Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
File:                     3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (raw, json)
Hash identifier:          xUq9QkrAxYg59lJQKt7XYoc2blG8xJJ6MWxG30IHk6M=
Subject key identifier:   91:6D:10:C1:0D:37:FB:45:20:08:20:B6:CD:E4:A1:16:2D:21:C0:A6
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       436F2ACC3DA187640C7016B7C6F48853EE0B415A
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa
Signing time:             Thu 05 Feb 2026 17:46:28 +0000
ROA not before:           Thu 05 Feb 2026 17:41:28 +0000
ROA not after:            Thu 04 Feb 2027 17:46:28 +0000
asID:                     61901
IP address blocks:        170.254.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6f:2a:cc:3d:a1:87:64:0c:70:16:b7:c6:f4:88:53:ee:0b:41:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Feb  5 17:41:28 2026 GMT
            Not After : Feb  4 17:46:28 2027 GMT
        Subject: CN=916D10C10D37FB45200820B6CDE4A1162D21C0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:b4:eb:fd:af:54:8e:f1:ac:fe:1c:41:cf:
                    37:f8:35:4b:1e:bd:9c:b6:64:c9:fe:51:3a:ae:b9:
                    a3:82:8d:66:2c:9d:a3:19:cf:6b:12:98:c7:fa:bf:
                    fd:fa:8a:e4:b8:8d:d9:7c:80:e5:ec:52:e3:74:c4:
                    f0:1d:f6:51:f0:9f:fa:8f:0e:53:16:19:91:6b:87:
                    29:b1:c1:6a:99:09:c9:ec:71:71:c2:c5:18:80:e8:
                    83:fd:65:61:ad:20:ba:75:25:bd:7c:ff:a3:55:52:
                    95:c5:48:3b:3a:c0:34:1a:3b:2e:a2:fa:6e:c8:55:
                    2e:24:7e:70:d3:27:82:19:5d:0a:79:5a:0a:63:52:
                    77:1b:40:9b:6b:c1:4e:c0:fe:08:52:c1:89:90:d7:
                    78:1e:2d:74:20:d5:26:cd:29:70:2d:16:5a:c7:4c:
                    e0:1e:33:f4:c5:87:38:d2:9a:25:0b:c9:55:ce:28:
                    8f:65:44:4c:17:5a:aa:e4:d9:24:45:a7:65:ed:d0:
                    b9:f6:0f:e2:ac:a5:19:cf:b4:b9:d5:3a:b3:da:18:
                    ca:b3:29:24:7e:26:b5:70:71:ad:99:0b:01:80:2a:
                    a7:8f:09:8e:2f:b9:46:5e:63:df:8f:e8:b7:af:2a:
                    8c:31:1a:c9:bc:71:d4:8d:50:d0:78:4c:e7:7d:78:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:10:C1:0D:37:FB:45:20:08:20:B6:CD:E4:A1:16:2D:21:C0:A6
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/3137302e3235342e35322e302f32332d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:92:78:a4:48:11:8e:7c:72:4c:fd:a7:49:c7:b9:47:7e:
         2c:86:4e:a6:ec:cc:84:6a:a2:66:70:bc:eb:41:15:d2:57:e7:
         2a:d7:6f:25:d1:ec:ec:00:04:f5:eb:a8:a5:57:cf:da:85:5f:
         47:7a:ce:71:78:0f:d0:99:43:e6:f2:ef:e5:8f:44:c2:6c:9e:
         1d:2c:de:f1:51:0f:4c:95:65:12:7a:f6:c3:6f:96:81:4a:97:
         6b:71:fb:ad:fc:33:f9:1e:b2:62:05:86:c4:81:91:96:ae:42:
         51:8d:0d:b2:6b:d2:f8:b7:da:57:39:6a:73:e1:8c:3c:b3:10:
         4e:24:b8:ad:88:d8:4d:d5:5d:d8:04:86:96:7f:5b:e3:41:fb:
         83:2f:d7:4a:48:4d:db:12:dc:ab:d1:70:26:d3:29:6e:76:27:
         33:85:08:b8:01:81:89:e6:d0:47:25:b7:6e:ab:d8:2c:eb:0c:
         f6:2c:16:b3:67:41:a5:0e:c3:ab:58:0e:10:f8:c0:90:b1:15:
         c2:4e:0b:a6:3e:06:d4:ae:ef:a5:6b:05:65:d1:7e:bb:25:ab:
         59:86:16:4c:fd:af:2e:9d:dc:cf:2c:b1:db:83:08:68:69:78:
         ae:71:60:f1:b6:b5:58:4f:be:17:32:27:34:fa:58:42:c6:0c:
         13:79:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 12:58:17 2026 by rpki-client