Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa
File:                     3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          UbyQMrHUKwbLKtTgseFNC4d0CqNtWevhcDvEeIFUG3I=
Subject key identifier:   37:4B:34:95:AE:1A:C3:42:A4:AB:2E:A4:79:F5:3E:16:93:15:20:CF
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       3DA3F61EAA7E8A6FE98AFBDAAD821EF95B5B0A7A
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa
Signing time:             Thu 05 Feb 2026 04:07:52 +0000
ROA not before:           Thu 05 Feb 2026 04:02:52 +0000
ROA not after:            Thu 04 Feb 2027 04:07:52 +0000
asID:                     28131
IP address blocks:        170.81.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a3:f6:1e:aa:7e:8a:6f:e9:8a:fb:da:ad:82:1e:f9:5b:5b:0a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Feb  5 04:02:52 2026 GMT
            Not After : Feb  4 04:07:52 2027 GMT
        Subject: CN=374B3495AE1AC342A4AB2EA479F53E16931520CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:9b:d3:6b:6a:cf:30:6c:02:4d:d5:c5:eb:
                    8a:af:57:e7:d1:61:6d:01:81:f9:f9:9c:16:8a:28:
                    52:51:b0:f5:d1:cc:c2:40:0a:71:36:97:cd:34:7c:
                    5b:6e:85:ed:b1:ae:9a:8f:fb:98:ff:30:33:19:1a:
                    53:6c:0d:be:01:bb:8c:b2:25:74:28:34:9f:4b:9c:
                    87:00:9b:4c:e1:f1:4d:00:f0:9d:b6:2d:2d:47:89:
                    49:59:ca:03:55:3e:7e:9d:65:1d:3c:1f:c9:fd:28:
                    39:7b:2f:ff:f0:f3:2e:31:bd:47:c8:9c:04:15:71:
                    c7:0d:72:99:de:cd:02:57:91:20:13:7d:c4:5d:3e:
                    44:af:da:0f:c8:06:27:93:d0:ee:ec:0f:9f:1e:49:
                    10:3a:03:94:4d:ff:42:4e:b2:4b:ad:03:c7:b0:6e:
                    fb:ef:d5:3f:e5:ef:96:f3:16:8f:5a:10:fd:46:b6:
                    84:eb:ba:96:08:0b:30:3d:60:b0:bf:30:05:15:6a:
                    3b:18:4a:41:3c:19:bb:eb:8f:08:19:08:5d:b2:ad:
                    7c:f0:5c:eb:1b:ed:25:2f:f0:b4:fe:55:4a:58:d8:
                    77:73:58:41:a6:a4:d4:3e:ca:2b:0e:26:6e:1d:ff:
                    70:c9:67:d3:2c:5e:2a:9b:fe:25:a6:ec:6e:0a:50:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:34:95:AE:1A:C3:42:A4:AB:2E:A4:79:F5:3E:16:93:15:20:CF
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:1c:24:83:98:c7:66:b0:8e:88:5f:f7:cf:46:85:73:1e:
         31:d8:89:e0:10:22:77:83:e9:44:46:0e:52:42:16:cb:41:62:
         6d:14:59:ce:52:5f:6a:49:11:1b:41:75:c1:23:68:1a:4f:05:
         8f:2a:7d:71:ce:ce:7a:1a:96:68:cc:50:f1:39:d7:ec:ae:67:
         23:4d:ec:89:c4:be:5f:20:f6:3d:6c:ac:de:37:a0:56:ca:f7:
         0c:63:dc:58:30:41:bf:07:de:be:2d:59:95:d4:bf:35:77:32:
         32:ee:b8:54:39:2e:98:bc:75:87:77:b3:7a:41:41:06:ce:d2:
         61:7a:24:df:69:1d:95:9c:03:2a:8e:9b:af:96:60:c7:81:05:
         1b:ef:04:7f:4c:80:1c:e1:dd:88:b5:9d:7a:1d:b2:75:02:61:
         aa:12:5a:3a:b8:00:ee:c3:95:5d:c3:6d:62:0a:40:d9:56:bf:
         c5:0e:14:b3:97:b9:5e:fe:92:d2:b2:eb:10:e4:07:b2:b2:4a:
         17:6a:97:cf:f1:15:c7:1f:a2:18:c7:00:98:f6:8b:41:bf:ea:
         ce:a0:ec:d5:9c:21:3a:ec:d1:04:8c:27:43:4f:51:c3:f6:62:
         34:3a:40:57:29:15:20:e9:8d:36:01:77:e3:9c:21:9f:cb:23:
         d5:a4:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:15:50 2026 by rpki-client