Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          pFFtb/vNIoWvaTtwTCC4mpDnKjEuBBumMVB7H63fTWg=
Subject key identifier:   F8:51:D1:03:3D:FA:1A:6A:61:5A:34:97:F8:84:B8:29:7C:80:BA:06
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       5EE1D3F1DBFC49AE45A423B2DDEC3D1DEA12A7D0
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:29:00 +0000
ROA not before:           Thu 05 Feb 2026 00:24:00 +0000
ROA not after:            Thu 04 Feb 2027 00:29:00 +0000
asID:                     262798
IP address blocks:        177.129.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e1:d3:f1:db:fc:49:ae:45:a4:23:b2:dd:ec:3d:1d:ea:12:a7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:24:00 2026 GMT
            Not After : Feb  4 00:29:00 2027 GMT
        Subject: CN=F851D1033DFA1A6A615A3497F884B8297C80BA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:68:58:97:2d:e7:12:d4:e1:12:7b:62:84:
                    51:22:cd:7b:a0:ed:53:6f:9b:63:d7:1a:10:3d:58:
                    79:c6:76:05:97:5f:05:9b:e1:d6:ad:dc:cb:41:df:
                    d4:4f:1c:13:dc:aa:80:c9:54:6f:ee:a1:c8:be:71:
                    22:fd:92:70:19:c5:6a:6d:1d:62:57:09:54:ff:a8:
                    e7:59:03:d2:2a:49:f3:a6:14:c6:f9:f1:48:12:c7:
                    81:cf:03:f5:66:de:fb:a3:eb:75:9b:d5:87:85:61:
                    8e:a7:2c:f2:8d:09:25:fc:e7:a8:62:60:63:bf:60:
                    4a:0e:db:6c:7d:1a:a2:eb:bc:42:7e:af:69:6d:8c:
                    6f:c5:31:d4:0c:d4:12:bc:7b:7b:1f:2e:68:47:3c:
                    cb:03:0a:6d:5d:5f:74:90:c1:68:23:1f:3a:5e:a6:
                    cd:0d:28:8e:7b:30:40:09:52:1a:b7:66:69:21:9c:
                    86:86:fa:93:91:d9:f0:f4:be:d6:36:b5:55:98:05:
                    33:d2:3b:34:2f:d7:4b:82:c4:2b:1a:52:2d:b8:7c:
                    ac:50:05:79:21:8f:70:f2:e1:fc:5f:67:0d:c3:64:
                    65:f2:17:b0:59:6d:23:ff:41:f8:90:96:e2:5b:5e:
                    23:5a:d6:dc:33:64:5f:68:a5:b3:ca:01:79:5c:ef:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:D1:03:3D:FA:1A:6A:61:5A:34:97:F8:84:B8:29:7C:80:BA:06
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136352e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:4a:dc:5b:12:89:e4:2b:f1:ca:dd:50:e3:3a:67:07:ec:
         26:58:0c:b6:9c:84:17:f1:4e:46:1c:4b:20:f7:83:fd:f5:ac:
         09:de:69:ca:f8:72:dd:87:29:f0:8c:ab:ab:4e:d5:c9:52:15:
         65:81:25:86:ca:c8:98:5e:66:a0:66:18:a6:53:e0:db:e1:88:
         45:0e:3d:9b:14:5b:06:fc:9c:d7:84:3e:ad:ae:83:05:cd:fc:
         61:39:18:1a:19:ad:f9:1c:d5:d1:36:f0:27:d1:2b:0e:bb:ec:
         14:41:3f:ec:5e:05:16:20:d1:a3:ac:3f:31:3c:1f:bd:b0:f9:
         56:9e:20:f6:1c:b0:34:12:d6:20:7b:df:29:b8:f6:e1:c8:ca:
         16:b3:c1:ae:ce:b3:f5:2a:45:ba:bb:b4:69:c2:84:2c:90:f6:
         82:2d:c5:c1:3d:cd:0b:48:99:2d:10:ea:42:98:3c:7c:ed:ae:
         e8:37:6c:98:c1:e5:94:f8:5a:15:31:72:29:a4:f3:93:68:1e:
         f6:dd:3c:3f:6b:b8:2f:22:1b:2f:a2:70:91:52:b2:96:89:ea:
         d8:e1:17:0b:30:5b:04:fa:7a:ac:a1:5d:49:35:1e:e4:35:88:
         e0:58:26:3c:eb:14:6a:f4:d7:8f:fa:10:d0:8f:1a:14:11:fd:
         0e:13:75:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:37 2026 by rpki-client