Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa
File:                     3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa (raw, json)
Hash identifier:          1rMOn1lHjNoJvQjPkWUj3e2BVMCtnI9aeRLaKTNjwOo=
Subject key identifier:   0B:66:94:7A:8D:AA:7E:02:3A:08:63:8D:5A:B1:8C:19:51:28:DC:C8
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       4BEA11CE031CD10C460A5221E11F914FBBCBF64A
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     266348
IP address blocks:        170.239.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ea:11:ce:03:1c:d1:0c:46:0a:52:21:e1:1f:91:4f:bb:cb:f6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=0B66947A8DAA7E023A08638D5AB18C195128DCC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:3f:4f:82:a5:80:e7:c3:8a:c1:59:93:73:
                    03:29:f2:91:95:19:0c:6f:39:ec:e7:06:a5:c5:b9:
                    3b:9b:59:29:ae:d2:55:e7:5f:c2:9b:bf:b2:bd:bf:
                    b7:d7:0e:a0:46:5d:ac:fe:c0:9f:e7:82:64:52:3a:
                    ce:15:89:20:58:60:ac:85:b8:5c:37:85:b1:12:e2:
                    c8:fe:92:a2:ef:3e:bb:90:06:5d:c0:e6:3a:bb:32:
                    3e:50:a6:0d:5c:2a:36:66:54:46:de:3c:75:fa:bd:
                    73:ab:67:bd:2d:cd:81:8a:f6:95:6c:f5:94:ba:01:
                    84:c8:3d:14:53:60:9c:37:3e:53:05:9c:e1:b6:ff:
                    69:d7:15:b6:21:2f:45:f7:b5:5a:49:3c:d9:ea:68:
                    b1:b2:b8:b0:e7:97:0b:af:8a:bc:15:c7:b0:14:59:
                    92:98:d5:0c:41:da:66:b1:11:a6:48:3d:f0:46:62:
                    1d:38:e5:95:a4:1b:28:a2:e3:95:43:24:d2:7a:ab:
                    70:47:1e:69:b8:d3:26:0e:88:f7:db:13:5b:b0:67:
                    ed:1a:41:8a:5e:a8:a8:8b:93:5e:b4:f7:4e:9b:68:
                    e5:5d:0b:a6:88:fb:c9:ef:51:1b:fa:e2:8e:f7:15:
                    3c:43:09:f8:48:cd:88:12:46:48:a2:5a:ef:99:c3:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:66:94:7A:8D:AA:7E:02:3A:08:63:8D:5A:B1:8C:19:51:28:DC:C8
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/3137302e3233392e3130382e302f32342d3234203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6e:c5:6a:0f:93:06:34:16:52:8e:94:aa:b2:fe:0d:63:7e:
         57:88:fb:2f:99:83:67:2d:3a:c4:db:f3:3e:02:f1:74:f2:19:
         34:b8:3a:3e:8e:0c:12:1b:5b:93:61:07:32:db:37:84:e2:52:
         4e:18:d5:b2:9b:ec:e6:50:07:c0:69:86:8f:88:6e:9e:0a:75:
         82:0c:a7:27:d7:ef:57:01:cb:6e:97:05:b6:0a:46:cf:b2:49:
         f2:cf:3b:de:e2:3d:9b:59:84:cd:c4:82:cf:3a:1b:6c:75:f4:
         8f:36:c4:f7:8c:c8:b2:c3:87:d4:2f:73:d5:ec:d0:76:9a:f9:
         45:16:0b:c0:4c:79:c6:f5:e3:64:71:9b:04:d5:8a:06:a4:63:
         31:21:0d:71:c1:63:aa:c6:af:ae:c9:e9:34:66:7c:c2:e1:bf:
         69:8e:f8:f6:4a:6f:2f:1f:28:02:c1:92:ba:d6:e6:c5:cb:7b:
         ef:73:0b:16:b1:72:c3:bb:64:7e:7e:a5:69:4f:51:03:e0:29:
         01:71:ea:5a:3a:d3:86:48:2e:3e:06:fd:f9:65:42:97:6b:90:
         39:f5:55:93:e2:85:8f:1b:79:e7:29:58:81:d3:74:45:f0:e9:
         a2:56:9f:07:c2:81:aa:7b:dd:23:c3:90:79:93:90:ec:fb:4c:
         30:31:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:11 2026 by rpki-client