Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32342d3234203d3e20323731323430.roa
File:                     3137392e34382e34382e302f32342d3234203d3e20323731323430.roa (raw, json)
Hash identifier:          oLR1EfQfSwJx6LeIKyvAamECs5KvqHFmS4akMuYtOpY=
Subject key identifier:   B2:F7:C3:30:2A:0B:FF:FE:1B:42:6E:20:33:1B:53:96:58:D9:A5:78
Certificate issuer:       /CN=0E77DA9B11ABE0911B41F041D5EA3663E65F88EE
Certificate serial:       3F9A39A35CF2BA256B7FD2CFC9C8952357E7439A
Authority key identifier: 0E:77:DA:9B:11:AB:E0:91:1B:41:F0:41:D5:EA:36:63:E6:5F:88:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32342d3234203d3e20323731323430.roa
Signing time:             Wed 04 Feb 2026 13:13:22 +0000
ROA not before:           Wed 04 Feb 2026 13:08:22 +0000
ROA not after:            Wed 03 Feb 2027 13:13:22 +0000
asID:                     271240
IP address blocks:        179.48.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.crl
                          rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9a:39:a3:5c:f2:ba:25:6b:7f:d2:cf:c9:c8:95:23:57:e7:43:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E77DA9B11ABE0911B41F041D5EA3663E65F88EE
        Validity
            Not Before: Feb  4 13:08:22 2026 GMT
            Not After : Feb  3 13:13:22 2027 GMT
        Subject: CN=B2F7C3302A0BFFFE1B426E20331B539658D9A578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:01:03:bc:f5:cd:5e:ef:17:e2:55:24:ef:
                    5c:26:3a:12:e0:44:15:2c:47:ee:73:f4:e3:d8:b8:
                    90:df:20:9c:f9:61:86:32:da:00:8a:a1:05:27:ae:
                    4b:d1:9d:6c:23:18:e9:40:80:b7:3a:ec:59:84:6b:
                    37:9c:ec:30:4e:b3:9a:75:6d:0a:09:87:a8:2b:6d:
                    47:92:32:a1:4f:68:1e:14:a0:87:76:b8:93:44:9d:
                    31:15:a6:be:37:69:19:f0:28:94:60:41:53:d5:f9:
                    c3:be:d6:7c:4c:10:51:4b:c8:06:26:a0:72:a4:74:
                    78:fe:60:3d:bc:2f:5c:3d:ca:64:6e:c5:a3:96:a2:
                    12:3a:ce:4d:7d:24:84:69:90:fd:a7:0e:03:f5:1a:
                    05:24:9e:98:90:f7:c4:0f:dc:f6:6e:13:8d:1f:db:
                    78:49:a5:46:b2:ba:5c:a7:ce:20:77:1a:de:12:ce:
                    ee:94:5a:3a:a6:0a:e0:c5:89:e8:d7:54:9b:b7:0a:
                    f9:9d:41:04:f2:3f:12:b6:20:80:77:32:23:79:80:
                    cc:f7:41:6d:5a:8c:ae:2b:63:b8:b6:9e:b7:65:e5:
                    66:6e:fb:3c:11:38:b5:07:cd:98:df:1b:66:3f:da:
                    7c:ac:3c:42:f4:f1:a8:44:fa:a8:fa:56:29:97:52:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:C3:30:2A:0B:FF:FE:1B:42:6E:20:33:1B:53:96:58:D9:A5:78
            X509v3 Authority Key Identifier:
                keyid:0E:77:DA:9B:11:AB:E0:91:1B:41:F0:41:D5:EA:36:63:E6:5F:88:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E77DA9B11ABE0911B41F041D5EA3663E65F88EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/3137392e34382e34382e302f32342d3234203d3e20323731323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:c5:a3:6f:2b:93:f3:8b:3b:61:58:0f:80:0b:a1:44:84:
         b2:99:93:3a:67:38:30:a2:43:d2:09:97:c6:02:75:d1:ee:55:
         49:fc:8c:22:4b:c5:4a:22:f1:94:89:be:17:bd:8f:f3:cf:0c:
         b8:1c:4f:f4:8d:1f:97:ef:e1:df:0d:b3:a6:d5:e9:80:f8:76:
         29:63:62:eb:84:e8:29:35:92:de:8a:91:9b:0e:dd:e1:54:ff:
         d0:d5:c7:62:80:dc:3d:80:f7:05:e9:a2:a2:e5:6e:f6:9c:62:
         40:41:ab:37:cb:44:12:4f:9e:f4:41:8f:46:b9:4c:e4:79:eb:
         d7:05:1f:39:5d:98:86:65:fa:96:ea:1a:3d:76:26:aa:82:8c:
         17:aa:07:96:eb:fe:86:d4:b2:b9:fa:c1:82:ac:97:3b:2d:4a:
         77:20:14:e8:e0:ee:08:55:62:45:02:f2:9d:63:51:8f:14:75:
         cf:68:04:5e:5b:43:57:6c:ec:c1:54:02:90:cd:1f:0c:4e:21:
         34:de:af:bf:91:72:1e:80:f4:ea:de:0b:11:6c:35:13:ae:b7:
         cd:9e:27:41:8b:5e:9d:b0:02:0d:f6:87:51:2c:bc:0e:e0:2b:
         ff:e2:98:94:13:b1:41:00:8e:86:9d:fb:98:57:b3:44:ba:8b:
         eb:71:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:03:51 2026 by rpki-client