Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          wTs8xmZ1SOAHFgoUFsOyGlpaIWNAC1iO1/p4IQb8388=
Subject key identifier:   72:6E:E7:1E:CE:56:C6:E3:ED:BB:0F:E4:84:5C:EE:6F:0B:11:EB:5A
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       7555A8829587937ADFA43131C97EEB1404661943
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     262903
IP address blocks:        177.23.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:55:a8:82:95:87:93:7a:df:a4:31:31:c9:7e:eb:14:04:66:19:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:70:c0:53:af:58:5d:15:1a:66:a0:e3:ec:5e:
                    bc:f5:91:9c:91:ce:5d:65:13:d5:50:9d:13:92:46:
                    86:17:78:f3:f1:c6:dd:6f:ae:90:4c:8c:75:35:d8:
                    22:17:7e:8c:2c:67:70:8d:9f:9c:98:09:82:c4:7f:
                    95:1e:a3:fd:bc:e6:cf:68:1c:52:0c:5c:96:a5:ec:
                    91:d2:e3:84:ae:92:bb:62:43:70:db:e7:58:3a:00:
                    2b:d0:9c:31:49:ce:84:08:eb:ad:03:02:d4:1e:bc:
                    59:c6:a8:23:fd:eb:d3:6b:99:d8:92:a4:1a:97:6c:
                    34:24:4b:12:5f:a4:01:62:61:ce:3d:ae:4f:1f:46:
                    c3:6b:24:0a:bf:44:5d:f4:aa:95:ec:e8:5b:3e:86:
                    fe:97:40:32:6a:0d:c6:f3:4b:49:17:17:75:fa:c0:
                    c6:41:49:88:b5:9d:cd:3b:8f:f9:84:12:07:e4:67:
                    f6:ee:cb:4f:3f:07:ae:03:52:8b:1b:ab:f2:6e:fa:
                    0a:2b:03:b0:ae:a6:3f:ff:4c:56:e7:3a:00:a5:5b:
                    95:17:d9:6c:31:6f:43:3b:a9:fb:57:bb:e5:be:e4:
                    20:d5:2d:2c:c7:7b:6e:f6:d3:46:c3:12:f2:72:bf:
                    a5:ac:56:96:ad:6f:8a:b1:2b:79:ae:71:e3:5b:a7:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:E7:1E:CE:56:C6:E3:ED:BB:0F:E4:84:5C:EE:6F:0B:11:EB:5A
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3230382e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d2:c0:3b:1f:c6:35:36:55:99:84:3d:07:56:2c:f9:87:ac:
         29:cf:64:01:f4:cc:df:c2:f0:78:c1:0c:8e:9a:d6:9d:d5:df:
         0d:95:ba:7c:d6:26:a9:f9:03:75:da:f4:b4:81:bd:f7:38:1c:
         06:41:49:18:7f:ec:c8:69:77:12:18:3f:61:7b:fc:04:b2:ce:
         de:a8:48:48:ea:d7:e7:8c:fb:45:be:c5:28:af:7a:a4:26:8a:
         50:ff:a8:f2:93:f9:c2:62:f1:99:8b:fd:1a:f4:09:ed:a9:08:
         5d:17:ed:17:ac:1b:e9:57:67:9c:d7:c5:39:0e:f6:e2:40:04:
         80:ac:1b:20:cf:fa:43:4c:e3:bc:83:89:65:bc:0e:b9:1a:53:
         0f:b9:39:15:54:03:e4:32:0a:c1:ba:5e:fc:79:3f:f2:be:3b:
         a1:53:b3:ff:cc:ef:d3:3b:22:25:65:29:2e:c9:56:f4:9f:86:
         9d:58:9e:e9:10:8a:1e:ba:63:9a:9f:67:ac:1e:75:73:af:17:
         a7:72:e6:4d:e8:73:3a:16:58:8a:1e:2e:00:ae:18:53:6c:4e:
         dd:5d:e2:b9:4a:4f:62:4d:90:9d:70:d0:aa:89:f7:8f:e6:49:
         a9:ec:10:a6:bc:ad:85:de:27:c7:f8:66:1a:62:cf:9b:80:37:
         fb:3e:b9:08
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdVWogpWHk3rfpDExyX7rFARmGUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFCNzBEQzZFQTQ2QUE0RDJFQTI1NjYzRDI3QkNEMEM3
QjdCM0Q2MzAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTE3MEMwNTNBRjU4NUQxNTFB
NjZBMEUzRUM1RUJDRjU5MTlDOTFDRTVENjUxM0Q1NTA5RDEzOTI0Njg2MTc3OEYz
RjFDNkRENkZBRTkwNEM4Qzc1MzVEODIyMTc3RThDMkM2NzcwOEQ5RjlDOTgwOTgy
QzQ3Rjk1MUVBM0ZEQkNFNkNGNjgxQzUyMEM1Qzk2QTVFQzkxRDJFMzg0QUU5MkJC
NjI0MzcwREJFNzU4M0EwMDJCRDA5QzMxNDlDRTg0MDhFQkFEMDMwMkQ0MUVCQzU5
QzZBODIzRkRFQkQzNkI5OUQ4OTJBNDFBOTc2QzM0MjQ0QjEyNUZBNDAxNjI2MUNF
M0RBRTRGMUY0NkMzNkIyNDBBQkY0NDVERjRBQTk1RUNFODVCM0U4NkZFOTc0MDMy
NkEwREM2RjM0QjQ5MTcxNzc1RkFDMEM2NDE0OTg4QjU5RENEM0I4RkY5ODQxMjA3
RTQ2N0Y2RUVDQjRGM0YwN0FFMDM1MjhCMUJBQkYyNkVGQTBBMkIwM0IwQUVBNjNG
RkY0QzU2RTczQTAwQTU1Qjk1MTdEOTZDMzE2RjQzM0JBOUZCNTdCQkU1QkVFNDIw
RDUyRDJDQzc3QjZFRjZEMzQ2QzMxMkYyNzJCRkE1QUM1Njk2QUQ2RjhBQjEyQjc5
QUU3MUUzNUJBNzREOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4XDAU69YXRUaZqDj7F689ZGckc5dZRPVUJ0TkkaGF3jz8cbdb66Q
TIx1NdgiF36MLGdwjZ+cmAmCxH+VHqP9vObPaBxSDFyWpeyR0uOErpK7YkNw2+dY
OgAr0JwxSc6ECOutAwLUHrxZxqgj/evTa5nYkqQal2w0JEsSX6QBYmHOPa5PH0bD
ayQKv0Rd9KqV7OhbPob+l0Ayag3G80tJFxd1+sDGQUmItZ3NO4/5hBIH5Gf27stP
PweuA1KLG6vybvoKKwOwrqY//0xW5zoApVuVF9lsMW9DO6n7V7vlvuQg1S0sx3tu
9tNGwxLycr+lrFaWrW+KsSt5rnHjW6dNlwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHJu5x7OVsbj7bsP5IRc7m8LEetaMB8GA1UdIwQYMBaAFCG3DcbqRqpNLqJWY9J7
zQx7ez1jMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ5YVB2QUh5OW85SjVM
Q29aNHlpaWpQNjVNNVNLRkZ6ZmVUd2h3REROZTR2LzEvMjFCNzBEQzZFQTQ2QUE0
RDJFQTI1NjYzRDI3QkNEMEM3QjdCM0Q2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yMUI3MERDNkVBNDZBQTREMkVBMjU2NjNEMjdCQ0QwQzdCN0Iz
RDYzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80OWFQdkFIeTlvOUo1TENvWjR5
aWlqUDY1TTVTS0ZGemZlVHdod0RETmU0di8xLzMxMzczNzJlMzIzMzJlMzIzMDM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sRfQMA0GCSqGSIb3DQEBCwUAA4IBAQAk0sA7H8Y1NlWZhD0HViz5h6wpz2QB9Mzf
wvB4wQyOmtad1d8Nlbp81iap+QN12vS0gb33OBwGQUkYf+zIaXcSGD9he/wEss7e
qEhI6tfnjPtFvsUor3qkJopQ/6jyk/nCYvGZi/0a9AntqQhdF+0XrBvpV2ec18U5
DvbiQASArBsgz/pDTOO8g4llvA65GlMPuTkVVAPkMgrBul78eT/yvjuhU7P/zO/T
OyIlZSkuyVb0n4adWJ7pEIoeumOan2esHnVzrxencuZN6HM6FliKHi4ArhhTbE7d
XeK5Sk9iTZCdcNCqifeP5kmp7BCmvK2F3ifH+GYaYs+bgDf7PrkI
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:19:22 2026 by rpki-client