Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa
File:                     3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          VAYrxCa2og8J9FJ0O7g7wqUj3PkB1fZ4uSX3J0h6AgQ=
Subject key identifier:   E6:C8:82:99:6A:77:84:22:93:3B:9F:18:AD:B4:C5:C0:7F:02:1C:ED
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       5FE3A394DFB8E242797CA220EB4866737D80DECE
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     262903
IP address blocks:        177.86.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e3:a3:94:df:b8:e2:42:79:7c:a2:20:eb:48:66:73:7d:80:de:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:91:98:f1:b1:d4:29:d1:4d:c9:cf:9d:a1:d3:
                    cb:fd:bc:f7:9a:6f:a3:21:61:ef:41:a5:fa:16:ab:
                    22:e4:81:45:88:89:7c:10:0f:ad:81:6c:28:b6:b1:
                    2f:72:f3:2c:bb:d6:b7:be:ae:76:da:89:5f:8f:34:
                    26:4b:72:60:c9:db:95:aa:0f:16:4a:ec:d9:5c:6b:
                    0f:1b:22:74:74:15:70:d9:69:f1:30:7b:c4:43:89:
                    7b:3d:07:17:4b:b4:f3:2e:7b:c1:04:bc:75:5b:27:
                    48:60:d1:50:5b:57:a9:49:87:cb:fb:e8:77:1a:ba:
                    7f:5e:51:16:9f:d0:eb:b2:2f:7b:f0:7f:ad:83:59:
                    0a:d8:3a:54:98:a0:f4:26:34:c5:9d:00:7e:19:cf:
                    5a:fa:d7:10:b7:9d:c9:11:35:63:2f:7f:05:ec:09:
                    5e:a4:b7:0f:17:9b:99:c6:58:7d:5c:6b:66:b1:55:
                    52:4d:67:0d:f7:6d:13:5d:25:d2:d4:c9:14:4d:2a:
                    76:a6:a1:3a:de:de:ee:dc:93:d2:49:69:19:6e:6e:
                    55:1d:51:67:c8:9a:db:f4:27:c7:83:95:f5:53:a3:
                    3a:bd:9e:7c:21:88:6d:6c:c7:92:b6:24:b0:38:59:
                    48:d6:d6:d8:93:26:cf:fe:03:2c:a2:31:d6:37:b5:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C8:82:99:6A:77:84:22:93:3B:9F:18:AD:B4:C5:C0:7F:02:1C:ED
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137372e38362e3130342e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:95:32:dc:60:e2:4e:00:2c:03:c1:74:99:46:b1:4a:63:78:
         18:1c:5c:3e:6a:1e:df:8d:f8:e6:11:e5:65:c4:3d:b7:6f:c0:
         66:bf:65:0b:23:5b:d7:02:20:25:41:b9:95:6e:39:ab:14:57:
         07:51:f3:ac:4b:76:93:b0:33:26:5b:d8:20:d2:aa:0d:13:6a:
         a4:1b:68:8e:16:92:25:9b:f2:18:84:21:aa:fd:28:12:1b:0a:
         76:1f:0c:69:b6:b6:ec:3c:27:d7:cf:27:c4:f1:58:15:70:f4:
         a9:64:c4:2f:f9:05:87:16:f1:b1:50:fa:81:16:a0:40:50:e1:
         76:da:06:fe:19:5f:df:9a:94:a8:b1:18:ff:6d:c0:ce:73:7f:
         16:36:d6:eb:07:06:45:0b:df:4d:e7:d2:3c:8f:ab:bf:70:55:
         2c:66:80:27:4d:ff:47:e4:78:64:65:b1:08:17:2b:cf:40:7b:
         d7:fc:15:19:e8:c3:23:1b:3f:f9:6e:ce:b5:f0:da:36:8f:bd:
         40:51:3a:90:1d:c5:13:43:1b:f2:76:b2:65:14:3d:51:84:12:
         d6:7f:0b:a5:02:43:a8:12:11:e5:6d:42:b5:d0:a8:3a:e5:97:
         8c:00:52:bc:fe:44:c1:27:49:ee:2f:00:4d:0c:b0:b7:3a:1f:
         45:07:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:56:40 2026 by rpki-client