Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e362e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          snitXCuw727bcaUhb6QyQ/K0FBg1L+TAyo2FX3/BuLc=
Subject key identifier:   05:77:2B:44:09:8A:01:55:C4:E7:EC:96:6C:0A:4C:F4:44:72:C1:68
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       1D9ACE8066966D3C07643E513C90D47170024264
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:03 +0000
ROA not before:           Wed 04 Feb 2026 19:55:03 +0000
ROA not after:            Wed 03 Feb 2027 20:00:03 +0000
asID:                     52977
IP address blocks:        170.231.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9a:ce:80:66:96:6d:3c:07:64:3e:51:3c:90:d4:71:70:02:42:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:03 2026 GMT
            Not After : Feb  3 20:00:03 2027 GMT
        Subject: CN=05772B44098A0155C4E7EC966C0A4CF44472C168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:d4:fc:d8:f3:81:b4:a2:b4:6e:b5:ce:25:
                    2c:5f:76:47:3a:9a:64:12:27:85:0b:a1:92:03:0e:
                    f3:ba:4c:0b:f9:2a:50:1a:d7:33:54:60:3d:38:6f:
                    3a:4e:dc:99:fd:68:d3:3f:ae:42:fe:95:be:07:97:
                    bb:fa:87:2b:93:a9:a7:57:a8:e8:ca:d2:75:3e:f7:
                    e6:dc:c5:0e:ea:9c:57:ce:71:42:99:e6:48:82:fc:
                    1b:61:10:7b:de:9e:ef:de:dd:cf:db:9a:10:43:a6:
                    5e:09:0f:4a:6f:74:d6:04:e9:45:17:49:52:f7:9d:
                    1c:03:42:93:97:04:4c:eb:18:1b:08:fc:1d:00:65:
                    b7:fe:9a:81:ee:95:20:fd:90:11:dd:6b:0e:aa:11:
                    dd:2f:36:25:0a:49:65:e5:d8:e1:1f:0a:c9:5f:da:
                    e2:01:5d:02:65:f6:d3:30:44:97:15:77:94:6c:31:
                    8c:ac:a2:70:ba:10:ff:02:54:8d:4c:be:d7:45:4c:
                    9f:8d:e0:0b:65:c6:08:21:45:01:3e:17:b7:6f:80:
                    f2:20:c2:eb:c0:f3:2a:06:e6:a7:c2:e2:68:18:e9:
                    de:66:1e:c0:5d:e0:fe:af:a1:5a:2f:fc:23:0f:6a:
                    ea:f9:74:d1:28:4d:de:0d:33:f4:08:16:f1:2a:a1:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:77:2B:44:09:8A:01:55:C4:E7:EC:96:6C:0A:4C:F4:44:72:C1:68
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:73:c7:89:09:03:0d:39:98:22:b9:62:62:3c:f6:68:62:34:
         73:ea:73:c7:40:62:e3:6e:6a:a7:f0:0d:1d:d0:8f:59:23:bf:
         48:9f:ef:58:f6:4c:cc:3f:a2:b7:5a:a8:f6:ee:1d:bf:b0:29:
         d3:33:0e:98:ad:8e:90:17:06:f0:5a:37:1e:f7:b1:6f:76:9a:
         58:dd:4f:91:4f:8c:90:ab:48:a0:f6:6c:63:32:ee:d6:28:af:
         ce:be:c6:bf:fc:45:46:5d:ee:75:7a:2e:64:e4:e2:82:ba:db:
         8a:79:e8:11:12:3b:69:03:29:3a:06:5b:a9:cc:28:7b:9b:f8:
         c8:13:4e:d4:48:46:b1:cb:95:b4:d5:d5:fa:14:53:63:66:d0:
         cf:11:dc:42:a6:1f:c8:c3:98:a1:ca:e0:cf:a9:c3:09:ae:c5:
         43:58:99:bd:70:ac:69:e8:07:61:70:ce:47:bb:b4:62:9b:0a:
         cb:82:f3:3a:83:a0:c5:0c:51:71:b6:4d:b6:6f:93:ff:9e:9b:
         e4:3e:c4:b9:87:07:f5:bc:76:b2:75:76:33:0f:bf:e7:1c:b3:
         05:41:4a:f3:a8:eb:f1:a3:25:b5:04:35:93:57:1e:29:bd:d7:
         66:a3:96:03:8b:82:c2:e6:92:b9:fd:c0:24:01:fd:5b:f1:1f:
         a0:9d:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:00:26 2026 by rpki-client