Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32322d3232203d3e203532393737.roa
File:                     3137302e3233312e342e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          HRhQZ6+2h/Ch0nwqq5+MTuXDD8jAntZUU2uW9vVn3ZE=
Subject key identifier:   60:8F:DF:4C:05:1C:F0:B9:1D:2E:A9:20:FA:11:29:FA:57:F9:EF:FA
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       0E6B793DB383C7E16536A909D30189DA35065FD9
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32322d3232203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:05 +0000
ROA not before:           Wed 04 Feb 2026 19:55:05 +0000
ROA not after:            Wed 03 Feb 2027 20:00:05 +0000
asID:                     52977
IP address blocks:        170.231.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6b:79:3d:b3:83:c7:e1:65:36:a9:09:d3:01:89:da:35:06:5f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:05 2026 GMT
            Not After : Feb  3 20:00:05 2027 GMT
        Subject: CN=608FDF4C051CF0B91D2EA920FA1129FA57F9EFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:57:d1:16:ee:c8:9b:a5:78:8c:c4:85:70:
                    27:99:fe:d7:14:73:34:b1:7d:0e:11:82:55:e1:5c:
                    48:7c:7d:32:a9:31:70:97:14:96:e1:3e:02:49:77:
                    c6:0e:28:97:45:2b:4f:6e:94:d9:47:1e:93:00:79:
                    bf:82:c7:fc:c6:f3:af:e9:09:f3:d2:40:02:83:8a:
                    29:49:7b:c3:f0:3d:11:c4:17:e6:98:16:d3:ec:89:
                    04:f0:6d:45:ca:13:38:05:85:0c:f1:7e:2a:32:25:
                    14:bc:f1:ca:35:70:4c:e2:47:fb:72:11:36:86:2e:
                    68:a0:c0:f4:25:96:c9:f8:63:ad:16:a8:f2:c8:dc:
                    87:e8:69:50:25:e4:c5:06:5e:fd:c7:de:a4:73:7a:
                    26:86:a1:75:00:de:36:1c:e7:67:02:8c:fc:23:ef:
                    f8:e9:10:b8:f6:de:53:df:06:17:b2:44:49:4a:9b:
                    b7:11:ce:aa:f5:1c:72:68:2d:02:03:34:e1:37:81:
                    33:90:07:57:cb:39:8d:81:7f:5a:6d:80:0c:59:17:
                    46:d8:c1:33:6c:71:8b:55:6a:11:eb:bf:6c:e5:75:
                    7b:2b:be:77:f6:4a:8a:e0:a7:26:2b:da:04:c3:a0:
                    41:04:d3:d7:db:09:22:cd:6f:41:b2:70:ac:7d:45:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:DF:4C:05:1C:F0:B9:1D:2E:A9:20:FA:11:29:FA:57:F9:EF:FA
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:3b:b0:f2:f8:db:cb:aa:6e:fd:5d:88:5c:e1:df:b6:f6:
         a5:c0:bb:e8:da:74:ba:29:e9:d5:4b:74:f2:be:33:9a:b8:fd:
         cf:1a:6f:5d:aa:f9:29:97:bf:e9:92:d2:d7:13:af:83:14:24:
         0c:39:f9:ca:0d:ac:b9:4d:89:a1:1a:80:09:5a:27:7e:61:fa:
         80:f6:64:ef:10:c0:c2:6d:b5:72:6b:24:79:79:b2:58:3a:d2:
         4c:85:c4:6f:6b:cb:a9:d6:9e:87:ee:fb:4b:f5:d0:7c:a1:fb:
         c1:a8:24:86:71:cf:27:e2:93:c8:14:57:af:d1:2c:c3:ba:e6:
         d5:ef:f9:46:39:45:93:05:ca:42:47:06:7e:0b:3e:18:b5:de:
         1f:fe:2f:1a:c3:ce:9c:a9:95:6f:ab:c9:84:60:6b:27:cb:5d:
         e8:cf:eb:c0:60:8d:80:d4:9f:e3:92:18:95:68:2a:97:b9:3f:
         28:67:54:e3:a7:e3:27:11:0a:64:b8:8e:ff:9d:da:8a:6e:3f:
         35:e6:ae:7a:9e:04:57:f5:f0:66:a2:3d:e5:f8:9a:b9:8a:4f:
         7d:87:61:a4:cd:60:20:06:1b:9a:df:42:2c:c6:e7:7d:c2:cd:
         3b:13:89:77:6c:d7:c6:0d:b8:ba:f3:ee:f9:a6:78:ea:d8:00:
         c2:f3:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:52:44 2026 by rpki-client