Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa
File:                     3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa (raw, json)
Hash identifier:          ewxD0aGPpbt8feRdtEzd1lw8kTkRrm9WLTX9B8VseLA=
Subject key identifier:   4F:4C:C3:11:A6:45:59:DB:9A:7D:33:38:80:19:38:CB:7A:E9:D9:89
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       294FB6F8C8D063DF5911EA0DF91B7465FDC93413
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa
Signing time:             Thu 05 Feb 2026 07:00:30 +0000
ROA not before:           Thu 05 Feb 2026 06:55:30 +0000
ROA not after:            Thu 04 Feb 2027 07:00:30 +0000
asID:                     263474
IP address blocks:        191.242.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4f:b6:f8:c8:d0:63:df:59:11:ea:0d:f9:1b:74:65:fd:c9:34:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Feb  5 06:55:30 2026 GMT
            Not After : Feb  4 07:00:30 2027 GMT
        Subject: CN=4F4CC311A64559DB9A7D3338801938CB7AE9D989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:09:6d:e6:b7:74:af:f2:10:c4:de:ae:e1:
                    8f:c8:e2:a3:34:18:58:d1:43:4d:95:47:38:ed:34:
                    3b:47:e4:9b:e2:fb:89:91:52:82:45:2b:2f:df:3d:
                    07:00:0c:70:18:67:32:19:a2:bc:1c:6b:8b:62:e1:
                    23:a9:04:0b:7a:62:47:71:34:14:a3:23:d9:65:1b:
                    f0:75:e8:b6:1e:e7:d2:0e:e1:d7:88:e1:fe:a0:bb:
                    d1:17:69:36:c9:7a:3f:dc:d4:03:19:7b:1b:dc:a1:
                    a8:47:ab:fa:70:d4:23:96:c2:98:86:17:41:97:34:
                    f2:8a:0c:41:60:87:23:77:81:22:0d:4e:95:ee:24:
                    46:2a:03:56:57:48:68:24:b7:c1:42:78:8d:24:4a:
                    73:5a:cd:bb:ad:39:75:b3:4a:cb:97:3d:5a:fc:27:
                    16:23:0a:a4:23:67:3e:6a:1e:08:6f:09:1f:34:2a:
                    18:89:32:0f:8e:7b:8c:97:7c:54:f6:f8:cd:2a:91:
                    95:fa:f8:03:0a:82:d5:17:93:34:0d:3d:25:58:d1:
                    0a:35:e1:aa:b6:89:a7:fd:7d:be:c0:2b:2f:e5:61:
                    76:91:3b:4a:6c:70:44:17:72:3c:69:c5:24:7e:0a:
                    f5:17:00:2b:e2:9e:42:36:ec:9d:a5:4a:a7:8d:db:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4C:C3:11:A6:45:59:DB:9A:7D:33:38:80:19:38:CB:7A:E9:D9:89
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37322e302f32322d3232203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:c1:b5:68:ea:f9:7e:04:e9:05:6a:09:93:18:a3:3e:8a:
         3e:b5:1e:a2:df:96:e1:b5:cf:41:b9:80:36:e3:ea:0a:b9:b4:
         d2:c3:65:db:88:7f:44:68:b1:e7:f2:7c:98:25:37:05:0e:3f:
         8b:56:1e:5d:9a:2f:7f:a4:aa:82:ed:61:ed:08:b2:f0:6d:5b:
         6a:0f:e6:1d:4f:4b:3e:ad:1e:ef:96:23:70:46:52:63:02:52:
         ee:29:bb:71:08:54:76:65:7a:9e:79:83:52:ca:43:cb:64:b3:
         d4:f5:ce:44:5f:de:08:95:fe:68:b1:5f:63:17:54:46:7e:c4:
         e5:d1:90:45:9d:6f:33:45:80:41:d2:5f:ac:c0:c7:cf:6c:05:
         1b:28:1e:47:1a:4b:a7:53:f7:a6:ec:38:1f:28:74:da:a3:d0:
         36:a7:a0:d6:2a:b3:94:7f:fd:f2:33:e8:31:08:2f:e1:3b:db:
         34:32:9f:de:33:e3:38:35:bf:ad:27:0a:1a:f9:fd:44:46:b3:
         fe:4e:ba:d8:d3:cf:e8:f3:86:00:40:bf:40:f8:1e:8d:51:eb:
         7e:6f:dc:48:0b:3e:63:cf:e2:63:9d:3f:04:95:0b:70:32:8e:
         51:3f:fa:00:4d:95:98:9a:cf:3f:d2:44:f4:c9:87:17:a0:b0:
         bb:c0:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:06 2026 by rpki-client