Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          lFN9bd+hdG4GFwf2+PWjiZcqw7FQVzu4ApAtz3dmnvI=
Subject key identifier:   F0:44:6D:85:89:55:40:33:48:40:83:71:70:27:9D:A6:C0:ED:54:43
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       70AAAC48F6C2093914F34F32F1BA874549E4758F
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa
Signing time:             Thu 05 Feb 2026 00:28:58 +0000
ROA not before:           Thu 05 Feb 2026 00:23:58 +0000
ROA not after:            Thu 04 Feb 2027 00:28:58 +0000
asID:                     262798
IP address blocks:        177.129.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:aa:ac:48:f6:c2:09:39:14:f3:4f:32:f1:ba:87:45:49:e4:75:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Feb  5 00:23:58 2026 GMT
            Not After : Feb  4 00:28:58 2027 GMT
        Subject: CN=F0446D85895540334840837170279DA6C0ED5443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:fe:43:ae:7f:e0:0f:9b:01:e7:dc:f5:d3:
                    76:8e:4e:e1:cc:0d:a2:61:c9:43:31:73:21:01:1d:
                    47:2e:01:4f:6c:0b:ce:44:80:76:43:f6:bd:22:99:
                    2c:ae:40:a3:ad:31:f4:f8:b3:b6:41:02:ef:9f:3f:
                    a4:5d:47:0a:b1:e9:24:4b:84:ae:75:8f:1f:55:2b:
                    fa:87:5b:15:f6:b0:e1:6b:77:23:60:56:69:8a:4b:
                    41:78:14:09:b6:c7:70:cd:96:37:80:f3:6b:cd:3b:
                    ad:b2:23:13:14:52:50:fc:f8:76:d9:1b:0d:fc:5d:
                    6d:ab:f8:53:cd:7c:79:0c:ca:5d:58:30:c8:a4:8b:
                    3a:db:ef:54:bf:92:47:13:19:cf:5b:81:e5:85:a0:
                    fb:c9:82:2e:2c:b1:4c:03:23:c3:ae:c3:e5:e0:48:
                    ad:26:3b:2f:cd:73:52:ab:ca:51:91:fe:f5:fb:4b:
                    0e:59:ad:a3:e9:94:74:f9:82:dc:87:0b:a5:40:40:
                    bd:bc:5c:1b:15:54:25:18:f4:01:70:4b:5a:89:78:
                    1d:9f:cd:ef:f0:a5:7c:09:86:29:b3:1b:1e:e9:a3:
                    53:0f:10:00:61:b3:ac:65:8b:48:46:45:c3:73:51:
                    7c:19:32:26:cc:d8:d9:b3:d0:8a:d5:e2:e5:36:93:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:6D:85:89:55:40:33:48:40:83:71:70:27:9D:A6:C0:ED:54:43
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136372e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:81:41:2d:7a:74:96:ab:fe:05:ea:dd:b4:37:e8:42:41:
         fd:79:0e:01:57:07:86:9c:61:21:69:88:45:5c:fc:f8:d6:ed:
         1e:7e:ff:c0:ff:ff:bd:a6:f6:fc:2a:b1:4b:31:bf:7b:40:e6:
         55:0b:7b:e7:8c:b3:4c:09:0f:c3:a9:c0:89:ec:3b:ab:27:bd:
         74:77:3e:59:14:d5:ba:70:cb:28:b7:8b:b6:ea:b1:c3:1d:81:
         6a:83:53:aa:bc:27:99:20:d5:d0:94:53:ea:37:4d:5d:c1:9b:
         1a:c7:25:57:fa:a1:15:60:64:7f:e4:3d:85:26:41:9d:42:e6:
         a1:f1:c8:af:f8:9e:09:80:bc:15:d1:f3:3d:94:c8:d6:32:69:
         5e:c3:1f:65:4d:b3:e0:2f:9f:8a:6d:c7:34:d0:bc:59:2e:13:
         a4:9c:59:88:3c:43:5a:a3:22:db:d5:fb:28:de:b1:3a:20:4d:
         60:1a:57:e0:78:bf:67:8a:18:25:fc:e1:cf:ef:35:92:a5:2c:
         5b:ca:c2:df:60:d5:49:74:a3:f8:1d:77:b5:59:7d:8f:8e:05:
         5f:de:e5:bc:4d:72:57:54:17:04:84:8b:26:e2:ca:2d:59:76:
         e3:4b:12:f9:95:fa:63:22:6e:2d:96:34:17:57:a7:df:31:50:
         0e:31:81:e6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcKqsSPbCCTkU808y8bqHRUnkdY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNjAyMDUwMDIzNThaFw0yNzAyMDQwMDI4NThaMDMxMTAvBgNV
BAMTKEYwNDQ2RDg1ODk1NTQwMzM0ODQwODM3MTcwMjc5REE2QzBFRDU0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJP5Drn/gD5sB59z103aOTuHM
DaJhyUMxcyEBHUcuAU9sC85EgHZD9r0imSyuQKOtMfT4s7ZBAu+fP6RdRwqx6SRL
hK51jx9VK/qHWxX2sOFrdyNgVmmKS0F4FAm2x3DNljeA82vNO62yIxMUUlD8+HbZ
Gw38XW2r+FPNfHkMyl1YMMikizrb71S/kkcTGc9bgeWFoPvJgi4ssUwDI8Ouw+Xg
SK0mOy/Nc1KrylGR/vX7Sw5ZraPplHT5gtyHC6VAQL28XBsVVCUY9AFwS1qJeB2f
ze/wpXwJhimzGx7po1MPEABhs6xli0hGRcNzUXwZMibM2Nmz0IrV4uU2k969AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8ERthYlVQDNIQINxcCedpsDtVEMwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBpzANBgkqhkiG9w0BAQsFAAOCAQEAi6qB
QS16dJar/gXq3bQ36EJB/XkOAVcHhpxhIWmIRVz8+NbtHn7/wP//vab2/CqxSzG/
e0DmVQt754yzTAkPw6nAiew7qye9dHc+WRTVunDLKLeLtuqxwx2BaoNTqrwnmSDV
0JRT6jdNXcGbGsclV/qhFWBkf+Q9hSZBnULmofHIr/ieCYC8FdHzPZTI1jJpXsMf
ZU2z4C+fim3HNNC8WS4TpJxZiDxDWqMi29X7KN6xOiBNYBpX4Hi/Z4oYJfzhz+81
kqUsW8rC32DVSXSj+B13tVl9j44FX97lvE1yV1QXBISLJuLKLVl240sS+ZX6YyJu
LZY0F1en3zFQDjGB5g==
-----END CERTIFICATE-----
Generated at Thu Feb 19 11:39:49 2026 by rpki-client