Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
File:                     3137302e38342e38342e302f32322d3232203d3e20323634393936.roa (raw, json)
Hash identifier:          Csp/F7hPL9rHcSUZblWg3D1sDcUfPg0TbfSnK0pweyc=
Subject key identifier:   A1:01:A9:6E:6B:1D:F2:A9:4B:F3:74:D5:28:B9:54:CD:FA:19:A9:80
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       6017678AD0B75AEC8940859A7316A030B38F4477
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa
Signing time:             Thu 05 Feb 2026 09:43:50 +0000
ROA not before:           Thu 05 Feb 2026 09:38:50 +0000
ROA not after:            Thu 04 Feb 2027 09:43:50 +0000
asID:                     264996
IP address blocks:        170.84.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:17:67:8a:d0:b7:5a:ec:89:40:85:9a:73:16:a0:30:b3:8f:44:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Feb  5 09:38:50 2026 GMT
            Not After : Feb  4 09:43:50 2027 GMT
        Subject: CN=A101A96E6B1DF2A94BF374D528B954CDFA19A980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:f7:50:4e:4c:55:b0:f5:51:bd:ef:b8:15:
                    47:a9:8a:ca:a6:fc:80:f1:0f:dd:95:2c:88:20:37:
                    0f:07:bb:36:91:56:64:c3:e3:00:eb:bf:77:0d:30:
                    e7:05:51:eb:79:31:6d:83:96:7a:85:82:ec:60:a0:
                    f1:87:40:e7:44:b0:8f:47:92:cb:11:07:6f:b7:e1:
                    24:af:2e:35:01:ac:9d:c7:9f:59:41:e2:17:53:88:
                    90:b4:75:dc:3c:94:df:d4:28:76:05:5e:62:4f:16:
                    9e:73:68:86:a8:8a:ae:dc:a3:a3:4b:e4:2f:1f:24:
                    96:59:59:97:26:42:31:f0:a5:7c:1b:86:30:2a:65:
                    d6:d6:fa:a1:49:23:07:70:19:db:cc:0e:cb:7a:57:
                    2a:b8:94:d2:34:33:12:5a:cf:d7:b0:83:b7:62:aa:
                    26:12:06:09:50:6a:63:16:c3:c9:11:89:97:7c:e8:
                    45:0d:d4:27:4a:71:e7:47:60:2b:2d:5b:fe:5c:13:
                    76:b9:f4:1f:d2:52:73:06:e4:a7:ea:2a:b6:72:a9:
                    53:17:4c:30:62:46:12:e3:59:42:c4:31:c0:ff:87:
                    b7:e9:91:c8:98:a1:f0:bf:b7:ae:2c:82:77:1b:5f:
                    ca:61:f5:82:a1:89:eb:9b:54:08:ba:23:40:c1:a6:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:A9:6E:6B:1D:F2:A9:4B:F3:74:D5:28:B9:54:CD:FA:19:A9:80
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/3137302e38342e38342e302f32322d3232203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:98:af:50:00:9b:37:99:c2:8b:d3:27:f9:34:54:8d:ae:
         05:ea:7d:5f:1b:8a:86:de:35:cd:dc:e8:4e:83:3b:03:a1:00:
         59:22:3e:be:20:4e:33:c3:58:7b:ed:79:e4:98:93:3f:0a:7b:
         48:a3:44:85:3e:15:ff:b7:f0:e3:b8:de:61:95:6a:f4:8c:1e:
         d1:c1:70:32:50:ab:87:4f:7b:86:2c:96:62:66:e6:88:20:43:
         46:f5:ba:d2:0a:69:f5:b0:01:d2:3e:71:f2:89:39:a4:91:6f:
         5c:6f:98:4d:f3:d4:cd:e1:6c:a1:a0:39:ec:f4:f1:30:67:db:
         1d:57:67:34:69:e0:81:64:7b:39:da:ff:f7:5e:d7:2b:81:44:
         96:79:ff:f8:27:97:ec:5e:03:b6:14:5b:81:7a:48:fe:4f:52:
         02:a7:fd:25:9b:2f:10:be:4a:21:3d:f8:03:1b:80:cb:bf:72:
         f3:6a:36:4a:f3:2e:94:9a:6b:95:dd:b7:24:53:0b:d5:b0:29:
         d0:a6:b7:fb:3e:97:9c:a9:07:51:cc:87:9a:a6:f3:01:a3:8d:
         6c:e7:38:bc:68:54:d5:87:85:a2:b7:1d:7f:fc:57:84:e0:14:
         19:d1:99:b4:8e:00:c8:80:df:d9:a7:d8:fd:40:00:a5:0f:7e:
         1c:40:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:54 2026 by rpki-client