Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa
File:                     3137302e38302e34382e302f32322d3232203d3e20323636333734.roa (raw, json)
Hash identifier:          MeparfLp7Iz8B/Z72Qoqi/a4d3zvPz6n8crVlI+FX5U=
Subject key identifier:   A7:50:92:B0:A7:03:39:86:C6:A5:D8:EE:14:5C:2A:FC:7B:EF:8E:FB
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       5C20418213FF488C73BFA5215B848ACD0E386E01
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa
Signing time:             Wed 04 Feb 2026 22:43:23 +0000
ROA not before:           Wed 04 Feb 2026 22:38:23 +0000
ROA not after:            Wed 03 Feb 2027 22:43:23 +0000
asID:                     266374
IP address blocks:        170.80.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:20:41:82:13:ff:48:8c:73:bf:a5:21:5b:84:8a:cd:0e:38:6e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Feb  4 22:38:23 2026 GMT
            Not After : Feb  3 22:43:23 2027 GMT
        Subject: CN=A75092B0A7033986C6A5D8EE145C2AFC7BEF8EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:83:cc:f6:51:5d:0b:be:66:ad:dc:35:93:
                    90:e2:10:52:e3:0d:d7:85:21:88:7e:b4:54:9a:54:
                    63:bd:63:94:73:d9:97:c0:1b:21:26:11:78:b4:cb:
                    f3:c9:f1:6e:56:ae:c9:10:5e:2b:a6:9e:06:a9:32:
                    9e:27:f5:d1:89:f2:e9:73:9d:b6:63:e1:8c:48:e6:
                    38:35:8e:b6:ae:0c:9b:bf:8c:8e:86:e1:c8:ab:e0:
                    d0:3e:a2:d6:df:f5:e0:be:1b:52:10:23:1a:da:ab:
                    4c:22:53:04:71:60:40:f2:af:d1:be:af:c7:47:44:
                    bb:bc:7c:e8:54:ff:54:cf:e7:8f:ce:8c:85:c1:a1:
                    c0:63:c1:92:26:64:dd:76:41:da:5b:eb:1c:0b:21:
                    08:42:e5:7b:11:00:f5:63:50:c9:cb:4f:ab:2d:14:
                    23:21:a8:1a:b9:19:3c:09:66:5e:82:39:42:75:e9:
                    46:c1:ad:9c:dc:6d:d3:b9:ab:9a:99:95:7e:bd:30:
                    26:ba:47:00:29:64:b8:30:75:82:c1:c7:3c:1e:48:
                    88:fb:1a:d0:46:39:d3:fc:1f:be:3b:a6:2d:12:d6:
                    7c:b4:5f:ff:54:aa:3f:59:4d:b6:bf:68:11:0f:e3:
                    f2:25:68:7d:99:bc:16:21:1c:72:99:da:80:aa:30:
                    3e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:92:B0:A7:03:39:86:C6:A5:D8:EE:14:5C:2A:FC:7B:EF:8E:FB
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/3137302e38302e34382e302f32322d3232203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:db:ff:9f:70:6e:5b:80:5d:1e:18:70:3d:42:41:f6:6b:
         38:da:85:d2:ec:48:1a:18:5b:76:4b:0c:67:b8:07:5e:c0:79:
         a7:c8:64:c9:de:00:29:73:04:24:95:a5:b3:b8:57:ff:4a:71:
         df:79:9c:87:95:b6:43:28:4c:8f:ff:e4:58:2a:e6:74:27:f2:
         78:0e:c4:f6:79:38:69:7c:bb:c6:f6:21:37:35:6e:00:6f:b9:
         d0:15:5b:1e:6c:21:7f:07:70:5e:7e:53:23:ad:ed:e8:6b:ba:
         fc:af:40:24:68:f0:e9:f9:95:47:25:86:a4:db:bb:08:a0:58:
         bb:ab:a2:36:e5:62:40:1c:91:3f:74:19:bd:5e:c4:bc:4a:c1:
         35:9c:a0:b6:5f:a2:2a:b6:63:be:db:25:28:b9:59:13:b3:83:
         3d:f5:df:08:1c:8d:1b:12:d5:34:ad:8d:05:ca:a2:2c:c3:8e:
         2b:a7:50:d7:df:b8:43:7c:b8:14:eb:89:8f:2e:49:de:5b:5b:
         be:b5:e1:1e:b2:3e:4f:03:f7:65:de:c8:e7:3c:a4:cc:35:f7:
         84:11:2b:51:9b:38:ed:fc:67:59:0e:3e:1a:12:e3:38:5f:30:
         5e:8e:4f:c0:16:c0:87:6b:25:b7:1b:3a:94:77:6b:8d:3e:2e:
         62:fb:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:48:25 2026 by rpki-client