Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32322d3232203d3e20323632363432.roa
File:                     3137302e38322e38342e302f32322d3232203d3e20323632363432.roa (raw, json)
Hash identifier:          29vnq86jev4xI9E3lnyyafeNxP7vy95GpbJT8uZFxm4=
Subject key identifier:   54:F5:40:1D:42:97:40:57:95:6C:62:98:8F:BD:9C:72:A6:CF:23:47
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       30DF0BE282FC383D2F0E32AACEE4F738F96F65E4
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32322d3232203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:40 +0000
ROA not before:           Thu 05 Feb 2026 04:38:40 +0000
ROA not after:            Thu 04 Feb 2027 04:43:40 +0000
asID:                     262642
IP address blocks:        170.82.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:df:0b:e2:82:fc:38:3d:2f:0e:32:aa:ce:e4:f7:38:f9:6f:65:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:40 2026 GMT
            Not After : Feb  4 04:43:40 2027 GMT
        Subject: CN=54F5401D42974057956C62988FBD9C72A6CF2347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fe:a4:d1:10:b9:ce:b9:b9:b2:61:ab:2f:7b:
                    53:f7:c1:13:9c:11:4e:d4:9b:d7:f6:fe:cf:7e:5d:
                    d5:34:85:9e:e8:45:79:3a:5d:2e:5c:de:d8:bd:85:
                    de:d6:6f:d7:fb:ce:e1:e5:8d:10:df:c4:fc:38:4c:
                    27:82:d2:87:c2:da:5f:83:08:de:bf:75:db:ec:cd:
                    a4:18:ea:2f:55:a7:37:b6:67:d7:53:f7:1f:75:6d:
                    f3:64:95:e2:3d:57:97:5d:9f:9d:1d:48:4b:70:11:
                    6b:51:d6:fb:a1:3b:1c:92:07:ec:1f:1e:10:92:30:
                    12:89:9e:00:85:66:f0:30:07:63:66:31:23:2f:6a:
                    2f:37:dc:60:69:1f:f5:8e:52:01:a0:68:63:54:67:
                    26:32:68:2d:87:74:04:09:c1:b8:63:5f:88:88:b1:
                    c4:b3:99:ad:71:4f:f4:3c:ef:48:5f:03:65:40:4e:
                    56:1b:db:90:3d:30:f2:41:4e:f3:38:22:a1:d6:18:
                    89:1a:c2:25:7d:ae:78:ec:6b:c8:37:61:26:4d:a4:
                    90:04:f6:31:f9:d8:a5:b7:9a:45:bb:56:e7:0d:a0:
                    4c:19:3e:5a:bc:d1:28:52:04:6c:c1:fa:8d:6a:b3:
                    2f:80:49:be:14:ad:ca:8a:2c:7e:b8:b3:16:f1:b8:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F5:40:1D:42:97:40:57:95:6C:62:98:8F:BD:9C:72:A6:CF:23:47
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32322d3232203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:43:99:9b:5f:53:04:54:14:87:0d:5c:e4:bf:e4:44:93:31:
         11:48:38:70:2b:77:2e:24:9c:9b:e6:25:1c:d8:7c:8a:b3:11:
         4a:c8:9a:6c:d1:63:e1:3e:ac:0a:7b:5e:26:77:56:5c:00:67:
         59:75:9b:0f:14:47:72:27:9e:b1:82:eb:6f:44:d9:d5:af:21:
         53:07:71:37:8e:e7:4d:bb:61:4a:1f:c5:7c:cb:63:fa:59:64:
         a2:d4:fa:b8:a9:68:3b:92:7d:7f:ea:f0:95:11:8b:9d:ef:b8:
         c5:0c:4d:3b:48:e3:aa:47:21:4f:81:fc:78:1e:36:8d:92:51:
         61:76:24:3e:e3:fe:62:88:0e:73:3f:ea:f6:36:f7:b9:06:5a:
         cf:fd:d0:d7:5b:14:c6:0f:b9:0a:34:19:ef:dc:5c:db:bd:43:
         ac:21:bb:b3:8d:8f:b4:94:26:2b:f4:1b:40:2c:0d:51:7a:60:
         3f:46:ba:f2:9d:f4:52:c7:8a:da:49:fa:7a:d4:c4:25:63:58:
         2c:9b:61:50:71:a1:f1:9a:3b:ab:c5:f2:b2:4d:a3:dd:5c:24:
         48:ca:f7:08:2c:e3:0f:28:46:bc:36:52:b0:86:06:a3:b1:df:
         ae:f0:3d:a6:41:90:11:59:71:0b:d6:d5:c2:f2:3d:ee:e0:29:
         9c:42:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:43:44 2026 by rpki-client