Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
File:                     3137302e3233312e362e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          ayb889irdzD6d2YfayCBDymD0K7QJ9vRKgbHmLIvrpg=
Subject key identifier:   7A:2C:FF:62:0B:8A:9A:6F:F8:7B:83:19:B2:65:5F:4C:1E:30:01:11
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       64C2B1D0F2768CD1D65279B88D9C75539B568FC8
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:07 +0000
ROA not before:           Wed 04 Feb 2026 19:55:07 +0000
ROA not after:            Wed 03 Feb 2027 20:00:07 +0000
asID:                     52977
IP address blocks:        170.231.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c2:b1:d0:f2:76:8c:d1:d6:52:79:b8:8d:9c:75:53:9b:56:8f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:07 2026 GMT
            Not After : Feb  3 20:00:07 2027 GMT
        Subject: CN=7A2CFF620B8A9A6FF87B8319B2655F4C1E300111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:e3:40:3d:73:04:24:f8:c2:64:4c:2f:76:
                    50:b3:80:71:89:5d:e9:18:91:8c:57:68:d2:9f:59:
                    0b:07:b0:67:5d:ad:84:17:61:b9:ce:9a:7d:04:92:
                    a0:ae:b3:1c:3d:8a:88:8a:58:9d:91:04:9e:41:e8:
                    ab:c5:8e:c7:05:8a:fe:81:e9:5f:e6:0e:ea:ac:4e:
                    6d:5d:81:27:75:55:91:e2:34:e3:81:f0:0b:f6:82:
                    9d:58:0f:8d:b0:ae:9c:c9:9f:e4:e4:2e:3d:60:41:
                    aa:e2:3d:6e:82:ff:c4:ad:f7:aa:40:dd:f1:1c:c1:
                    40:9a:52:ce:59:8d:b7:17:a2:30:27:05:0b:6b:13:
                    09:34:bf:74:a9:d0:bf:ed:3d:5f:02:14:58:99:11:
                    83:db:d0:42:85:53:88:f8:e6:b1:a2:a5:ad:22:53:
                    d1:07:38:55:0f:69:c4:18:e5:67:0f:32:32:aa:c6:
                    d8:35:1b:18:38:a7:81:9e:ea:72:ea:4a:cd:68:be:
                    82:60:3f:54:3d:9b:c5:82:97:b8:ad:c9:1e:fd:b3:
                    b6:5a:69:dc:2b:32:ed:57:d6:56:29:ab:f1:bd:08:
                    77:eb:5b:55:4e:d3:9e:2b:2c:65:6b:ac:56:3f:cd:
                    95:28:70:b9:00:27:45:3c:48:ae:38:7d:2f:ef:60:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2C:FF:62:0B:8A:9A:6F:F8:7B:83:19:B2:65:5F:4C:1E:30:01:11
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:ae:e2:1e:47:79:c4:18:ba:d5:19:a3:9f:73:d9:85:6d:85:
         d0:63:04:be:fd:f2:9a:22:93:c8:c2:28:f0:05:2d:30:bf:bc:
         02:c5:d9:7f:86:25:a6:40:d5:67:a5:cc:16:fc:39:3c:4c:4f:
         9b:c5:39:13:8d:52:d8:f7:b8:44:30:c4:fe:97:75:ca:73:ea:
         bd:27:b0:0f:6e:08:fb:d6:65:3e:ce:e8:3d:f2:84:1a:7a:d8:
         bc:09:26:b7:b1:03:5a:6f:d8:26:62:7e:e0:77:61:ca:f8:ad:
         50:0b:e9:73:88:30:a1:70:89:1b:41:46:2e:4c:c4:c1:4c:23:
         bb:77:a5:a5:e5:55:e5:d9:44:9c:e9:d7:27:87:28:96:b5:20:
         48:11:f5:37:22:77:3c:39:67:90:29:3b:e8:c2:44:ef:a2:de:
         3d:7e:ca:f4:9f:89:1f:e5:b4:9b:11:20:f2:07:f0:c2:92:a2:
         31:84:25:97:e3:14:3f:94:b7:88:30:17:c0:08:0b:96:41:f5:
         93:47:fd:bf:a7:4c:1a:e8:d8:be:66:39:54:43:a9:12:13:4d:
         42:5f:0d:68:59:1b:e2:b6:5c:1d:29:4f:7d:e4:de:fe:d1:16:
         fe:6a:ef:c1:7b:ba:2e:4b:d2:d6:a9:a8:c8:45:77:9a:6f:a0:
         a8:0f:87:c6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZMKx0PJ2jNHWUnm4jZx1U5tWj8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNjAyMDQxOTU1MDdaFw0yNzAyMDMyMDAwMDdaMDMxMTAvBgNV
BAMTKDdBMkNGRjYyMEI4QTlBNkZGODdCODMxOUIyNjU1RjRDMUUzMDAxMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCv+NAPXMEJPjCZEwvdlCzgHGJ
XekYkYxXaNKfWQsHsGddrYQXYbnOmn0EkqCusxw9ioiKWJ2RBJ5B6KvFjscFiv6B
6V/mDuqsTm1dgSd1VZHiNOOB8Av2gp1YD42wrpzJn+TkLj1gQariPW6C/8St96pA
3fEcwUCaUs5ZjbcXojAnBQtrEwk0v3Sp0L/tPV8CFFiZEYPb0EKFU4j45rGipa0i
U9EHOFUPacQY5WcPMjKqxtg1Gxg4p4Ge6nLqSs1ovoJgP1Q9m8WCl7ityR79s7Za
adwrMu1X1lYpq/G9CHfrW1VO054rLGVrrFY/zZUocLkAJ0U8SK44fS/vYNvFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeiz/YguKmm/4e4MZsmVfTB4wAREwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNzMwMmUzMjMzMzEyZTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAarnBjANBgkqhkiG9w0BAQsFAAOCAQEAzK7iHkd5xBi6
1Rmjn3PZhW2F0GMEvv3ymiKTyMIo8AUtML+8AsXZf4YlpkDVZ6XMFvw5PExPm8U5
E41S2Pe4RDDE/pd1ynPqvSewD24I+9ZlPs7oPfKEGnrYvAkmt7EDWm/YJmJ+4Hdh
yvitUAvpc4gwoXCJG0FGLkzEwUwju3elpeVV5dlEnOnXJ4colrUgSBH1NyJ3PDln
kCk76MJE76LePX7K9J+JH+W0mxEg8gfwwpKiMYQll+MUP5S3iDAXwAgLlkH1k0f9
v6dMGujYvmY5VEOpEhNNQl8NaFkb4rZcHSlPfeTe/tEW/mrvwXu6LkvS1qmoyEV3
mm+gqA+Hxg==
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:49:05 2026 by rpki-client