Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/3137302e38332e32342e302f32322d3234203d3e20323636343531.roa
File:                     3137302e38332e32342e302f32322d3234203d3e20323636343531.roa (raw, json)
Hash identifier:          6wG+hnQGAQFblA9gl7BpqGASsA5KrWgLw7YbddbrjOE=
Subject key identifier:   FB:FE:2E:1E:58:AD:30:6C:97:68:B8:2A:59:83:6C:E6:23:10:2C:27
Certificate issuer:       /CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
Certificate serial:       6F45B6BA67CCDC92E62004E94A1404D80734C6AE
Authority key identifier: 6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/3137302e38332e32342e302f32322d3234203d3e20323636343531.roa
Signing time:             Fri 06 Feb 2026 05:29:35 +0000
ROA not before:           Fri 06 Feb 2026 05:24:35 +0000
ROA not after:            Fri 05 Feb 2027 05:29:35 +0000
asID:                     266451
IP address blocks:        170.83.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.crl
                          rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:45:b6:ba:67:cc:dc:92:e6:20:04:e9:4a:14:04:d8:07:34:c6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3906AE2C9E3B963B29460ABD7185E79BB96640
        Validity
            Not Before: Feb  6 05:24:35 2026 GMT
            Not After : Feb  5 05:29:35 2027 GMT
        Subject: CN=FBFE2E1E58AD306C9768B82A59836CE623102C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:cb:22:2f:59:16:59:0b:bc:87:82:ec:ad:
                    67:bb:05:7a:26:6a:3b:30:98:7b:0c:18:22:80:95:
                    68:1f:8f:40:72:ff:18:38:1f:4d:e6:91:ef:08:fb:
                    de:39:6c:06:04:0d:ff:ec:8f:8c:25:24:ad:69:3d:
                    5d:87:2b:72:df:66:d5:b1:db:08:2c:86:14:89:98:
                    f0:9f:90:e7:6d:b3:f6:7b:f3:16:f1:0a:16:c6:82:
                    26:04:b4:b5:23:31:4d:c7:ea:22:ac:95:af:0d:3b:
                    7c:59:6f:3e:43:44:b5:d8:12:51:d2:40:1a:a1:ad:
                    bb:91:c8:ed:55:ef:d5:03:d8:b6:eb:47:8e:87:13:
                    74:73:c9:e5:5f:4b:12:c4:4c:01:a4:2f:03:9e:91:
                    da:f5:b3:50:f6:08:fd:10:56:b7:16:93:e2:84:52:
                    a2:ff:9e:70:fc:55:38:e4:5b:c1:30:bf:54:11:b5:
                    7c:33:6f:7e:ad:f4:ff:88:97:f7:c7:1b:35:ca:71:
                    0c:32:a9:40:28:11:0a:25:14:78:c1:3a:31:d6:d5:
                    73:58:93:3d:c0:5d:3a:49:0f:ba:3e:d4:53:a6:5c:
                    ea:e8:bb:61:af:03:c7:c9:fd:86:ee:9b:09:33:b6:
                    de:ee:9e:3d:5f:ea:51:66:c7:f7:8a:7a:ec:e5:c4:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FE:2E:1E:58:AD:30:6C:97:68:B8:2A:59:83:6C:E6:23:10:2C:27
            X509v3 Authority Key Identifier:
                keyid:6B:39:06:AE:2C:9E:3B:96:3B:29:46:0A:BD:71:85:E7:9B:B9:66:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B3906AE2C9E3B963B29460ABD7185E79BB96640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AX7UD3Y8rRAG7dzG47CaHiUShNgBfKf2EH24iXL3v3bc/1/3137302e38332e32342e302f32322d3234203d3e20323636343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:51:0e:da:15:15:4f:29:79:0d:35:11:5d:f4:26:d0:d8:
         22:08:15:d0:30:19:7c:9a:40:ca:f3:71:6c:89:6b:75:ce:8c:
         91:28:5c:22:1f:b5:15:39:ff:d1:0b:ee:4c:d9:79:7c:e1:e2:
         23:00:3a:8c:9c:2b:a4:d1:f2:a3:33:63:b4:eb:23:f9:c1:b9:
         33:1d:60:48:f6:c6:96:f0:9f:8d:96:53:81:43:31:fb:a0:46:
         d8:42:96:3c:2b:34:9c:4f:91:53:84:e8:72:fd:85:a3:bb:ad:
         2b:b3:48:a2:fc:db:98:f0:01:bd:8c:d0:2f:ff:08:56:8a:75:
         9b:02:b6:96:72:a0:76:4a:4e:30:f2:0d:17:16:6c:c0:e9:51:
         42:ae:74:7b:3c:d4:00:6e:e7:89:48:70:49:d7:ec:fa:3f:ad:
         59:98:7b:b3:03:4d:49:df:69:b8:c8:44:6b:8f:27:5b:47:3a:
         d8:d6:05:08:54:0c:1d:7c:f3:d0:37:60:24:a0:83:41:42:a2:
         9e:8d:b0:74:0f:72:c9:cd:e8:93:f2:d3:c3:92:10:6c:1a:5a:
         b6:ab:cc:3f:f1:c4:2a:1b:44:9f:79:03:7e:e7:b0:15:1c:57:
         8f:10:a0:9a:4d:35:af:14:b7:49:bc:1a:8a:25:12:ab:a0:04:
         87:e8:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:47:30 2026 by rpki-client