Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa (raw, json)
Hash identifier:          NfghlM1Tn1rgHybT8ZK1hsL/Go4y2zhmIuCmi5ZV9TM=
Subject key identifier:   7D:0B:6B:4A:3B:99:DF:D1:FB:ED:AD:D7:02:43:10:04:81:10:AD:B2
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       3FE410F2FBBBBF246828D2ECE35012C74AE40B05
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     266505
IP address blocks:        170.244.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e4:10:f2:fb:bb:bf:24:68:28:d2:ec:e3:50:12:c7:4a:e4:0b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=7D0B6B4A3B99DFD1FBEDADD7024310048110ADB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:03:c6:86:1f:1c:78:1f:c2:f0:43:b7:de:3e:
                    39:60:90:8f:8c:a6:ee:14:64:9b:cb:74:d7:d1:41:
                    43:7f:96:0f:a0:57:9a:25:60:d2:e5:55:b5:64:0c:
                    3c:c7:db:df:9e:cc:9b:11:11:63:d0:4e:03:45:b3:
                    15:f8:98:06:45:90:ae:56:36:5e:81:38:22:04:9d:
                    f9:15:b6:01:b7:dd:53:96:ed:17:af:04:5c:4c:83:
                    dd:bf:71:de:59:f7:46:8b:ff:bc:f4:22:21:c5:db:
                    e0:ac:bb:28:90:f2:6f:f3:ab:22:e6:42:33:3f:5b:
                    75:76:71:4c:24:a8:f3:83:a7:43:13:8a:de:cb:0b:
                    ab:9e:47:43:9c:c1:8f:cd:b3:18:a7:f1:7b:8f:a7:
                    ef:96:92:71:34:ca:11:74:58:15:7f:b4:2c:51:4b:
                    49:40:4d:6d:b6:02:da:7b:96:84:83:c9:87:e1:be:
                    e7:6c:7e:09:2c:da:b4:0b:2d:cb:87:ea:d1:f1:7b:
                    c4:74:47:60:51:2a:7c:ae:ac:a4:5d:a0:db:fa:28:
                    bd:8c:ad:b4:c0:76:af:dc:57:af:b1:02:79:95:b2:
                    72:86:42:ef:6c:d8:79:62:2e:1c:a4:7c:3f:b0:70:
                    76:9a:f4:f6:05:fc:27:14:e6:d5:cb:79:2d:e5:44:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0B:6B:4A:3B:99:DF:D1:FB:ED:AD:D7:02:43:10:04:81:10:AD:B2
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32332d3233203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:e0:17:64:8b:c9:ca:aa:d0:38:d1:dc:d3:0e:51:6a:5a:
         37:e5:e5:c4:93:c4:f1:34:14:d9:e6:57:d1:74:a3:ef:eb:f5:
         1b:23:5a:8c:b5:dc:a8:84:10:ed:62:00:72:89:33:5b:87:28:
         6f:89:0d:7a:69:57:03:e4:02:f3:f9:5d:c8:f2:73:7d:55:51:
         b6:33:08:76:b6:84:4c:1d:04:61:d6:7b:47:a3:33:7c:fb:7d:
         67:f8:73:48:93:18:23:57:6d:2f:a2:b9:e5:ee:0a:ec:35:1d:
         34:8d:7f:24:2a:63:b7:73:5f:17:c2:85:17:72:16:cc:84:87:
         29:42:9e:3a:3c:da:70:6d:36:f2:17:3d:18:ea:46:0f:4f:c2:
         05:54:a8:a1:61:0c:16:70:ff:54:96:df:80:1e:c4:55:b5:f4:
         87:db:f4:d2:bd:8a:e3:1b:3b:3f:1d:05:11:ca:76:20:68:b6:
         c0:f8:f7:c0:41:64:7b:54:b6:5b:fc:b5:35:c6:39:43:8b:e9:
         71:58:0b:49:bf:43:6b:8c:dc:17:2d:ff:16:79:f2:8b:8c:26:
         b8:2e:2c:77:f5:9e:40:69:eb:22:3a:7d:36:8c:39:31:0f:5b:
         7a:fa:b4:40:9f:7f:da:f6:81:0d:e3:12:9c:b7:52:21:f8:a2:
         be:02:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:33:19 2026 by rpki-client