Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
File:                     3137302e3233312e372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          aCOAWTbCI+CNUdpAi8WpZd1dXm2lmZvO6LwfHnNirAw=
Subject key identifier:   43:27:C0:01:49:39:B8:E8:EC:14:39:A2:E0:A5:53:E2:4D:F4:D8:3F
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       49B467502F725F9AB40D1B7D5C3A2FE6E3C69B77
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     52977
IP address blocks:        170.231.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 11:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b4:67:50:2f:72:5f:9a:b4:0d:1b:7d:5c:3a:2f:e6:e3:c6:9b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=4327C0014939B8E8EC1439A2E0A553E24DF4D83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:1f:7e:03:b0:23:48:21:bd:39:79:9e:69:
                    3a:8a:7c:bd:45:e2:31:4d:c1:ea:30:bd:3b:27:ae:
                    c6:cc:77:64:95:f1:d3:49:52:18:ad:c6:d4:ff:d7:
                    66:1b:97:18:4e:da:54:c3:02:78:60:0e:15:f9:39:
                    f5:d3:bb:97:de:7c:27:4a:32:cc:1a:c3:e8:4f:14:
                    6a:27:af:8d:13:f2:a3:f9:95:c3:87:e2:d0:26:cb:
                    ab:92:d0:47:51:c3:59:1d:9a:e9:34:ac:a8:97:44:
                    34:c7:f0:9d:12:6f:cb:d4:33:38:07:97:5e:20:39:
                    fa:db:1f:1c:2b:87:a8:10:e0:0a:3d:6c:01:18:ad:
                    bb:88:60:09:55:6e:c3:00:ed:bb:a6:eb:da:95:5f:
                    14:8e:b6:b0:65:a9:b0:82:4b:59:27:40:c5:49:a2:
                    17:f1:36:fb:97:7f:2e:05:ac:04:b9:a4:7b:f2:38:
                    e9:cc:ec:42:e9:00:1e:f0:57:d7:d7:7a:b2:2a:3c:
                    de:2f:ca:05:af:b6:4e:08:bf:33:49:4a:47:1f:ee:
                    33:7e:e6:8a:04:a8:93:4d:50:b6:65:33:27:ca:bc:
                    13:41:19:16:82:c0:57:23:00:7c:7f:e7:65:c7:8c:
                    e9:02:48:98:7b:98:b1:58:ba:8d:54:63:fe:c8:2b:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:C0:01:49:39:B8:E8:EC:14:39:A2:E0:A5:53:E2:4D:F4:D8:3F
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:93:a9:a3:bc:74:c7:4d:53:90:ba:ed:2f:88:d0:fc:c5:
         06:7b:a9:77:7d:a6:94:65:ee:14:51:62:c5:04:fc:67:5f:6d:
         32:53:0a:b7:62:be:2c:52:8e:11:bd:35:17:18:0e:b7:c8:43:
         45:a5:45:d4:6b:08:9c:d4:d0:de:6f:66:39:62:97:12:d1:3c:
         b0:bd:cd:d0:5a:5e:ff:82:6c:de:b3:3c:0a:22:ab:f2:fd:ae:
         e0:18:de:5b:c2:11:c5:84:27:59:dd:42:ee:32:d6:f6:e7:d4:
         45:5d:3b:d8:56:d8:24:d2:7e:11:a5:94:4e:f9:c3:fe:73:9f:
         e7:59:bd:22:3a:05:54:da:ba:17:5d:2f:f7:3c:b4:0b:5d:d9:
         26:a7:5b:22:04:2b:7e:10:1a:b5:1b:84:7a:38:94:d5:5c:86:
         f6:e3:58:3d:5e:ea:12:ed:dd:b3:92:0b:54:56:86:3d:24:59:
         18:25:7e:a4:d3:05:e2:67:13:4b:a6:83:1f:eb:bd:46:e7:c6:
         a0:e2:0b:20:d1:92:b5:bd:1e:a5:e9:4a:8b:bc:7c:14:da:c4:
         95:33:2b:57:ca:09:09:e0:35:b0:44:b6:7f:49:53:72:ef:17:
         5b:43:f5:48:3f:27:52:fe:8a:f1:65:c2:46:c7:80:d8:d3:a1:
         d8:ae:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:01:32 2026 by rpki-client