Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32332d3233203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32332d3233203d3e20323636333438.roa (raw, json)
Hash identifier:          DbrvbVvzXukMAYThNw2mPdx7CZ3ApWp0vd/WNogRVbs=
Subject key identifier:   2D:7C:7A:5F:D8:4D:C0:C1:4A:04:3B:02:E9:C8:2E:39:FE:26:46:9B
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       3DB61E34D32C883884617A7956AAE550629ED9DC
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32332d3233203d3e20323636333438.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     266348
IP address blocks:        170.239.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b6:1e:34:d3:2c:88:38:84:61:7a:79:56:aa:e5:50:62:9e:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=2D7C7A5FD84DC0C14A043B02E9C82E39FE26469B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:4a:39:0c:50:80:77:53:a6:2c:8d:a1:c6:
                    d7:3a:6c:46:59:28:15:f7:9e:e5:23:65:4a:5c:8a:
                    09:b2:5f:8b:4d:af:5d:d7:25:89:21:28:52:28:ef:
                    19:e3:1a:3a:e7:4f:6e:03:61:39:5f:20:3a:35:e8:
                    97:f6:a6:89:25:31:7d:bd:e4:bf:21:ff:a8:d9:90:
                    1e:01:05:6c:7d:8a:c5:b0:b9:1a:d0:95:d6:5d:ce:
                    99:b8:95:8b:25:3f:33:45:32:f9:9a:3d:f2:a8:6c:
                    d5:69:6e:06:c8:a0:fa:5f:a9:28:94:39:a1:b7:7d:
                    2b:2d:72:84:90:00:2f:d6:16:5b:de:08:68:e2:6d:
                    32:10:e4:72:c7:95:c6:ba:ff:c5:76:4e:f0:dc:48:
                    b1:3f:82:b9:01:3f:34:50:23:20:54:c1:e4:ac:22:
                    e0:3b:0f:34:47:80:c3:90:a3:56:40:35:41:a5:6b:
                    a1:06:7b:00:8e:89:25:d3:0b:b3:82:47:86:2a:2b:
                    cd:08:fa:0e:ab:95:d3:df:b0:21:2b:4f:77:bc:d5:
                    32:04:a3:4c:e8:eb:7c:cf:c8:ce:c2:7e:db:c5:ed:
                    3d:6e:de:ae:cf:18:59:9c:52:b9:90:40:4e:14:75:
                    dc:a1:02:64:d2:c5:09:11:02:02:c7:d4:15:5b:38:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7C:7A:5F:D8:4D:C0:C1:4A:04:3B:02:E9:C8:2E:39:FE:26:46:9B
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32332d3233203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:c0:23:1b:88:3f:7b:22:2c:f3:1e:b1:d8:95:23:f3:90:
         20:dd:53:37:bf:8c:6d:c6:aa:83:c8:77:da:88:2a:61:91:30:
         f7:49:48:8e:70:f9:ad:df:07:c6:17:a4:4a:30:f2:23:29:52:
         c1:75:b4:e4:13:0f:15:2b:bf:c0:23:72:b3:f3:3f:b2:5e:80:
         5a:3a:fe:0c:41:a8:6a:a6:8b:4a:a9:5a:71:16:2c:74:34:6a:
         cd:e9:6d:69:43:2b:c9:42:d5:f6:83:fd:fa:b1:41:32:28:a6:
         c7:3b:74:9f:86:df:cd:09:5e:a5:31:29:4e:7a:ef:c3:0e:44:
         cb:fe:a0:a3:79:09:6a:ff:1b:5c:7f:79:e3:9f:fe:5f:cc:6b:
         f5:16:46:b0:bd:18:19:f7:a8:8e:0c:73:4c:cd:4c:7f:65:bf:
         2f:b2:f1:19:42:a0:8b:f3:dd:56:94:e1:bf:34:60:75:e4:a7:
         76:ff:54:d5:22:0f:ed:69:91:e4:a0:2e:2a:da:f0:3f:d8:5f:
         90:9b:37:90:9a:b1:db:4d:72:db:b6:3d:1c:b6:68:9f:a5:47:
         c4:5c:f9:d6:6a:59:e4:d5:27:4e:f5:2b:90:25:b1:32:75:67:
         99:40:55:66:9c:65:d3:2b:4b:d9:48:d2:d3:4f:d2:47:9e:6e:
         d9:fe:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:18 2026 by rpki-client