Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa
File:                     3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa (raw, json)
Hash identifier:          0poYO3CbFsxf9KT273lmV4Kizm8boSKhwn7LzF/nQAI=
Subject key identifier:   60:2F:23:EF:2F:24:EE:CB:A3:04:E6:AE:A3:E1:CB:03:A4:53:2C:BB
Certificate issuer:       /CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
Certificate serial:       4F4EF984C0CDF1914AD2FC511800BA9B4D7C07E7
Authority key identifier: 58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     262499
IP address blocks:        177.66.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl
                          rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4e:f9:84:c0:cd:f1:91:4a:d2:fc:51:18:00:ba:9b:4d:7c:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=602F23EF2F24EECBA304E6AEA3E1CB03A4532CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:03:28:7a:ac:b1:44:31:dd:bc:fb:df:b2:
                    73:e0:f3:7f:15:26:69:47:a4:68:2b:d6:b6:db:c6:
                    75:e3:b3:ef:21:b3:97:c7:fa:57:b3:9f:c3:11:2b:
                    1d:b7:33:91:55:93:a4:e3:89:0a:2f:92:e9:a5:3c:
                    dd:27:5b:53:5b:4b:da:a2:ac:3f:23:34:d8:ec:eb:
                    a4:24:bf:75:0e:b8:a3:bf:4b:d2:91:1b:b2:20:5f:
                    de:f9:2f:a5:f6:4e:6c:6f:7d:cf:f0:0a:e1:73:6e:
                    0c:5a:a5:00:e4:2f:5f:56:32:ec:ed:b5:58:fc:3d:
                    5b:c8:bd:35:b8:15:5b:85:84:0f:36:c4:ae:a1:0b:
                    e4:ae:92:99:0e:ec:07:76:a7:6e:ee:ad:09:0c:e9:
                    e8:03:20:d2:24:22:c8:aa:a1:5a:67:bd:c2:e7:63:
                    08:c2:c8:c5:0f:07:fe:d6:17:e5:2f:34:a3:da:02:
                    55:8b:43:a7:85:64:41:b3:e9:c5:c8:ff:69:75:c7:
                    dd:e4:a1:e7:54:e6:a3:34:ad:72:67:0c:bf:6b:2c:
                    48:7d:3e:40:d0:2b:cb:95:42:cd:6b:b7:e8:f3:d5:
                    62:43:ea:52:03:7d:61:f5:2f:68:69:e2:43:58:78:
                    83:a3:99:e5:cd:c2:c1:a3:ed:d3:dd:94:87:e7:e3:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:23:EF:2F:24:EE:CB:A3:04:E6:AE:A3:E1:CB:03:A4:53:2C:BB
            X509v3 Authority Key Identifier:
                keyid:58:A3:26:D8:64:65:3D:AE:8B:EF:3A:C4:1D:8B:9C:B7:0E:BD:D1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A326D864653DAE8BEF3AC41D8B9CB70EBDD1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/1/3137372e36362e3135322e302f32332d3233203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:20:74:a0:e3:ed:11:c2:75:0f:0f:62:03:9b:e4:18:2a:85:
         e6:f0:77:87:1b:4f:3f:b1:d3:d5:19:f7:90:70:79:40:e6:a1:
         6e:34:c0:75:8f:1d:60:0f:85:cb:33:3a:16:77:df:4a:bd:c9:
         90:0a:95:5c:d7:24:82:e1:ff:84:14:e6:8a:ec:8b:85:08:a9:
         aa:a9:bd:ef:d1:8d:34:87:4f:8c:bc:b7:f9:c6:a7:93:67:9b:
         d9:13:0f:21:88:ff:5a:4e:29:42:b4:a1:78:88:d4:6d:db:56:
         e4:87:c7:cb:2f:fd:7f:9a:3e:74:08:16:24:32:a4:c8:f0:3c:
         78:0a:db:1e:a7:b0:2e:b1:b6:63:32:b2:1d:fc:27:25:f0:b5:
         50:0c:29:f2:e2:5f:bc:0d:94:82:f8:19:96:9f:62:c9:14:6a:
         96:d8:a2:87:80:aa:1b:61:73:ba:28:db:4d:b4:35:4c:65:eb:
         73:56:66:fa:a8:88:a1:92:c4:04:5b:fe:91:bb:f1:28:d5:a7:
         29:9c:b4:75:69:73:91:e2:fb:06:b8:0c:4e:d2:a2:ec:fe:ea:
         89:ee:d4:7a:74:27:b2:af:20:37:09:16:f1:ec:14:5f:4f:7b:
         ac:a9:9d:4c:86:de:76:83:a4:ff:5c:d3:bd:7a:1c:4e:c4:56:
         a4:d6:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:57:56 2026 by rpki-client