Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
File:                     3137302e302e3234302e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          Laz4YLFFtezeErlvJGMgRFBNQ7RKM38W+k6IxZ/xDtM=
Subject key identifier:   61:04:F7:1D:E3:05:2E:75:9D:6A:F3:42:84:47:EF:D0:58:DA:DD:97
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       50AC1E06B80CFCEA495C4ED1B97740B413A7446D
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
Signing time:             Thu 05 Feb 2026 04:07:52 +0000
ROA not before:           Thu 05 Feb 2026 04:02:52 +0000
ROA not after:            Thu 04 Feb 2027 04:07:52 +0000
asID:                     28131
IP address blocks:        170.0.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ac:1e:06:b8:0c:fc:ea:49:5c:4e:d1:b9:77:40:b4:13:a7:44:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Feb  5 04:02:52 2026 GMT
            Not After : Feb  4 04:07:52 2027 GMT
        Subject: CN=6104F71DE3052E759D6AF3428447EFD058DADD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:0c:22:a0:f0:b3:dc:a3:75:34:d0:09:41:
                    6a:4b:17:4b:d5:57:e6:19:c9:c8:21:d0:5f:25:0e:
                    1b:42:64:5d:8c:e3:6f:0f:cc:3b:d1:26:5e:d8:90:
                    90:1c:62:fa:fe:83:b9:8f:b9:82:3b:76:4b:eb:43:
                    bd:81:41:07:73:63:dd:de:2d:1d:dc:6a:21:d6:b9:
                    ba:18:30:dd:49:1a:5c:58:8e:ca:c4:67:12:6f:df:
                    69:a0:f1:58:52:ea:86:bc:ce:cb:c8:86:f3:86:ee:
                    96:59:93:6b:6f:5f:5a:0f:01:d3:90:6c:1f:e4:2b:
                    fb:5c:c7:2d:81:89:1f:08:ca:a7:a5:2d:3e:48:23:
                    45:3a:87:fc:f5:67:84:c0:70:4e:10:d9:df:4c:fa:
                    6a:35:0e:3d:85:2b:ba:59:32:ba:a8:50:c1:42:af:
                    e7:ca:86:0d:98:3e:cb:63:42:9f:b7:71:51:f9:bf:
                    99:9b:5b:fe:09:03:9b:90:ae:eb:dd:77:85:e7:b4:
                    0c:0a:43:33:be:28:41:a9:4b:ce:6e:b9:a0:55:02:
                    2e:a1:ad:24:97:d7:6a:fd:2e:09:69:7d:7c:2d:9a:
                    9e:87:52:0f:b7:dc:43:0c:7b:fd:4c:fb:a7:31:cd:
                    c3:1b:c6:18:e3:52:6a:2b:d0:30:2a:78:a3:fc:d7:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:F7:1D:E3:05:2E:75:9D:6A:F3:42:84:47:EF:D0:58:DA:DD:97
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e302e3234302e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:97:a6:9c:11:c3:23:67:66:d7:b7:6f:35:e5:87:8a:01:
         fc:49:ec:70:ce:a5:70:13:d4:e4:a9:74:6b:c9:dc:80:60:bd:
         83:c4:64:bc:ca:8f:50:c6:bc:d3:f0:70:d6:59:f2:c8:62:88:
         57:c4:c4:6b:7d:48:02:19:83:ac:3a:fb:be:3d:60:82:c1:78:
         6c:6a:6b:94:1a:e4:39:52:62:e1:19:0f:71:5f:87:a6:48:5b:
         83:bb:9f:a0:e4:15:c4:ac:32:a6:da:9c:44:ca:9d:a6:1a:92:
         ec:2c:0b:38:25:f9:13:15:6c:c0:69:68:3d:50:4e:ca:dd:26:
         34:b5:57:26:21:bc:01:46:52:98:b3:82:c9:60:26:95:7a:25:
         54:d9:00:67:c3:46:10:36:99:bd:93:9f:26:a1:be:a4:5a:27:
         4b:a3:62:8d:8e:96:0e:88:a1:d7:cf:21:81:bf:f3:f3:8d:c7:
         7f:32:c3:ca:d7:e1:97:5f:af:8d:91:bb:47:72:ee:11:29:dc:
         db:bc:67:8d:22:4c:0c:d3:7c:3e:6d:44:48:c4:60:f0:bd:e0:
         29:80:61:1d:27:6a:25:83:14:f8:09:ff:0c:a7:12:ca:ac:4f:
         1e:d9:4a:eb:9e:a7:52:95:43:2f:6b:e6:32:54:15:da:b3:2d:
         ee:58:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:43:08 2026 by rpki-client