Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
File:                     3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa (raw, json)
Hash identifier:          HIWC1c60JLqZTH3B+wDxsoBT4ZHKJN07TDLFmv+T27M=
Subject key identifier:   B3:4A:15:50:1E:A3:C9:C9:7F:73:59:71:47:E6:A9:9C:AA:3D:A3:86
Certificate issuer:       /CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
Certificate serial:       78D718941FF966C17FF26B8044C59F43326B94D3
Authority key identifier: 1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     28210
IP address blocks:        179.109.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl
                          rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:18:94:1f:f9:66:c1:7f:f2:6b:80:44:c5:9f:43:32:6b:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8D631665748A7E3D1B22EAB3E9675F5F6756D0
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:08:70:9a:29:2c:7d:30:f5:ad:f7:77:1c:
                    3a:81:5e:85:c4:4b:ac:20:f8:03:38:b0:79:a1:70:
                    68:16:65:d2:7a:05:2b:7a:a5:d1:75:ef:39:d1:3e:
                    36:36:c5:84:0e:74:04:d6:80:c3:2b:44:d1:10:22:
                    2e:74:b1:1d:d2:1b:88:c8:36:4c:ae:ea:d8:2b:ad:
                    b9:cd:25:62:e5:8b:6d:57:b4:44:de:b8:f1:b7:58:
                    7b:e0:7c:fb:ac:3f:71:fc:05:fe:72:49:c1:97:f3:
                    5f:93:18:58:4e:18:75:8b:65:d2:ce:b3:8b:97:0f:
                    9f:c0:01:e8:93:be:c1:2f:ba:51:25:19:d7:96:d8:
                    cb:44:6b:20:70:43:3e:96:88:f3:cc:33:d2:4d:37:
                    66:cb:96:ba:16:07:18:26:04:ae:bd:27:c5:aa:0f:
                    27:e5:23:9f:91:bb:cb:2c:7a:7e:00:d5:a8:15:81:
                    38:64:a2:cb:71:4c:e2:9e:0e:8b:f9:92:0b:f0:2b:
                    88:b0:07:f3:0a:b6:01:0c:62:89:e3:11:be:80:4d:
                    0a:8e:c7:ce:6c:f5:93:ac:9a:7b:56:8b:f6:83:3f:
                    7c:67:60:ad:ab:95:4e:f7:c1:70:0c:93:42:bf:39:
                    29:28:b7:5d:98:14:c9:03:44:c3:fa:88:b8:cf:4c:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4A:15:50:1E:A3:C9:C9:7F:73:59:71:47:E6:A9:9C:AA:3D:A3:86
            X509v3 Authority Key Identifier:
                keyid:1D:8D:63:16:65:74:8A:7E:3D:1B:22:EA:B3:E9:67:5F:5F:67:56:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D8D631665748A7E3D1B22EAB3E9675F5F6756D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PRRWCWWjQLndTthx7PeGWhN8ueobvJumDr98phSkmMT/1/3137392e3130392e3132382e302f31392d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:06:7c:0b:75:79:e7:2f:ef:81:39:9d:48:e7:6c:11:b3:
         52:2d:2c:24:16:ef:37:64:ea:cc:19:69:a5:42:ff:0b:2f:35:
         a0:29:bf:e1:c2:da:4f:65:0d:f2:4f:dd:b1:f5:52:58:d9:be:
         f2:6f:2d:ff:b8:d9:4e:78:4a:7d:44:d2:4a:cf:2a:11:40:44:
         54:61:f9:15:51:6a:03:17:1a:8c:a4:65:36:05:c3:86:a1:2a:
         8a:00:6e:63:00:53:d3:84:2c:10:cb:8f:6b:10:48:7f:94:16:
         8a:b2:99:2b:17:ad:49:dd:be:d9:7a:64:d6:cd:95:ba:af:1f:
         79:a8:e1:b3:70:84:74:69:88:c5:d7:29:5d:bc:c3:3b:c8:bc:
         26:f9:c8:54:52:79:e9:78:4b:91:9f:d2:f6:2b:02:fe:4f:69:
         13:47:fa:62:a2:cb:39:fa:00:c1:16:fa:5b:48:1a:86:60:8c:
         c7:2f:db:bf:76:37:9a:fa:2c:40:85:27:e7:c2:9e:a7:9d:81:
         22:c1:e8:af:0e:c6:bd:19:57:45:37:f7:43:8b:e7:7a:02:aa:
         39:e7:cd:5a:ef:48:da:01:34:08:ff:74:57:04:fc:02:17:11:
         55:a8:8c:e6:00:49:e8:81:5c:bf:c7:16:8c:df:a1:18:13:dc:
         3b:6b:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:35 2026 by rpki-client