Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
File:                     3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          7P+1a905lmT0JcF7XUrjJKKZxFBgMfUbEtZ05StPduA=
Subject key identifier:   18:35:0E:FC:B8:96:32:61:72:BB:B2:79:77:C8:67:2D:D5:25:84:D9
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       7C9A22C8BDF8CD531BC6C1201A3008CCCA7766B9
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     262903
IP address blocks:        177.23.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9a:22:c8:bd:f8:cd:53:1b:c6:c1:20:1a:30:08:cc:ca:77:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:24:8b:f2:38:c9:e4:bf:11:e5:89:6b:16:
                    ad:84:d7:f8:0c:fa:0a:57:41:83:76:48:8e:dc:13:
                    15:5c:ae:d1:d0:21:82:98:c5:da:d4:80:22:2c:e1:
                    6a:05:66:d1:a9:93:b1:19:6d:13:28:fb:29:4a:5a:
                    8b:2c:68:89:ad:b1:cd:e0:30:d4:43:92:4a:98:fd:
                    81:19:06:7d:f5:2e:61:c3:60:0d:12:ea:95:15:45:
                    bc:6e:49:2f:43:5c:96:3f:ff:4f:48:b7:17:39:bc:
                    cd:92:57:6c:a9:2a:83:2c:40:fa:8e:70:6d:80:70:
                    6f:05:ab:f8:bc:a5:05:af:e7:6f:01:b7:15:c5:84:
                    a3:88:11:48:1f:a2:7a:42:98:b0:cf:1c:1c:68:6d:
                    f0:e1:bc:cc:76:db:20:af:29:d5:17:08:54:f1:7e:
                    41:e8:1e:9d:7f:bf:ee:f3:d3:29:9d:d4:44:23:05:
                    0c:54:ce:0c:fd:8f:55:f3:51:25:ed:b4:73:6e:25:
                    39:75:3e:d1:22:26:58:75:da:1d:24:d7:8c:5c:34:
                    6c:e9:c7:39:ad:e6:d0:7b:b2:1a:a4:8f:51:bd:ee:
                    8a:b3:da:69:71:5c:a3:15:d2:e5:67:b9:8a:e9:73:
                    65:00:ab:1a:c4:47:86:97:fe:62:0e:6e:4f:61:44:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:35:0E:FC:B8:96:32:61:72:BB:B2:79:77:C8:67:2D:D5:25:84:D9
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e32332e3231322e302f32322d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:5a:d7:8e:26:c3:cb:65:7c:40:aa:00:eb:3f:1c:d9:34:
         91:b9:e8:7d:48:4d:59:48:49:0e:83:08:74:da:3c:3b:69:88:
         46:1e:ec:f2:f0:6b:1f:d9:ae:52:ed:3e:8e:b7:85:a2:c3:96:
         62:60:86:51:94:7c:ab:7f:24:16:d1:03:7f:36:b2:d3:83:3c:
         78:a1:63:06:07:7e:8d:b5:11:7e:9e:20:2b:ae:b2:50:21:9f:
         a7:9d:53:ea:5e:ef:3c:59:30:c1:e0:7b:35:51:fc:61:77:91:
         25:70:32:04:2d:df:90:fc:70:e6:bc:1b:2b:a0:84:3d:ad:27:
         be:6c:6b:f5:ad:ab:3c:99:4f:98:73:74:c7:a8:e2:0e:98:30:
         9d:be:51:2d:a7:be:36:f6:25:72:74:08:97:89:45:a2:98:35:
         e7:d2:cd:df:48:8f:78:2a:f1:8e:bb:a8:e2:eb:54:62:dd:33:
         ce:88:3e:98:b7:1b:32:ba:52:24:58:9a:cb:f5:b4:63:5a:4c:
         ea:23:e9:79:77:a9:f9:6a:fd:9f:15:89:7e:7d:59:4e:2d:d1:
         c0:1c:91:90:8f:11:26:94:42:f2:8b:eb:6a:f6:40:7c:91:1a:
         75:35:7c:aa:c3:e3:50:dc:b0:ae:8f:93:57:e9:88:ed:87:0f:
         5f:83:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:22:29 2026 by rpki-client