Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38372e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          DUTCq5tQUWvJkCIgyoU9TcjMg8KOR99c4hhkoPZZ8NQ=
Subject key identifier:   13:C0:13:5F:A2:4A:EE:D8:2E:0A:7F:A8:ED:26:47:0C:7A:89:B7:4E
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       2C549EA6834B29F2F89ED8F2C413456488305F4D
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 05 Feb 2026 04:43:35 +0000
ROA not before:           Thu 05 Feb 2026 04:38:35 +0000
ROA not after:            Thu 04 Feb 2027 04:43:35 +0000
asID:                     262642
IP address blocks:        170.82.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:9e:a6:83:4b:29:f2:f8:9e:d8:f2:c4:13:45:64:88:30:5f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Feb  5 04:38:35 2026 GMT
            Not After : Feb  4 04:43:35 2027 GMT
        Subject: CN=13C0135FA24AEED82E0A7FA8ED26470C7A89B74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:b3:6e:a2:a4:c3:d8:c3:62:e8:87:6c:df:
                    43:66:cc:7b:cf:47:ab:e6:04:b4:e0:cd:98:ea:0f:
                    2e:66:3c:82:b2:a0:39:a6:3b:de:af:bd:fc:cd:d0:
                    9e:85:5b:ea:a3:90:6a:08:77:f3:5d:03:b6:df:82:
                    5e:77:f1:69:40:8e:b6:f7:e9:88:b8:a3:95:f6:2f:
                    bd:a9:9e:f0:57:cc:53:26:4b:3d:a9:90:21:1b:f1:
                    63:c7:b0:77:72:9b:98:9f:1a:4c:12:93:2a:33:1a:
                    05:32:f1:52:80:48:9d:0a:4c:be:6b:c9:41:33:22:
                    65:cd:2f:a3:44:59:17:ff:a9:2b:04:0c:7f:67:36:
                    b5:7f:12:7d:af:54:03:7e:f7:58:3a:7c:74:76:ef:
                    28:ac:9c:db:62:a7:02:92:4d:3a:50:6c:af:9e:7b:
                    2d:e5:fb:52:f5:7e:8c:b6:a7:93:d9:a2:78:c7:86:
                    94:6e:f6:a3:38:12:8c:10:9c:9a:96:4d:ce:f4:e8:
                    09:fd:79:dd:aa:3a:3e:85:bd:a8:5e:bc:e2:fc:0e:
                    b8:80:b6:a8:a5:cc:5d:de:95:42:c9:14:5a:1a:ca:
                    58:fd:53:35:c7:23:e9:e0:13:3f:64:70:8e:2e:08:
                    77:e4:d6:51:24:2f:cd:fa:af:09:a2:be:92:2c:ce:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:13:5F:A2:4A:EE:D8:2E:0A:7F:A8:ED:26:47:0C:7A:89:B7:4E
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38372e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:75:02:89:19:fc:8d:fa:23:8c:0f:66:19:99:4d:41:a3:
         19:fe:53:75:a9:d2:42:4b:3d:31:08:dd:99:7d:f4:7a:66:e2:
         eb:fa:fc:3f:98:30:56:d5:2c:23:db:05:61:4e:dc:d2:96:2a:
         f6:93:26:c2:39:f3:10:de:11:38:7b:37:72:cd:99:75:a2:ff:
         f8:7f:e8:b3:28:e5:86:96:fb:ed:cf:17:54:7b:f9:d4:c0:00:
         b7:3c:bf:5d:79:8c:dd:32:b7:e4:70:92:5c:ce:e5:85:0e:8b:
         5e:93:fc:8b:e2:3a:da:e4:46:65:91:88:0d:68:d3:c7:dd:7d:
         73:68:ce:f4:c4:00:f6:81:9e:e8:c7:a9:99:1d:80:de:e7:d0:
         01:61:61:4f:db:d4:d7:e3:7e:3f:a5:e5:e9:60:63:d7:4a:cb:
         67:72:54:94:7b:28:d1:50:03:bd:7c:dc:24:26:92:33:ed:3f:
         fd:73:0a:ab:a7:35:67:91:5d:4d:5d:bd:2b:64:ab:f0:19:90:
         7a:93:a1:e9:ee:0f:5d:06:bd:51:03:b2:1a:fb:65:f7:2b:e8:
         86:9f:68:6d:a6:07:e8:81:b0:57:72:33:a3:bf:21:18:aa:7d:
         20:76:7d:ab:7d:5f:5b:ef:12:e3:ce:ea:41:23:99:be:74:53:
         98:5b:bb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:54:34 2026 by rpki-client