Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
File:                     3137392e34382e38382e302f32342d3234203d3e20323731313137.roa (raw, json)
Hash identifier:          yyNL5jevxL/UbnkH2Pkbq8RlvAPl/HpQ4RGLUFbzCww=
Subject key identifier:   D7:77:0C:CC:93:04:3D:69:C9:F2:46:53:1E:4E:05:C5:8F:56:24:E8
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       334A9F49EB4548C5ABC763A2691AE495D7D51A23
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa
Signing time:             Thu 05 Feb 2026 22:12:19 +0000
ROA not before:           Thu 05 Feb 2026 22:07:19 +0000
ROA not after:            Thu 04 Feb 2027 22:12:19 +0000
asID:                     271117
IP address blocks:        179.48.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 15:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4a:9f:49:eb:45:48:c5:ab:c7:63:a2:69:1a:e4:95:d7:d5:1a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Feb  5 22:07:19 2026 GMT
            Not After : Feb  4 22:12:19 2027 GMT
        Subject: CN=D7770CCC93043D69C9F246531E4E05C58F5624E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:af:6d:97:b4:2f:d3:d0:a3:e8:1b:5b:a4:
                    8b:01:19:9c:04:fc:ec:43:a7:0f:2e:0e:0c:46:cb:
                    00:b6:37:db:f5:17:c2:7a:5a:16:20:63:62:b7:6c:
                    9e:68:a1:f6:d8:a0:59:fb:74:d5:65:c5:a2:f6:3e:
                    1c:3d:ad:43:73:f4:a2:f0:2a:09:a9:97:7c:ec:cb:
                    8d:7c:69:e4:a7:ce:0b:f7:4b:a5:73:7f:11:61:6e:
                    ae:f2:15:cf:e3:ee:27:97:5a:92:c5:b1:66:74:db:
                    4a:34:0b:01:0d:90:e5:a7:b3:8e:2b:92:75:f3:e9:
                    06:d0:6e:fd:2e:ff:38:1e:3f:1d:71:08:97:e4:e8:
                    7a:3f:87:25:00:5d:e7:f2:3f:26:1b:c4:b8:67:e6:
                    1a:11:ae:39:28:a4:c0:5d:65:70:d8:3b:9f:c2:bd:
                    54:6a:7c:f3:54:ef:fd:dd:b4:f8:82:56:02:71:be:
                    80:07:0b:ea:a9:0c:40:99:c0:42:84:45:e8:8d:26:
                    08:5f:c4:5b:44:21:b1:38:db:7e:9a:9f:d3:22:fa:
                    a9:bf:dd:71:10:4f:c0:0e:1a:7a:44:e7:e3:1b:6d:
                    a2:ba:7e:73:5b:1a:31:8b:02:3a:c9:bf:df:cf:7a:
                    68:35:78:93:3a:a7:82:67:06:11:bf:0d:6e:3e:ac:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:0C:CC:93:04:3D:69:C9:F2:46:53:1E:4E:05:C5:8F:56:24:E8
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32342d3234203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:96:72:0c:6d:6b:81:0f:59:97:73:6e:f1:b5:96:e4:ed:
         b1:28:03:f9:48:7e:bb:c6:23:d0:ba:ba:87:07:2d:31:df:eb:
         ca:58:52:9c:4b:00:49:5a:cb:ae:9f:ed:70:d1:92:20:2c:00:
         2e:79:0b:b8:b6:6f:4b:c6:27:e2:6b:62:e5:18:1d:f5:6b:ea:
         cd:89:3b:2a:43:a5:48:82:1e:f1:92:db:76:a2:c6:35:7c:de:
         b6:f8:e3:45:3c:05:d7:91:45:76:d0:0a:b5:10:b7:41:24:ab:
         ac:53:95:96:3d:55:fa:70:75:f8:45:7d:10:e5:8c:4e:51:d8:
         49:bb:7b:59:59:20:d6:e5:f6:71:60:43:74:19:61:a0:09:70:
         e1:66:d9:78:5b:8a:d1:91:e0:f3:a8:ec:00:3d:2c:88:79:95:
         57:bb:0c:fb:23:7c:68:a5:a0:be:e5:7d:f9:0c:b3:90:c5:80:
         b1:2f:fb:60:25:b4:b5:62:ae:19:24:2b:3a:70:62:aa:87:8f:
         91:15:9c:94:20:85:7d:d0:03:19:25:fb:8f:6e:3c:e2:0a:56:
         1a:17:62:c9:94:41:3e:32:6a:ee:95:f8:b0:dd:87:5d:67:57:
         d8:20:ea:b3:55:68:d0:a4:b8:25:7f:7d:ef:23:8e:9e:ca:63:
         05:2c:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:22 2026 by rpki-client