Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa
File:                     3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa (raw, json)
Hash identifier:          P5AVU2TxzaBr30iVoodHdPdbDQeHChN0OIrv4z/7Vm4=
Subject key identifier:   71:89:89:F1:23:68:AB:D6:2B:74:1C:01:61:85:FC:DD:7D:92:B6:63
Certificate issuer:       /CN=E564227F0F27852AEEA76948A118D38F01D7645E
Certificate serial:       241F74DAF04F9E295EB5AD2691E49803C6582F38
Authority key identifier: E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa
Signing time:             Thu 05 Feb 2026 07:00:30 +0000
ROA not before:           Thu 05 Feb 2026 06:55:30 +0000
ROA not after:            Thu 04 Feb 2027 07:00:30 +0000
asID:                     263474
IP address blocks:        191.242.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl
                          rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 20:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1f:74:da:f0:4f:9e:29:5e:b5:ad:26:91:e4:98:03:c6:58:2f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E564227F0F27852AEEA76948A118D38F01D7645E
        Validity
            Not Before: Feb  5 06:55:30 2026 GMT
            Not After : Feb  4 07:00:30 2027 GMT
        Subject: CN=718989F12368ABD62B741C016185FCDD7D92B663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:5a:34:60:84:16:eb:08:b8:f3:e0:85:bd:
                    e0:ab:8b:05:64:28:e1:da:ea:00:d0:82:ce:bc:50:
                    f0:50:80:96:3e:cc:df:ba:7e:08:7a:0d:63:f3:ec:
                    8e:a3:ad:c0:61:8e:61:39:d6:60:79:79:1a:36:df:
                    f0:13:c3:45:6d:42:0c:5c:f8:50:55:fb:97:49:61:
                    f2:67:2a:f3:4a:2e:6a:58:85:ed:60:fc:c7:33:f4:
                    6b:eb:92:25:56:95:b6:d1:16:6f:02:b3:bd:75:d0:
                    e3:80:52:37:09:ec:55:c6:ec:56:e7:fb:53:54:f0:
                    24:91:dd:c8:0b:00:63:67:c8:ec:d1:d0:15:65:3e:
                    00:07:a6:ba:93:58:13:3a:1f:c6:11:03:0c:be:de:
                    9d:e0:eb:1e:46:c8:b8:f5:d0:df:8a:3f:87:8a:fb:
                    90:30:b2:aa:75:22:a2:3d:2f:81:13:fa:7a:08:34:
                    3d:86:a0:b8:22:40:54:18:e7:9e:0a:13:87:ba:ea:
                    11:54:58:1c:a4:9d:67:eb:f2:f1:b2:43:45:ae:ee:
                    52:04:96:f5:38:07:ad:41:75:02:d8:7b:85:03:72:
                    5d:e8:81:27:6e:be:b6:9f:94:ff:e0:1c:09:7d:48:
                    e5:65:47:6f:10:86:eb:27:b1:c0:24:44:94:f3:89:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:89:89:F1:23:68:AB:D6:2B:74:1C:01:61:85:FC:DD:7D:92:B6:63
            X509v3 Authority Key Identifier:
                keyid:E5:64:22:7F:0F:27:85:2A:EE:A7:69:48:A1:18:D3:8F:01:D7:64:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/E564227F0F27852AEEA76948A118D38F01D7645E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E564227F0F27852AEEA76948A118D38F01D7645E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KovFZax5Uh9W9j4a7jFnAe34hGrofN5oZ6CxAsAhbzN/1/3139312e3234322e37372e302f32342d3234203d3e20323633343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:70:18:ed:49:5d:4c:14:ff:87:d6:07:63:9a:22:ee:c3:
         6d:ba:68:2d:0a:8f:4c:07:9f:c7:a8:2b:e1:18:6e:23:36:b3:
         4b:97:7e:75:93:e5:87:bd:60:3e:a0:d0:95:3e:bc:96:ed:59:
         78:e8:21:aa:ff:c9:69:d4:4f:4e:22:5d:04:80:f1:61:a9:b0:
         a7:c6:48:dd:81:5f:d3:92:3e:f4:8d:b2:06:54:6b:5c:ca:6a:
         83:59:f0:9d:77:73:dc:89:cc:83:7f:29:61:a7:a7:a0:08:6e:
         bb:bb:61:f0:a3:ea:8d:8e:45:25:81:cb:a3:9a:4d:c8:76:41:
         96:4d:23:78:7f:43:8a:ee:ae:d3:3b:03:16:f8:e0:42:ca:b8:
         a2:ab:04:f1:ef:a9:27:b0:02:38:c2:76:ff:ea:c7:c9:01:bb:
         4a:5c:cf:70:fb:3f:a1:5f:e3:d9:e4:75:dc:98:73:e2:c4:3e:
         15:2b:35:21:16:76:2a:00:cb:6b:1f:45:04:65:1f:4d:0f:e6:
         c9:7e:32:0f:da:2b:3d:e5:e9:a9:27:fa:9e:a2:79:59:0f:d2:
         ee:fc:55:74:12:d8:9f:96:80:d2:6c:cb:8e:b1:82:35:5d:7c:
         f4:8e:e7:3b:60:1b:52:0a:ab:fd:73:77:12:7f:94:cd:59:be:
         d9:3e:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:34 2026 by rpki-client