Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
File:                     3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier:          ZrdRbMO6pfeN1jIBV7Ux5a/0FrsaYAGF1HS7DjLnMWg=
Subject key identifier:   3F:4E:9F:34:C0:66:88:2C:BF:33:17:A1:D1:8A:92:F8:24:2D:F3:AD
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       06A6BA0078FD91855703A30A1BC02BAB1A72EDD2
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
Signing time:             Thu 05 Feb 2026 10:55:13 +0000
ROA not before:           Thu 05 Feb 2026 10:50:13 +0000
ROA not after:            Thu 04 Feb 2027 10:55:13 +0000
asID:                     264128
IP address blocks:        170.78.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a6:ba:00:78:fd:91:85:57:03:a3:0a:1b:c0:2b:ab:1a:72:ed:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Feb  5 10:50:13 2026 GMT
            Not After : Feb  4 10:55:13 2027 GMT
        Subject: CN=3F4E9F34C066882CBF3317A1D18A92F8242DF3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:fc:24:8f:e3:7a:42:0b:76:bb:33:04:c6:
                    30:cf:6e:1f:c9:42:3e:b3:86:64:80:5c:ad:b5:34:
                    dc:dd:62:81:80:a2:f7:d9:e5:a2:28:fe:b2:77:99:
                    f2:c9:b3:f4:77:8f:ad:9b:d7:8d:85:db:7e:a5:b0:
                    d5:74:4d:c0:5b:5c:36:11:09:6f:e3:a5:37:f7:ac:
                    28:43:42:21:87:86:f3:e3:98:d3:68:ab:40:65:81:
                    9e:50:5b:47:b7:46:dc:c2:82:08:e0:9d:92:00:0d:
                    9f:95:ca:d6:52:f9:0a:ec:38:a8:7e:dc:ad:45:5f:
                    a4:9a:97:96:cd:57:e4:d1:fe:4d:66:4e:4e:b4:17:
                    cb:c7:5d:f8:de:fa:5b:d3:0c:b9:63:72:52:f9:02:
                    08:0f:9d:8e:84:5d:a2:3b:c2:82:ee:f0:6a:84:cb:
                    bb:38:a9:62:e3:f5:98:3d:b0:7d:12:13:46:dc:48:
                    85:af:2e:ec:5c:45:95:34:65:be:16:59:e5:ea:71:
                    10:03:0b:48:b2:9d:6e:8f:c3:a6:ee:ac:f9:23:2c:
                    16:c5:20:e4:b1:ae:03:8e:84:78:d9:47:a7:1a:95:
                    1b:e2:96:6c:33:62:eb:94:4c:84:06:c5:f9:15:e3:
                    cf:c1:8c:54:fe:72:d0:a3:56:b0:39:88:62:62:b6:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:9F:34:C0:66:88:2C:BF:33:17:A1:D1:8A:92:F8:24:2D:F3:AD
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:36:b9:ed:56:84:92:20:91:53:23:c5:e4:cd:d4:4b:6d:e4:
         c5:61:81:31:e3:ff:27:aa:06:15:8d:c8:d4:d6:41:55:fd:3c:
         ae:12:76:c0:68:94:21:0b:ce:5d:e8:98:76:35:84:af:5f:a2:
         4a:d4:c5:90:2c:32:23:63:50:eb:fb:8a:5a:11:90:d4:fc:ac:
         8d:52:63:cc:b6:f0:8d:7b:9a:4c:9d:bd:58:fb:0d:e2:1d:30:
         8c:9d:81:1e:f1:e1:2c:33:59:6a:2b:31:c1:2d:f7:96:c6:e8:
         4e:54:11:d2:a6:1c:94:c8:b4:39:1c:b9:55:bc:b7:c6:ff:fa:
         f7:33:58:a0:d1:75:00:7c:a2:28:df:2d:39:bd:10:26:2f:00:
         71:df:0e:82:6b:a6:ba:23:44:8e:ca:06:aa:dd:63:b2:65:00:
         00:aa:c4:53:c7:d0:33:4a:d3:5d:dd:6c:38:b8:75:65:c6:45:
         0f:2f:85:33:b7:66:a7:0a:9b:ad:e4:bd:bd:ce:1d:73:13:2b:
         37:ff:c1:98:0b:d7:e5:13:4f:66:8a:dc:78:8b:c8:13:e3:bc:
         05:9b:65:1e:d6:20:bf:c9:d8:08:48:53:ce:2f:ab:11:bb:62:
         5b:f5:26:13:5a:b3:c8:d1:65:12:50:72:ac:1c:f0:8d:f5:68:
         e3:8d:84:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:22 2026 by rpki-client