Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa
File:                     3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (raw, json)
Hash identifier:          Rz4oEJOP6UvkBFjPK3ZuyT7m869P08DDJ4ho0q7tOSo=
Subject key identifier:   3B:41:D0:B0:38:7A:F8:17:2D:4C:99:1C:B1:3A:05:43:77:44:5E:C6
Certificate issuer:       /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial:       67EAF26E717140D6998788F4547C250FB878B9FB
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa
Signing time:             Wed 04 Feb 2026 21:03:49 +0000
ROA not before:           Wed 04 Feb 2026 20:58:49 +0000
ROA not after:            Wed 03 Feb 2027 21:03:49 +0000
asID:                     268824
IP address blocks:        179.107.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
                          rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ea:f2:6e:71:71:40:d6:99:87:88:f4:54:7c:25:0f:b8:78:b9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
        Validity
            Not Before: Feb  4 20:58:49 2026 GMT
            Not After : Feb  3 21:03:49 2027 GMT
        Subject: CN=3B41D0B0387AF8172D4C991CB13A054377445EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:f1:a3:0d:a6:6b:0c:7b:9b:8b:cf:a3:ab:
                    10:b2:03:68:7d:70:4e:96:11:92:ca:37:16:6e:bd:
                    b9:4a:30:a6:a7:5b:30:e0:fa:50:f8:76:20:4f:a1:
                    ef:a6:38:e4:11:df:a2:d4:fe:e9:d4:b9:2a:30:22:
                    20:e0:22:e9:e0:c2:b0:b1:df:98:ac:9c:59:c1:c6:
                    b3:bd:8a:83:81:61:ef:54:8a:ac:25:d8:49:2b:2d:
                    f3:f4:f6:15:9b:ba:74:87:ee:e8:db:af:7b:89:68:
                    f8:c2:90:64:ab:13:90:bb:d9:66:28:a5:c7:86:44:
                    cc:26:5b:17:ba:68:fc:31:84:c9:4c:2b:25:b8:e3:
                    97:80:8b:00:8e:60:df:4a:d9:d3:48:23:46:69:96:
                    74:bc:ea:f0:cc:0d:f6:8f:79:7d:82:1a:bf:9a:5a:
                    d6:6e:ad:60:42:03:25:8c:c0:3a:af:f9:cb:31:34:
                    d4:fb:c9:39:d3:4d:a6:97:5a:09:07:a9:bf:f2:d5:
                    ad:98:be:db:15:8d:d4:85:d8:53:40:53:28:df:d5:
                    c5:c3:bb:4a:b2:2b:e6:20:f8:43:14:3a:c5:f3:fe:
                    6d:dc:f7:46:9e:7e:f0:7c:5b:78:59:27:ff:7b:84:
                    76:29:d8:8f:0c:a3:ee:83:da:eb:12:14:e1:56:d5:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:41:D0:B0:38:7A:F8:17:2D:4C:99:1C:B1:3A:05:43:77:44:5E:C6
            X509v3 Authority Key Identifier:
                keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ef:2b:50:b2:ba:ca:14:be:a6:7b:b9:79:7b:f0:d1:91:e7:
         d9:bf:c4:f9:ea:db:7d:a1:9c:ac:2c:63:62:33:94:31:5a:55:
         af:8a:a4:a1:0b:19:1c:2d:a9:5e:a7:2f:77:3c:29:bb:a9:c9:
         05:06:c2:65:ab:41:66:f0:cd:69:d0:6e:b1:c4:5b:cf:cd:3a:
         6a:c5:0a:4a:ac:51:4f:1c:17:b4:c4:b9:40:41:dc:87:f2:3c:
         b8:cf:14:12:93:23:0e:2a:b3:e1:e3:eb:86:23:9b:4a:0e:31:
         ee:7e:ac:7c:01:83:97:04:27:60:a6:e4:a9:8c:b3:97:44:36:
         41:10:25:ec:22:7d:7a:a0:01:3a:cd:0c:81:a1:ea:90:05:fc:
         10:27:b1:14:58:3f:b8:25:89:c1:8c:7d:14:68:a7:33:37:72:
         bc:73:f1:89:20:33:8c:71:81:b8:24:07:f2:dc:f2:6c:3a:37:
         8b:97:e3:fe:bd:19:67:42:32:34:b7:53:58:44:04:fe:61:cd:
         6f:d2:f8:74:f5:f3:2a:a4:16:34:34:61:3d:16:86:5d:23:29:
         48:a2:05:e0:c6:af:90:51:43:72:7b:21:8b:14:55:02:a8:39:
         f1:41:3a:c4:ad:55:27:43:c2:28:7a:a5:98:4d:86:46:a6:e9:
         04:c1:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:05:59 2026 by rpki-client