Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa (raw, json)
Hash identifier:          XvBL7y/znCHKPeo1kUgNIrgUhqrh1Rx4achR6lMui8Q=
Subject key identifier:   FB:B4:59:42:AE:9A:03:1C:EB:B6:62:1C:FD:84:F2:5A:5E:1F:69:AC
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       B6FEA856D2E040A436BAE65E7FEB6C54D6104C
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa
Signing time:             Fri 06 Feb 2026 21:00:00 +0000
ROA not before:           Fri 06 Feb 2026 20:55:00 +0000
ROA not after:            Sat 06 Feb 2027 21:00:00 +0000
asID:                     263585
IP address blocks:        179.109.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b6:fe:a8:56:d2:e0:40:a4:36:ba:e6:5e:7f:eb:6c:54:d6:10:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Feb  6 20:55:00 2026 GMT
            Not After : Feb  6 21:00:00 2027 GMT
        Subject: CN=3082010A0282010100B3C7F1857E7E8E7A73FCDF64426FD1EADECCB7E063AF3DC5AB7151592C55F2375C6E6EFCCC413D344FBDD388B5579F296AF0D27338D091B4C924C390255884268953F0D6568841E2F4B05FDC46B8EB969D8D8A6F45DF7721B1108B9B74E2AA4FB955E11C0009AC5958B5E1C21C6F69EFE12B8775DA46DCDF574382530D1876E068D16B44F3966C666FB2FBFC8641B25C474C563847589972C1C29B766601AE9CA3C1F6530B07D714722076FF6A10B89AFBEED52617F9B6920F777E2A6AC6F773D430FB98CCBB067443558FEEBBE3F3F268E5CAEC821409C9500FD4A369B0F5774615981F1B4D35C151A5537C145799A7185F3E1B4FF916AC2335E9B023819AC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:f1:85:7e:7e:8e:7a:73:fc:df:64:42:6f:
                    d1:ea:de:cc:b7:e0:63:af:3d:c5:ab:71:51:59:2c:
                    55:f2:37:5c:6e:6e:fc:cc:41:3d:34:4f:bd:d3:88:
                    b5:57:9f:29:6a:f0:d2:73:38:d0:91:b4:c9:24:c3:
                    90:25:58:84:26:89:53:f0:d6:56:88:41:e2:f4:b0:
                    5f:dc:46:b8:eb:96:9d:8d:8a:6f:45:df:77:21:b1:
                    10:8b:9b:74:e2:aa:4f:b9:55:e1:1c:00:09:ac:59:
                    58:b5:e1:c2:1c:6f:69:ef:e1:2b:87:75:da:46:dc:
                    df:57:43:82:53:0d:18:76:e0:68:d1:6b:44:f3:96:
                    6c:66:6f:b2:fb:fc:86:41:b2:5c:47:4c:56:38:47:
                    58:99:72:c1:c2:9b:76:66:01:ae:9c:a3:c1:f6:53:
                    0b:07:d7:14:72:20:76:ff:6a:10:b8:9a:fb:ee:d5:
                    26:17:f9:b6:92:0f:77:7e:2a:6a:c6:f7:73:d4:30:
                    fb:98:cc:bb:06:74:43:55:8f:ee:bb:e3:f3:f2:68:
                    e5:ca:ec:82:14:09:c9:50:0f:d4:a3:69:b0:f5:77:
                    46:15:98:1f:1b:4d:35:c1:51:a5:53:7c:14:57:99:
                    a7:18:5f:3e:1b:4f:f9:16:ac:23:35:e9:b0:23:81:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:59:42:AE:9A:03:1C:EB:B6:62:1C:FD:84:F2:5A:5E:1F:69:AC
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e20323633353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:13:53:8d:75:3a:37:fc:0c:01:02:cb:7a:05:02:69:6a:24:
         66:ef:e0:fc:37:9b:5f:d1:46:2f:a1:ac:46:8c:e6:7c:7f:2a:
         72:34:a5:a6:25:04:d7:11:d4:10:57:94:5a:8a:fc:ef:e5:0f:
         b7:b6:a5:0b:78:95:97:3a:21:68:3c:01:e2:e8:cf:01:56:39:
         e5:00:3c:8d:8f:c4:95:b4:7e:8d:1a:5a:7e:72:73:91:9c:9f:
         0a:b4:b6:f7:60:e3:de:34:95:fd:87:be:50:e9:90:2b:3c:b9:
         4c:4b:47:77:df:27:a6:67:22:57:96:54:d7:51:1f:01:15:ef:
         60:b9:ed:37:82:35:20:98:ed:45:25:d4:e5:4a:a4:ff:90:90:
         ce:6b:1c:e7:c4:6c:b2:c6:1d:49:49:f0:07:5a:5f:97:73:24:
         9e:f5:d7:43:e6:5a:b9:8c:91:d1:85:18:33:89:fc:35:cd:b2:
         e9:37:33:da:27:9a:bb:49:e0:3d:f4:45:66:bd:b9:54:8e:b9:
         24:54:ee:b7:87:95:73:0d:54:ca:97:f5:dd:83:50:6d:29:fb:
         26:65:16:21:c4:37:8f:f4:41:8b:80:d5:ed:c1:55:56:81:9a:
         28:1a:f2:b1:b2:14:26:0a:5a:d8:b7:22:a6:4f:be:f0:fe:92:
         93:59:fa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:25 2026 by rpki-client