Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa
File:                     3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier:          zopijXdteBYCpSCuZS5budaBOq7KyfjL+hupxRqaH5s=
Subject key identifier:   88:33:D0:B7:09:08:B3:E3:4D:BD:60:90:EC:E5:36:D1:06:A7:93:F4
Certificate issuer:       /CN=AF6D10F6F9F4A1781591C9AB770C3C36326E4C57
Certificate serial:       02E76352D74D394BB8ED0945AE187D420A8887BD
Authority key identifier: AF:6D:10:F6:F9:F4:A1:78:15:91:C9:AB:77:0C:3C:36:32:6E:4C:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa
Signing time:             Tue 27 Jan 2026 18:33:37 +0000
ROA not before:           Tue 27 Jan 2026 18:28:37 +0000
ROA not after:            Tue 26 Jan 2027 18:33:37 +0000
asID:                     265933
IP address blocks:        170.150.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.crl
                          rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e7:63:52:d7:4d:39:4b:b8:ed:09:45:ae:18:7d:42:0a:88:87:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6D10F6F9F4A1781591C9AB770C3C36326E4C57
        Validity
            Not Before: Jan 27 18:28:37 2026 GMT
            Not After : Jan 26 18:33:37 2027 GMT
        Subject: CN=8833D0B70908B3E34DBD6090ECE536D106A793F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:39:18:34:18:ab:a9:87:49:ed:0d:ca:db:
                    91:a4:c9:ce:fd:d9:b1:fa:a9:cd:61:4c:c8:f7:e7:
                    e4:8b:1c:03:cf:38:a8:7f:d5:2b:00:7f:10:86:6f:
                    23:ee:78:97:41:a0:42:bd:1e:89:e9:8b:c8:e0:05:
                    74:4f:24:de:b6:58:f4:de:52:b2:91:3f:db:4d:c0:
                    2d:26:f3:35:ba:b9:f3:bd:94:24:b5:b3:66:57:51:
                    99:80:94:b2:1c:c1:71:a5:79:22:c5:cb:5a:af:1a:
                    b5:d6:96:f4:da:fd:36:39:2b:c0:89:75:01:e9:63:
                    19:55:0f:91:a4:31:91:42:b2:3e:f0:cc:bd:d5:14:
                    0e:7e:3b:e9:40:f0:30:1f:80:df:68:08:3e:92:f0:
                    9e:21:2f:fb:1f:5a:46:f5:c4:c5:d4:0a:da:dc:94:
                    71:a8:6d:6b:83:b0:8e:ff:d2:ab:1d:9f:5c:b8:12:
                    04:a4:3e:4b:fa:5c:c4:bc:c8:cd:97:54:7d:20:51:
                    63:3f:c4:47:91:94:e5:ff:ea:72:17:37:a0:47:bb:
                    b2:4c:a2:1a:e9:46:da:a0:bb:b3:48:9b:11:01:ea:
                    2d:38:4e:fa:b6:da:fa:e1:b0:26:30:ab:f3:42:72:
                    cb:90:4a:27:72:e1:96:e8:6b:69:9b:3b:54:c7:7e:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:D0:B7:09:08:B3:E3:4D:BD:60:90:EC:E5:36:D1:06:A7:93:F4
            X509v3 Authority Key Identifier:
                keyid:AF:6D:10:F6:F9:F4:A1:78:15:91:C9:AB:77:0C:3C:36:32:6E:4C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF6D10F6F9F4A1781591C9AB770C3C36326E4C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/3137302e3135302e3134342e302f32322d3332203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:4d:bd:19:7e:d0:d7:2e:86:a4:7d:8d:a4:eb:d4:cf:ad:
         b9:ea:1a:f9:a6:38:35:57:8b:36:65:4b:8b:ca:9d:ac:01:e1:
         a5:bb:01:72:c3:a3:16:18:9b:4b:48:e4:22:5f:f7:0e:c9:8f:
         37:bc:6c:21:71:8f:ca:0a:04:02:f2:92:f0:72:84:15:fe:c3:
         97:19:0e:f7:38:aa:62:93:e0:37:1c:2d:0f:9c:b4:f4:8f:e1:
         6b:dd:c6:b3:2c:e1:f7:7a:50:e6:c4:96:11:64:95:8c:43:57:
         20:0b:89:eb:dc:41:21:e9:b2:ea:87:87:af:cd:5d:48:7b:9d:
         02:ed:11:a8:a0:23:3c:e1:c1:a1:0d:d4:da:36:de:b6:7d:eb:
         8b:cb:a5:76:30:33:06:57:12:3b:26:ef:43:2a:c3:ba:14:6c:
         ac:02:e2:97:6b:b0:7c:29:d8:59:8b:a1:72:ce:68:b3:45:dd:
         01:43:eb:7b:1a:39:ab:7e:55:04:80:6e:44:14:b2:3a:bb:b9:
         a4:a8:42:22:90:66:7f:63:0d:a7:71:ab:6d:dd:70:62:f2:eb:
         9f:62:9a:e6:97:df:04:60:cf:79:d4:b7:fa:01:cf:47:c9:70:
         9b:cf:c1:78:da:05:70:55:8a:45:0f:68:bf:34:5e:e5:89:7c:
         53:c7:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 02:58:57 2026 by rpki-client