Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          aKGUR8NSvfhLu5wN3N6VGpXDKvryiSk76zT0QO4reWM=
Subject key identifier:   DD:74:12:DB:54:B6:89:A1:46:D1:6E:17:EE:89:C5:1E:9E:E2:A2:A7
Certificate issuer:       /CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
Certificate serial:       1723124F326EF76ACE66CC80C3D857FDE82E96E5
Authority key identifier: E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
Signing time:             Wed 04 Feb 2026 20:00:23 +0000
ROA not before:           Wed 04 Feb 2026 19:55:23 +0000
ROA not after:            Wed 03 Feb 2027 20:00:23 +0000
asID:                     271326
IP address blocks:        190.123.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:23:12:4f:32:6e:f7:6a:ce:66:cc:80:c3:d8:57:fd:e8:2e:96:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5
        Validity
            Not Before: Feb  4 19:55:23 2026 GMT
            Not After : Feb  3 20:00:23 2027 GMT
        Subject: CN=DD7412DB54B689A146D16E17EE89C51E9EE2A2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:40:97:6e:eb:81:d2:22:4f:32:d7:6f:2c:49:
                    8d:3f:48:30:14:f6:71:37:b4:1a:33:0f:0d:8b:dc:
                    1d:7d:29:e4:9d:f9:45:76:73:a1:07:0f:ab:52:78:
                    f8:42:7e:27:8b:65:62:69:12:7a:c3:e5:be:b6:ff:
                    d9:04:d3:7b:52:08:46:00:fe:9b:fd:78:0e:24:79:
                    fa:d0:31:ff:28:54:0a:c2:d4:1d:cb:2e:dd:53:da:
                    af:44:dd:ae:df:14:31:a7:38:f4:d8:09:74:1b:19:
                    87:cc:23:64:99:0f:69:0d:74:69:8f:8e:83:27:42:
                    f3:54:a0:d7:72:2d:7f:1a:d9:d0:f5:22:61:35:3e:
                    71:be:74:86:2a:43:ca:18:74:c5:c1:c6:1d:a3:d2:
                    5e:61:5e:3f:06:d9:f8:bd:1b:ae:a8:b5:c4:51:6f:
                    dd:21:c6:2c:a6:57:41:b2:19:99:77:47:fe:86:8e:
                    5c:94:14:d3:bd:ef:e3:4e:59:a0:46:ac:48:78:40:
                    d8:c9:8d:96:12:22:28:88:ba:47:c9:79:73:db:5c:
                    4b:d4:90:77:c5:f8:74:19:1b:86:ff:99:a7:de:bf:
                    ea:10:44:53:5f:c1:a7:70:a7:21:f3:67:cf:b3:34:
                    eb:03:08:56:5f:51:7e:ae:0e:e2:d5:6d:62:0e:30:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:12:DB:54:B6:89:A1:46:D1:6E:17:EE:89:C5:1E:9E:E2:A2:A7
            X509v3 Authority Key Identifier:
                keyid:E4:C7:5E:4D:C1:7E:B6:9E:3C:5D:7F:24:77:A6:36:6C:44:76:AC:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C75E4DC17EB69E3C5D7F2477A6366C4476ACD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/1/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:23:8f:de:41:79:b0:56:fb:e2:ef:af:6a:6c:8a:ba:7a:
         d7:94:5c:cb:e7:ce:bd:61:08:66:ab:18:73:5d:2d:2a:b8:ce:
         44:61:e8:2d:9c:47:fd:7b:61:ca:bf:81:72:df:1f:7c:41:bf:
         b7:c3:6e:14:fe:05:e2:ed:27:5e:e2:e5:5a:60:ba:a1:97:99:
         c3:1b:b0:a3:63:01:12:e8:af:35:e3:1e:d8:c5:5f:a7:d2:db:
         1b:b3:c9:03:b5:7a:6a:ff:54:2d:64:85:eb:b0:42:82:8e:5c:
         df:60:62:cf:cd:8e:57:50:56:4f:96:43:24:32:80:54:c2:7f:
         2d:3a:0f:9c:b1:4b:15:cb:70:93:05:c0:e7:9e:ad:9a:6f:b3:
         48:2b:59:a9:b7:ed:bc:8e:48:41:8b:08:c6:d0:27:15:ce:91:
         58:46:41:06:df:91:e4:d5:13:31:24:75:d4:88:28:63:76:d4:
         4c:4e:4a:ad:0c:52:c3:b1:63:58:b3:9c:2e:f3:d1:e5:a3:f6:
         8c:cc:53:5e:87:62:7e:25:1a:d5:14:64:06:cc:27:7c:e8:c5:
         90:21:26:fc:37:d6:33:cc:34:2a:79:30:fc:6c:24:40:9e:1d:
         a3:a6:16:15:d5:ae:31:a6:6c:9d:1f:28:7d:bb:dc:3b:f3:fa:
         21:f9:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:24 2026 by rpki-client