Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
File:                     3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa (raw, json)
Hash identifier:          O747j2Mw2vMMFiFgZ1R8o7arRcyWWpDweLYMEv1CJn0=
Subject key identifier:   FF:EF:40:79:CC:5C:9F:5B:A9:BC:36:69:1F:2B:CE:62:7D:4D:62:D1
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       7CB22326BBC2C52EAFC183FE81D606727DE693F4
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     262903
IP address blocks:        179.109.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b2:23:26:bb:c2:c5:2e:af:c1:83:fe:81:d6:06:72:7d:e6:93:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:56:02:c4:62:67:d9:4a:3c:8a:5b:29:4f:
                    53:f1:2b:e0:d7:00:c1:97:de:32:38:08:dd:4f:d8:
                    9b:5f:53:d3:fb:28:96:76:f8:4c:26:24:f8:bf:fa:
                    10:18:61:5f:01:85:d5:72:5d:fc:e3:da:07:c6:23:
                    72:89:90:f6:94:86:17:9d:eb:42:64:67:f4:ba:91:
                    08:c0:dd:23:6d:70:5e:94:c5:b3:6d:4f:72:fa:76:
                    63:5a:3b:0c:b3:f9:ad:d6:a1:9a:7d:23:55:57:d0:
                    d0:fc:e4:3a:88:1b:af:8f:39:a8:05:30:af:69:1d:
                    32:65:2c:34:9b:67:49:13:f9:44:8e:a7:d8:f0:fd:
                    0f:91:31:13:80:03:6c:c5:ed:58:b5:b2:7e:6a:ff:
                    a0:bb:12:de:8b:91:21:64:c9:05:ed:48:70:6f:1c:
                    3c:65:d0:98:96:39:ac:9c:21:db:cc:af:dc:d5:72:
                    ff:14:a1:7a:ef:37:d6:4d:1f:86:ec:91:55:e9:f6:
                    5a:e8:a8:80:57:fd:b2:68:38:2e:65:72:84:22:a5:
                    58:52:86:6c:12:66:7a:4f:29:b9:70:b7:5d:5b:9d:
                    9d:a6:8a:30:1e:1b:5e:a8:1d:31:c7:b3:dd:49:fd:
                    1c:05:14:f9:44:f8:b9:c0:45:db:a4:c3:db:62:d9:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EF:40:79:CC:5C:9F:5B:A9:BC:36:69:1F:2B:CE:62:7D:4D:62:D1
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/3137392e3130392e35362e302f32312d3234203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:cf:47:b5:cf:d2:ba:65:6d:7c:fc:46:78:9d:e5:e0:95:46:
         ef:3e:22:26:ba:41:77:00:9b:d7:ef:aa:33:74:92:d9:36:ce:
         ba:a8:97:87:59:a4:78:03:39:d5:1a:7d:7c:c1:3f:6a:f5:43:
         61:12:19:28:c2:52:07:5f:84:78:10:78:88:27:3e:78:3d:3a:
         15:e3:58:66:a1:8d:52:e9:03:99:48:0f:1f:44:ca:fd:8f:ec:
         09:c2:cc:9b:0c:b3:4f:dd:3c:95:f2:c1:29:d7:e1:d7:c6:3b:
         7b:8e:01:76:63:63:80:63:39:cf:cc:49:45:84:2d:49:00:19:
         6f:63:76:9d:9a:90:e9:00:82:be:a1:c6:82:79:d0:c3:14:e3:
         de:a4:2b:91:b5:98:5f:cb:fd:fc:3c:87:7c:9c:39:40:ae:e2:
         a2:3a:e3:2b:70:2a:1a:99:a9:86:ab:01:66:24:8c:40:fc:86:
         95:33:df:66:63:fa:fe:45:8d:7e:90:44:26:66:7e:f4:de:0d:
         1f:2c:33:c0:86:67:8a:bc:b3:b2:51:25:a9:eb:6b:22:9f:53:
         1c:c0:6f:c4:c5:5e:7f:ac:eb:8c:dc:9e:5f:08:46:d9:79:1a:
         bc:ed:5b:fa:02:07:0d:16:c0:fa:75:6d:77:4e:2f:cd:39:56:
         62:39:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:22:06 2026 by rpki-client