:09:11:d0:0f:44:98:
         c3:53:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 01:35:54 2026 by rpki-client