Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32322d3232203d3e20323730343133.roa
File:                     3137302e302e37362e302f32322d3232203d3e20323730343133.roa (raw, json)
Hash identifier:          8Q3jpgUGrajXDXH2FvTO588rZf06lIE18PQe+VIpJzE=
Subject key identifier:   D4:9C:62:0F:68:97:BF:0B:02:29:67:96:76:9A:EB:BA:4D:CA:34:5B
Certificate issuer:       /CN=BE6164348043E6AA537C7ED74D50CC40298757FC
Certificate serial:       3CD5E3B5790FC4B10AEB22910A505D78AD7D391E
Authority key identifier: BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32322d3232203d3e20323730343133.roa
Signing time:             Thu 05 Feb 2026 01:43:28 +0000
ROA not before:           Thu 05 Feb 2026 01:38:28 +0000
ROA not after:            Thu 04 Feb 2027 01:43:28 +0000
asID:                     270413
IP address blocks:        170.0.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl
                          rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d5:e3:b5:79:0f:c4:b1:0a:eb:22:91:0a:50:5d:78:ad:7d:39:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6164348043E6AA537C7ED74D50CC40298757FC
        Validity
            Not Before: Feb  5 01:38:28 2026 GMT
            Not After : Feb  4 01:43:28 2027 GMT
        Subject: CN=D49C620F6897BF0B02296796769AEBBA4DCA345B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:4a:69:1e:58:a6:ab:7c:57:4e:ae:30:15:
                    53:42:73:61:41:df:87:0e:a0:f9:75:39:5a:fc:e3:
                    24:c6:9a:3b:9e:51:02:d0:98:95:15:c6:5e:80:1e:
                    a3:7f:74:ab:05:1d:b0:9d:e1:f9:12:57:fc:f3:b6:
                    1f:f7:a0:b0:a6:43:04:cf:3e:13:f1:23:ae:56:e7:
                    ae:f4:30:c8:4c:20:76:d0:19:92:09:20:5f:54:f8:
                    63:aa:14:aa:3a:10:37:2f:b5:45:cc:cf:7b:2c:2e:
                    57:05:47:35:07:ac:8d:05:ab:f2:63:aa:24:49:31:
                    14:4b:13:f6:e2:f3:c8:d1:ec:0e:26:b2:70:c1:99:
                    95:ff:54:73:6e:79:9c:28:d6:84:43:30:07:f3:82:
                    56:12:0f:94:47:13:98:7a:a6:4e:f8:84:2e:ff:aa:
                    1b:07:75:35:08:cd:1f:4f:13:0e:c0:dd:57:2e:b6:
                    6d:9f:e9:58:82:9f:50:8f:bb:ae:e2:ba:c2:7e:d1:
                    45:9b:09:32:66:67:ca:4f:f6:4b:80:cb:d0:8e:d8:
                    a7:e6:38:96:90:f3:c3:60:7e:f3:7e:b9:65:be:47:
                    a2:ff:2a:40:b7:14:05:aa:fe:6f:55:cd:6e:d7:33:
                    6b:2e:f5:1b:ab:68:c3:ba:a8:71:89:b3:ea:9e:2b:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:62:0F:68:97:BF:0B:02:29:67:96:76:9A:EB:BA:4D:CA:34:5B
            X509v3 Authority Key Identifier:
                keyid:BE:61:64:34:80:43:E6:AA:53:7C:7E:D7:4D:50:CC:40:29:87:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/BE6164348043E6AA537C7ED74D50CC40298757FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE6164348043E6AA537C7ED74D50CC40298757FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NgZYnCg4ZPjTneR4Lt5Y3rL1PcQpPqpZDagsBSG6haB/1/3137302e302e37362e302f32322d3232203d3e20323730343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:fb:ab:7c:11:76:87:23:2b:47:48:28:91:de:9e:6f:ad:08:
         ee:ed:4a:4b:7f:d6:07:8b:5f:31:a1:e7:dd:b8:8b:8e:08:cb:
         6b:4d:be:c3:56:bb:04:91:eb:73:97:9c:bf:72:6b:03:dc:63:
         90:0b:11:c2:b6:81:bd:79:cb:3b:e3:bf:b0:0c:98:3c:3c:5d:
         69:07:d2:e3:55:81:7d:0f:c9:7a:eb:d9:da:86:0d:46:8c:54:
         ed:45:b2:c3:62:65:ee:7b:6e:45:65:e7:f6:53:73:a1:ac:00:
         83:37:c4:73:42:da:bc:97:5c:07:dc:94:a3:f6:14:ad:91:7b:
         05:03:ca:63:71:a5:28:f2:c2:9e:b5:43:72:07:8e:b4:f0:80:
         1c:b8:d8:82:5b:2b:39:bd:e6:78:03:03:9b:6c:c6:63:99:47:
         d8:68:b7:65:7d:89:d8:0a:06:e8:82:f0:8d:9b:8b:7d:4e:34:
         b9:4b:34:4a:1f:8b:89:6f:b2:72:aa:4e:47:31:36:8b:54:4a:
         80:99:08:f2:16:92:25:62:9f:ec:30:f8:f3:a8:e7:30:2d:1c:
         ee:d5:fd:65:ed:fc:4a:63:7a:3f:bd:c8:58:d6:0d:f2:e3:e3:
         14:0f:49:dc:3d:71:df:b1:d4:54:49:30:3b:30:9e:e3:ae:6c:
         7a:22:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:06 2026 by rpki-client