Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa (raw, json)
Hash identifier:          QGtbTursSV/vuLdxjF0/IpY/EgMfx6zcEH8MlYkeWIo=
Subject key identifier:   89:F9:E4:6C:CB:AF:F3:91:74:A4:79:B4:62:88:36:A5:20:26:11:A8
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       469CF6D96EA52B9D81FE0199E39AFB1F1B26D7CA
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     266348
IP address blocks:        170.239.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:f6:d9:6e:a5:2b:9d:81:fe:01:99:e3:9a:fb:1f:1b:26:d7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=89F9E46CCBAFF39174A479B4628836A5202611A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:47:06:2f:c8:71:59:cf:5e:1f:b3:64:05:
                    35:bc:9f:b0:81:42:a4:50:77:ea:de:a8:2f:82:e7:
                    66:bd:b7:2a:1c:32:19:c1:84:36:36:83:9e:ed:fd:
                    02:80:09:b6:84:6f:63:93:01:32:2c:5c:e3:50:51:
                    87:8e:b3:1b:3a:43:ae:7a:a5:34:cc:11:bf:21:c5:
                    f0:24:20:1b:3c:4c:17:6e:0a:fa:7b:f3:fe:1c:a0:
                    98:93:81:92:fd:e4:00:d4:34:0f:7d:14:59:9b:e1:
                    91:9a:30:17:97:2a:81:60:56:f3:a8:a2:76:bb:6e:
                    bb:e2:34:26:62:d9:7c:7c:3b:03:02:3e:02:95:06:
                    b7:30:ad:9d:57:3d:9f:b9:6a:11:88:20:8d:51:2d:
                    09:40:ef:ad:03:74:cc:bf:3c:ba:0b:27:93:0d:1f:
                    37:bb:c1:9b:9f:e2:55:74:f8:0c:08:af:80:27:4d:
                    d3:be:31:50:5e:c2:6f:bb:1c:89:0a:ca:39:c1:f6:
                    84:26:fd:35:5c:5e:23:ae:3e:91:36:49:c7:03:86:
                    a6:5e:fb:42:9a:ea:22:5d:ef:70:2f:ab:55:59:c3:
                    3e:6f:9a:d2:de:cf:8b:65:bb:99:47:a0:42:9f:74:
                    91:d7:f8:ed:8e:e7:1b:64:fc:28:7a:be:aa:5c:53:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:E4:6C:CB:AF:F3:91:74:A4:79:B4:62:88:36:A5:20:26:11:A8
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32322d3232203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:34:45:61:8b:52:6c:06:ea:62:16:77:6f:cf:19:16:73:
         66:a8:a2:85:da:0f:d0:72:8c:dd:1c:c0:93:ad:01:fd:0e:5a:
         e3:33:59:c2:14:8a:69:8b:80:19:58:15:7b:1b:98:c9:04:6a:
         a3:60:02:bc:d3:70:ea:6d:8a:5d:58:1a:9f:6e:b8:81:54:6e:
         3a:35:4a:1c:46:92:9a:9b:40:0f:b5:18:4b:98:26:fe:e3:a9:
         6c:6a:81:25:e4:54:8f:58:7b:da:27:a8:a7:2d:7b:d1:41:82:
         03:2a:b1:32:7a:78:9b:18:3e:84:60:c0:c0:b9:4d:78:97:71:
         eb:27:a6:1a:30:69:a5:f3:e8:91:3b:66:82:d9:9e:c4:0d:34:
         6a:6e:62:a2:3d:bd:a3:94:89:f2:d3:ff:7f:9f:09:93:e5:30:
         25:d2:24:61:7f:9c:4b:49:1c:80:d2:3c:e6:9e:6f:76:c0:99:
         e6:43:16:c3:9e:97:cc:7c:d2:cd:9d:34:bd:33:4f:ce:68:32:
         a2:0d:ae:21:11:89:19:7e:c3:e6:2a:ca:7f:76:ca:a3:83:e0:
         d2:49:0e:57:15:61:df:63:ec:06:55:4d:d8:78:98:06:c6:73:
         cf:76:78:46:7c:04:65:9a:21:f9:70:40:74:2d:e4:34:6c:3d:
         8a:81:ad:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:15 2026 by rpki-client