Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa (raw, json)
Hash identifier:          aBTRIFCsheUBfxduMG6w7V9KU0BcuMA4Y5dXuPXbWVI=
Subject key identifier:   5F:49:9E:83:FC:5C:AB:A3:47:2D:CC:A2:51:4D:5C:A6:37:CC:54:D7
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       16800A65030F2CE2648D92BD1FB0F964E14079C3
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:28:58 +0000
ROA not before:           Thu 05 Feb 2026 00:23:58 +0000
ROA not after:            Thu 04 Feb 2027 00:28:58 +0000
asID:                     262798
IP address blocks:        177.129.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:80:0a:65:03:0f:2c:e2:64:8d:92:bd:1f:b0:f9:64:e1:40:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:23:58 2026 GMT
            Not After : Feb  4 00:28:58 2027 GMT
        Subject: CN=5F499E83FC5CABA3472DCCA2514D5CA637CC54D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:1e:5f:6c:62:26:10:0c:73:9b:3a:2d:c6:
                    56:4f:f7:a4:3f:ea:f8:ae:8f:ff:7c:b8:fb:6e:12:
                    03:bf:53:b4:21:58:8b:68:75:11:e0:f2:c8:37:27:
                    5a:15:ec:ae:49:75:b0:c3:a5:90:78:24:d6:3c:b3:
                    5f:07:7b:dd:04:18:3b:a0:f7:dd:b9:0d:09:fb:52:
                    14:e8:9d:35:57:5b:be:82:ed:32:47:98:3f:b1:bd:
                    8f:c4:9a:d4:b7:cb:8c:cd:93:4b:7f:89:a1:86:d3:
                    84:ac:f0:f8:ad:45:52:c3:da:fd:b9:74:92:e6:71:
                    4a:c7:48:f1:8e:74:b5:d4:af:d3:74:4f:c6:4b:7c:
                    64:bd:5b:af:5b:4b:8c:ba:e7:5a:8a:5b:82:57:8b:
                    84:02:a9:06:09:be:bc:80:49:7f:eb:78:b1:f2:63:
                    11:09:75:8b:87:47:2e:e5:4a:cd:8e:8c:19:4e:b1:
                    a0:02:9c:b4:0f:1d:6b:43:c7:d2:5c:15:f4:c6:37:
                    2d:8d:6c:b4:73:87:e6:3a:14:62:61:67:33:62:65:
                    40:e7:de:3f:65:93:ba:23:1d:ea:9d:97:41:8e:fc:
                    d8:00:f3:4f:7f:05:fd:fd:46:cf:7d:04:87:41:e5:
                    f5:38:5c:ff:bc:c4:d0:a6:97:10:1a:31:7c:54:f8:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:49:9E:83:FC:5C:AB:A3:47:2D:CC:A2:51:4D:5C:A6:37:CC:54:D7
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32322d3232203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:1f:df:51:02:6b:8a:74:e9:46:89:85:02:ea:1f:21:05:
         95:a3:f9:44:68:8d:a3:1d:f8:f6:7f:7a:2e:85:ed:68:34:eb:
         28:32:21:ca:7f:77:f9:da:d5:8a:1d:24:47:9a:32:d1:ca:76:
         05:97:26:5f:70:01:07:9f:87:63:07:c2:20:d6:d0:2e:bc:44:
         14:51:dc:f4:93:64:d8:18:35:05:40:e4:ff:d4:44:88:05:82:
         4f:07:05:3c:b3:9c:ca:9c:00:6a:41:25:f6:5d:a8:8b:d9:d8:
         06:38:dd:aa:e0:65:ab:af:78:0c:23:68:5e:3d:0d:03:25:2f:
         e2:96:09:fa:87:38:83:4c:85:a7:6a:48:09:13:b1:95:70:5c:
         55:b9:c0:04:35:e3:26:d6:c5:91:80:8f:f8:6c:d2:58:9d:a7:
         fc:51:cf:25:93:ee:cf:49:e0:00:68:33:57:41:a1:14:bb:69:
         49:58:f7:52:20:22:71:39:3a:ab:63:a9:a9:73:89:77:df:ab:
         b2:d2:d5:db:4c:54:85:44:b9:2f:a4:e8:86:e2:d4:c7:4b:28:
         46:0e:c6:39:60:2f:06:e5:12:00:26:81:09:32:49:b7:45:3e:
         32:72:a6:fc:66:30:be:7e:b4:fb:9c:fb:c4:af:e1:f8:ee:86:
         90:c7:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:19 2026 by rpki-client