Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137392e3130382e36342e302f32312d3234203d3e203532393638.roa
File:                     3137392e3130382e36342e302f32312d3234203d3e203532393638.roa (raw, json)
Hash identifier:          /P0jlRkJ2bEQj0dNSEDK4gwa+wGYNUA7KBk5vEJnThA=
Subject key identifier:   FB:2D:8E:20:78:91:C5:21:C7:94:13:A8:23:3D:A7:1B:13:C9:19:89
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       67997F3480C2F8E82C5CF9D857BD86973EC24F0D
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137392e3130382e36342e302f32312d3234203d3e203532393638.roa
Signing time:             Thu 05 Feb 2026 07:32:18 +0000
ROA not before:           Thu 05 Feb 2026 07:27:18 +0000
ROA not after:            Thu 04 Feb 2027 07:32:18 +0000
asID:                     52968
IP address blocks:        179.108.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:99:7f:34:80:c2:f8:e8:2c:5c:f9:d8:57:bd:86:97:3e:c2:4f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Feb  5 07:27:18 2026 GMT
            Not After : Feb  4 07:32:18 2027 GMT
        Subject: CN=FB2D8E207891C521C79413A8233DA71B13C91989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dd:77:fd:94:f8:26:ed:29:1a:61:c4:0d:ea:
                    5e:86:f9:00:dc:8e:4c:c3:49:fa:03:87:90:c0:49:
                    f4:51:dc:9f:58:b1:76:ac:a8:1d:4a:a7:82:92:b9:
                    a6:7c:9a:09:79:cd:08:96:73:0d:1d:b3:b0:48:d6:
                    84:9b:ca:7f:b8:e0:66:1d:07:23:68:29:08:af:63:
                    be:3b:2c:d4:1d:33:67:0f:3c:29:e4:d8:1d:12:b8:
                    9a:99:b1:cc:09:f3:0f:2c:14:b9:3c:e5:6d:8e:9f:
                    72:02:7f:27:bd:69:a4:78:90:90:6c:7b:e4:2c:8b:
                    f2:37:0b:ee:7d:ed:64:96:29:9f:01:09:bb:0d:53:
                    cb:d0:63:28:43:36:02:0e:60:11:2e:21:6b:66:63:
                    fd:a3:0b:f3:32:43:01:94:8e:a5:6f:a2:03:52:3b:
                    95:30:b6:a6:50:bb:78:2f:3d:c1:e7:e4:aa:25:3f:
                    52:e0:4e:07:e2:74:46:2a:0b:80:ef:ac:72:bd:20:
                    36:c4:d5:d5:69:b4:3a:47:17:4d:3c:be:72:af:4d:
                    b9:41:1f:a9:cb:e9:df:41:a3:44:e7:39:14:0c:9f:
                    8a:fe:85:ab:de:69:94:87:ff:e4:68:cd:70:11:0d:
                    77:22:9b:8d:08:eb:95:59:01:99:dc:d4:46:d2:f5:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:8E:20:78:91:C5:21:C7:94:13:A8:23:3D:A7:1B:13:C9:19:89
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137392e3130382e36342e302f32312d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:e4:a9:95:85:71:94:53:12:38:69:d7:d8:da:22:b0:27:
         29:79:13:fe:97:4c:68:73:dd:4d:62:df:e7:6c:d4:3d:48:a3:
         8d:e9:34:55:8e:5e:e6:54:75:1d:74:e4:cd:ff:81:89:63:09:
         e1:c9:5d:7b:60:0b:fd:82:59:d5:02:41:dc:62:09:14:ff:fa:
         d8:e2:b2:09:d1:20:e4:52:fd:a9:97:6b:06:6a:c8:5b:99:4a:
         e0:36:4f:d3:fe:47:11:5b:ba:c3:c2:3e:7f:8c:c5:51:ad:ba:
         5d:b1:4e:f4:02:02:14:5f:3c:9c:0d:3a:e3:b3:a0:cf:4a:9e:
         ae:db:9e:6c:90:f6:07:11:5e:e4:4c:fa:72:b3:9b:e4:17:16:
         96:0f:eb:20:93:bf:07:1c:71:b6:28:a5:fb:b9:41:52:95:c5:
         3a:9f:bf:f7:6d:8f:f8:e3:57:7f:ff:15:f4:7c:87:ca:a8:48:
         3b:21:5f:04:31:d1:90:61:71:42:44:8b:dd:dd:90:9e:f1:6c:
         94:29:50:58:66:ce:8a:24:39:b0:d9:14:44:03:aa:34:0f:a6:
         21:0b:62:17:4c:40:16:59:9f:b0:3d:9f:13:cf:0b:9f:b0:7c:
         51:0d:4e:47:fc:c7:b2:f2:18:a1:ee:54:3d:51:71:a4:1e:be:
         64:46:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:46 2026 by rpki-client