Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa
File:                     3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa (raw, json)
Hash identifier:          SZpp2QA5vSsumhWVEM/5dcCueR1ZMqfDSwrQybXad/g=
Subject key identifier:   BB:1E:DC:10:1C:A0:44:61:CD:2A:1F:65:5F:C4:40:D5:6B:B8:20:9F
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       6D957D01170F1EB5993F82647013A13EB45CD895
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     266623
IP address blocks:        128.201.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:95:7d:01:17:0f:1e:b5:99:3f:82:64:70:13:a1:3e:b4:5c:d8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject: CN=BB1EDC101CA04461CD2A1F655FC440D56BB8209F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:95:c6:c5:61:57:d8:21:d2:66:70:bf:50:
                    d0:b8:ba:e9:a6:7f:99:8e:99:c7:50:8e:30:dc:a9:
                    d5:59:78:db:fb:b3:4b:5a:0c:ba:41:5c:9c:39:6f:
                    4e:58:9e:d1:d2:55:d0:02:29:b1:7f:f7:ae:96:18:
                    2a:f1:78:ef:c1:80:19:5c:78:85:f6:ff:bb:90:2d:
                    4c:03:fd:5d:9b:62:7a:f6:ae:55:6b:1f:4e:f5:ae:
                    74:20:60:0e:13:90:3f:2f:01:27:bf:25:2f:23:8c:
                    6e:99:85:16:d3:dd:d2:65:86:b2:f4:7f:b2:23:e2:
                    82:3f:70:71:e5:e3:0c:1d:ed:3f:91:f6:7e:a7:fa:
                    00:f2:f9:7e:b2:63:81:fa:6f:6a:8f:70:ba:f3:0b:
                    64:04:b6:e4:fd:25:0c:35:7f:ac:5d:e9:3d:5f:0d:
                    f7:98:b0:ed:86:d2:e4:bb:3f:09:e7:97:1f:ac:b2:
                    d1:c3:60:ff:ad:6f:d5:57:51:0d:17:c1:5c:be:35:
                    bd:c2:d6:b0:46:6d:97:b2:f8:3d:9a:b7:bd:e1:fe:
                    af:5b:b3:90:54:a0:88:6c:c2:0f:e5:5b:09:58:bc:
                    ce:49:02:1e:24:1d:32:51:9a:b7:fd:62:2d:34:41:
                    f7:13:5b:81:3d:63:25:d5:48:3b:4d:b5:27:12:ad:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1E:DC:10:1C:A0:44:61:CD:2A:1F:65:5F:C4:40:D5:6B:B8:20:9F
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/3132382e3230312e37362e302f32322d3234203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:85:a5:e2:3d:0f:4a:b9:4d:44:4e:b2:39:e5:38:c0:99:
         2c:67:c6:ee:68:a7:7a:fe:e7:28:75:5a:ab:0e:bb:98:68:3a:
         00:95:a1:b6:8f:43:58:fb:0b:20:58:61:60:4b:d1:bb:be:11:
         1f:6e:0f:a9:b4:0c:d8:41:b6:93:f3:3f:a5:c3:e9:c0:10:c4:
         3f:81:3d:33:e6:20:ae:f8:a9:86:01:a2:3a:a8:ea:c7:f6:45:
         02:99:a3:ee:42:12:b2:d9:1c:81:19:34:f7:8c:ab:e6:fb:3c:
         1c:d3:31:39:57:90:c7:60:f0:bf:96:2f:ee:48:90:68:01:19:
         d7:28:f9:28:b4:3b:53:87:0b:ff:8c:2d:18:f4:41:e3:17:25:
         69:99:f7:e1:62:27:60:30:6e:c8:95:01:b8:dd:48:23:cd:cd:
         dc:b4:6d:98:36:40:3a:ea:b4:f5:88:63:a2:11:f0:37:54:66:
         93:a9:9c:86:9e:2b:e5:ce:15:e0:d1:75:e9:71:4b:10:52:45:
         d3:e6:9b:df:1d:58:3e:6e:26:4b:c6:0e:0c:78:c0:ae:8d:5b:
         c3:64:78:6a:4a:26:1e:f6:f0:79:a4:34:65:29:b4:e8:12:ea:
         ed:72:17:17:31:48:6d:67:57:8e:43:d0:4f:44:aa:41:dc:1e:
         63:ad:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:50:14 2026 by rpki-client