Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa
File:                     3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa (raw, json)
Hash identifier:          oVjkWrrksQDTmQnIhFyWwnTS+0QPnAfpN9MqC2NdxiI=
Subject key identifier:   47:C1:8E:07:94:7C:A7:7D:C1:3A:B6:69:72:15:C1:73:A0:8B:7A:72
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       6FA994AD4637EB6D121D68CB42BEBC5938AA193A
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     266505
IP address blocks:        170.244.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a9:94:ad:46:37:eb:6d:12:1d:68:cb:42:be:bc:59:38:aa:19:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=47C18E07947CA77DC13AB6697215C173A08B7A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:e0:fd:20:98:b1:63:4e:f0:45:0f:d6:80:
                    a8:56:59:4b:09:74:28:a1:e4:56:6b:20:7d:14:3b:
                    79:38:ed:99:21:26:11:25:06:9b:8d:43:14:1b:5b:
                    40:55:e7:ec:94:2b:e0:a0:78:94:6e:e4:76:95:2d:
                    10:f9:42:4a:e1:8d:b2:fd:35:61:9b:e8:29:5a:09:
                    cf:f5:ef:3e:43:9c:02:e0:c4:6f:e5:3d:d5:8c:de:
                    20:63:79:b9:3e:a0:e4:c2:36:ac:81:6e:9e:43:ff:
                    b2:ae:3d:89:17:37:14:b3:fb:2a:0d:37:3b:bc:76:
                    01:a7:a8:94:38:d3:63:a5:f8:9b:9f:01:27:2c:7c:
                    35:f0:34:2b:64:69:47:c2:b9:66:2d:fc:20:dc:d1:
                    2d:08:24:bf:ab:db:7a:bc:c8:7a:79:aa:e0:d3:81:
                    98:53:eb:be:ff:10:84:d9:ba:7c:ec:d5:a2:ea:e5:
                    e2:4b:aa:54:3b:e0:7a:43:82:35:f9:89:c4:ee:db:
                    69:be:03:e9:ff:bb:9e:a6:df:1a:75:99:a6:e7:b2:
                    34:44:f2:80:18:66:75:3e:36:06:ac:7d:89:2a:58:
                    c8:cc:39:ac:4f:1a:a4:82:03:88:8b:f7:12:c7:86:
                    4d:0d:07:12:6e:82:ce:d6:38:99:38:c6:56:88:f5:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:8E:07:94:7C:A7:7D:C1:3A:B6:69:72:15:C1:73:A0:8B:7A:72
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37392e302f32342d3234203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:ac:e9:30:54:77:a1:7a:fe:19:d0:72:23:54:ef:36:dc:
         4e:c3:0c:10:19:16:54:a4:d3:fa:bb:7f:26:3f:e8:78:0e:a1:
         fd:3a:59:b5:24:5c:0c:33:b7:52:ff:4e:6d:f4:9d:e8:29:a6:
         30:4a:aa:92:52:90:b8:8f:15:43:e6:71:bc:0e:e8:f7:be:6b:
         06:0e:f4:4f:3b:99:11:37:ef:52:20:da:e5:dc:b9:90:0b:ad:
         56:b8:64:9b:4b:4e:39:b1:37:58:5a:c8:76:c0:2b:ed:02:e6:
         28:5c:f4:01:33:4b:38:db:60:19:68:24:d2:9d:8c:0d:d1:08:
         2e:62:8c:2d:5b:65:ab:a9:9c:22:18:ba:f8:14:e2:e5:2b:1d:
         94:d9:87:41:19:ca:1f:38:5c:64:a9:a7:59:69:0d:ff:5d:36:
         d9:c6:7d:8e:52:28:8a:ac:c4:cd:06:75:18:d8:3a:23:3d:02:
         21:d0:7b:be:8b:99:34:78:84:3d:fb:93:28:8e:55:bc:cb:33:
         92:9e:12:82:03:d2:13:09:28:6e:ca:ef:49:ca:9a:7e:f5:de:
         cc:77:02:ca:72:16:5f:32:c4:87:2a:04:48:a3:47:f4:cc:43:
         1d:50:4b:8c:14:66:e9:1f:b1:2d:ef:0f:e8:4d:b6:ff:9c:2a:
         0c:89:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:17 2026 by rpki-client