Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37342e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37342e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          vNMKy6qEA7OeY6BDBqmmCY7gD8jiimbyUUwO+cFhpZM=
Subject key identifier:   AC:31:6D:D0:70:F0:58:47:CB:93:CF:D2:EC:B8:31:AD:D8:97:E1:65
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       628CF5AE7249AA9721BD57623AAD31C7627E7594
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37342e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 05 Feb 2026 07:00:29 +0000
ROA not before:           Thu 05 Feb 2026 06:55:29 +0000
ROA not after:            Thu 04 Feb 2027 07:00:29 +0000
asID:                     263474
IP address blocks:        191.242.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8c:f5:ae:72:49:aa:97:21:bd:57:62:3a:ad:31:c7:62:7e:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Feb  5 06:55:29 2026 GMT
            Not After : Feb  4 07:00:29 2027 GMT
        Subject: CN=AC316DD070F05847CB93CFD2ECB831ADD897E165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:cf:a1:30:c1:83:2c:db:0b:b6:09:ba:56:
                    b9:ed:ef:52:5e:23:c1:ca:90:c3:25:54:1a:34:a0:
                    39:8d:bb:14:a6:67:01:d7:90:e8:ab:82:5f:43:8f:
                    26:56:43:71:19:2f:79:08:73:7d:cf:24:a3:7f:83:
                    c9:90:af:9a:36:6f:95:90:bf:11:52:cb:b4:7e:31:
                    c7:f1:44:0e:07:f4:36:82:20:da:19:e4:20:a3:40:
                    af:43:9c:00:e4:38:d4:79:29:c9:60:1d:7a:f6:0c:
                    7b:b7:e3:aa:44:95:b7:fd:c1:02:fd:0c:ac:97:0c:
                    55:9f:17:fb:bd:f5:e4:98:e5:82:34:06:31:b5:4d:
                    6a:dd:64:ac:ea:ac:4e:7d:6e:8b:df:8f:91:7a:35:
                    e7:31:0f:f9:67:41:85:df:30:b0:96:a6:e7:ff:b4:
                    bc:55:b9:4a:6d:4f:84:25:e3:10:09:c7:6a:21:74:
                    52:04:d6:07:55:e9:e3:55:fe:91:32:75:64:e1:19:
                    89:b7:ac:07:50:c6:85:d1:35:cf:30:4d:b9:dc:a0:
                    87:78:ea:f4:7e:3b:c8:dc:e2:29:b9:64:e0:05:d7:
                    94:6c:f7:d7:59:31:18:6f:11:60:67:45:6e:82:cb:
                    11:43:23:e0:31:20:cd:c5:45:48:47:52:3e:97:28:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:31:6D:D0:70:F0:58:47:CB:93:CF:D2:EC:B8:31:AD:D8:97:E1:65
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37342e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:eb:d1:e6:ce:36:8d:51:68:68:fb:53:8e:62:53:fe:44:1e:
         2b:2f:54:5b:0d:b0:8f:e4:8f:38:d6:a7:0a:30:66:14:eb:f6:
         7e:30:2a:c6:07:4d:67:79:61:94:22:50:3e:35:28:d8:9a:81:
         79:48:bc:43:24:c1:44:3c:aa:98:4d:83:41:9a:a6:b6:d1:06:
         0d:df:28:56:4b:52:66:38:c7:ed:b2:05:11:05:3a:d2:06:49:
         a1:e3:9a:e2:d3:16:87:cf:f1:a0:df:bf:0d:2f:47:ac:95:82:
         a6:88:71:d8:db:c5:5f:0a:ba:7e:3b:e9:2f:f5:71:16:6e:3e:
         a2:21:c3:67:af:eb:99:7a:71:41:05:1d:48:7b:5f:6d:0c:f1:
         01:64:be:c1:92:fb:37:06:b9:a8:8f:56:6a:92:39:cd:3f:a5:
         ec:be:ec:fc:40:03:e2:81:e0:e9:95:93:f2:d7:b5:79:7b:cd:
         6e:dd:62:76:47:7a:73:dc:26:45:4b:18:c9:99:f6:b3:f9:03:
         4b:f0:8b:c8:1a:2f:63:8a:a8:13:0c:8b:cb:e7:c1:eb:4b:f2:
         54:ee:b6:dd:97:39:4e:6a:bd:a2:c9:3e:10:f9:6c:07:23:95:
         b2:2f:f5:59:1f:97:cd:dc:34:74:16:a4:73:e3:b0:2f:f7:be:
         c5:39:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:26 2026 by rpki-client