Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/3133312e302e3138302e302f32322d3234203d3e203631373037.roa
File:                     3133312e302e3138302e302f32322d3234203d3e203631373037.roa (raw, json)
Hash identifier:          PtFm6pvbXbcyEJ8EHdpiGgxgXM1mfJwzeZp9fPPP2CY=
Subject key identifier:   1C:0E:9C:EA:5F:C4:E4:F5:95:78:49:C0:51:4E:44:CC:B4:87:51:18
Certificate issuer:       /CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
Certificate serial:       10A98687A686DCA2EDCA532DE2A9DAC1E0928430
Authority key identifier: 77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/3133312e302e3138302e302f32322d3234203d3e203631373037.roa
Signing time:             Thu 05 Feb 2026 00:46:11 +0000
ROA not before:           Thu 05 Feb 2026 00:41:11 +0000
ROA not after:            Thu 04 Feb 2027 00:46:11 +0000
asID:                     61707
IP address blocks:        131.0.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 15:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a9:86:87:a6:86:dc:a2:ed:ca:53:2d:e2:a9:da:c1:e0:92:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
        Validity
            Not Before: Feb  5 00:41:11 2026 GMT
            Not After : Feb  4 00:46:11 2027 GMT
        Subject: CN=1C0E9CEA5FC4E4F5957849C0514E44CCB4875118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:7b:54:6c:cf:b9:c9:ed:2c:6a:c8:6b:74:
                    4b:57:8a:a4:7a:19:e7:8f:cf:4a:da:31:ff:9d:97:
                    ee:a4:c2:08:b5:ce:1f:e8:7d:02:01:16:62:f1:40:
                    16:e4:0a:c7:96:43:3a:f5:f0:ef:e0:5e:3b:18:3c:
                    73:a0:46:ba:6a:3b:a4:0d:56:c4:c6:43:22:c4:91:
                    32:e1:fe:39:3e:3c:fd:73:5e:c3:ba:2d:8b:bd:2c:
                    61:0f:6f:76:4a:86:0d:14:8f:06:71:f7:7c:cd:ed:
                    6c:10:dd:a5:e3:16:94:f2:67:df:a4:27:24:a2:0c:
                    97:4d:7e:d2:9d:e7:56:75:1f:0d:97:55:f1:15:b6:
                    77:45:16:38:97:fc:99:39:d6:2e:5a:35:b7:e7:28:
                    8d:14:58:39:26:7c:36:ff:79:c1:99:04:a9:b2:0d:
                    ed:79:db:7a:48:83:e4:20:cb:29:65:f3:cb:94:3f:
                    b1:25:33:f0:91:d8:aa:23:c6:7b:ec:97:fc:70:05:
                    38:27:d0:f0:8a:70:f2:42:9d:12:f3:df:bf:9d:de:
                    2b:e1:a8:96:76:35:19:96:a2:c0:c9:d5:79:af:9c:
                    01:7e:10:5c:0a:35:1f:4c:e5:d4:20:a3:5e:a8:27:
                    9f:c3:49:28:00:90:90:ed:f3:97:f0:e5:4f:44:87:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:9C:EA:5F:C4:E4:F5:95:78:49:C0:51:4E:44:CC:B4:87:51:18
            X509v3 Authority Key Identifier:
                keyid:77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/3133312e302e3138302e302f32322d3234203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:da:9d:4f:59:e6:a7:64:3b:81:9c:a9:01:c9:bd:31:d1:93:
         29:ac:df:18:61:70:2d:86:95:7e:0f:2a:69:ea:10:81:5e:34:
         be:8d:2d:1e:50:d3:2f:a4:d3:32:20:08:bf:65:48:ef:e5:e6:
         3c:34:46:fa:5d:c8:89:bf:42:27:fa:e1:3a:82:fe:a7:c2:e0:
         e5:97:53:c0:3d:5e:75:00:e0:0e:e3:7f:56:4b:22:8d:c4:97:
         7d:0a:eb:23:2b:27:eb:62:6f:dd:e8:bf:d5:04:6c:29:6d:47:
         69:3f:46:49:54:9a:d2:0b:1f:3d:0f:0e:bd:7b:e1:ad:75:e7:
         87:47:05:fe:6f:79:a1:74:1d:c7:9e:84:81:70:58:6d:42:4d:
         54:f5:55:f0:1a:5d:81:8e:b4:d1:2e:8e:e4:93:65:04:df:57:
         b3:a2:9b:25:bf:c4:8c:92:38:f7:12:f8:8a:e8:51:de:1d:01:
         54:fa:62:28:52:df:b8:23:ce:d4:cf:1b:8c:2d:b9:3a:4e:f8:
         19:73:aa:93:73:1a:61:b0:84:47:1e:00:16:1a:19:24:95:9b:
         6d:eb:d5:54:ad:b1:9f:84:02:ad:f3:c6:a9:0f:ce:0a:a8:15:
         29:0f:dc:8c:be:df:90:1f:16:6b:79:f3:f2:d2:79:94:ae:4e:
         a5:de:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:14 2026 by rpki-client