Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32382e302f32322d3232203d3e203532353837.roa
File:                     3137302e37382e32382e302f32322d3232203d3e203532353837.roa (raw, json)
Hash identifier:          QkCov4dW4mV16qROCveAsn2j0+OUgF2BegrvBH0L1FA=
Subject key identifier:   90:7A:5F:AF:38:4C:D7:46:E3:27:38:1B:07:BE:40:A6:13:EA:2F:6B
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       79D1EFD1CE5C5158A92B4CC5D4B38E4B4C5ACC62
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32382e302f32322d3232203d3e203532353837.roa
Signing time:             Fri 06 Feb 2026 14:14:16 +0000
ROA not before:           Fri 06 Feb 2026 14:09:16 +0000
ROA not after:            Fri 05 Feb 2027 14:14:16 +0000
asID:                     52587
IP address blocks:        170.78.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d1:ef:d1:ce:5c:51:58:a9:2b:4c:c5:d4:b3:8e:4b:4c:5a:cc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Feb  6 14:09:16 2026 GMT
            Not After : Feb  5 14:14:16 2027 GMT
        Subject: CN=907A5FAF384CD746E327381B07BE40A613EA2F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:34:e4:aa:7f:43:af:fd:5d:cd:fe:7a:79:
                    83:81:b9:1c:bf:d0:9e:a8:2c:e3:88:15:4b:ce:30:
                    52:41:19:aa:cb:1b:0b:d4:12:79:77:c8:a3:ce:ab:
                    06:1c:1f:77:b6:2d:9f:ed:b6:93:02:5c:e8:86:93:
                    79:db:af:fb:5d:89:07:ed:79:3f:29:cf:db:03:48:
                    42:24:74:d5:e9:76:59:0d:11:f9:e8:86:9e:cc:84:
                    b6:1a:f4:be:de:29:db:de:f3:01:c9:a7:78:b7:cd:
                    e6:a9:5a:cf:f0:08:60:3d:6a:c3:e6:46:29:d7:41:
                    d0:44:9b:d8:aa:86:25:70:7c:64:24:1b:ad:30:6b:
                    83:fc:5d:10:8a:f0:f3:b8:ff:4c:44:76:24:fd:87:
                    b3:d8:4d:6e:21:5a:4e:b9:93:35:18:ab:17:98:b2:
                    03:d4:53:23:53:cf:1d:d2:94:51:cd:29:38:d4:8d:
                    c1:88:ad:6d:36:b7:9c:60:59:e3:3e:f2:09:0b:ff:
                    bc:4d:ab:d4:23:5c:bb:63:0f:24:df:aa:ab:84:ca:
                    da:51:26:20:9c:3e:8c:5d:c6:84:d6:5c:43:41:a6:
                    d1:f7:96:09:57:44:91:4c:85:fd:96:0d:2f:75:a7:
                    61:26:83:e7:06:8c:ee:46:b7:d0:8f:38:5c:65:b1:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7A:5F:AF:38:4C:D7:46:E3:27:38:1B:07:BE:40:A6:13:EA:2F:6B
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137302e37382e32382e302f32322d3232203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:23:dc:af:4e:71:ef:2f:68:d4:3b:b2:6d:96:5b:b4:85:a6:
         e4:3d:aa:ad:cb:d0:1b:7a:12:83:38:15:86:ab:2e:00:91:19:
         5e:c1:a4:17:7c:68:7e:47:28:d6:13:3b:49:1b:a5:09:2f:bc:
         8f:fe:04:fc:81:a7:8a:18:b6:0c:18:dd:94:15:c4:ad:81:16:
         74:b2:70:f4:e4:00:e1:d2:6e:66:6b:59:d5:8e:f3:a4:82:53:
         33:fe:ef:fb:e6:dd:2f:82:0d:a0:60:e0:14:78:5f:c6:32:c5:
         91:01:5d:24:a9:7b:f4:90:4f:05:7d:0e:3d:8b:c3:1e:f3:05:
         44:fa:33:ad:5b:ed:16:81:ed:20:1d:97:97:32:e9:cd:27:53:
         86:b5:4e:5b:12:65:c1:15:91:32:54:cd:33:67:63:2f:a2:24:
         c2:4a:99:21:c7:82:df:54:14:f9:5c:cd:32:8a:5e:25:7a:d9:
         d4:fa:d2:0f:4c:8e:2d:06:20:1b:e3:02:eb:67:03:b3:30:e2:
         a9:ec:cb:17:97:9c:05:4f:00:91:be:55:3c:68:f4:c0:dd:f2:
         49:6e:0b:c2:66:22:8e:1f:f4:a2:33:65:20:c1:c2:89:f0:9e:
         d8:31:ac:52:19:0e:ad:6f:fe:cc:c8:17:29:35:f3:41:5d:a5:
         49:30:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:33:50 2026 by rpki-client