Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
File:                     3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          ELHlETihcWqCAwPowAsxt8TR/y+vFXU009Qvsh/V2lU=
Subject key identifier:   A2:DD:C9:98:FA:99:72:38:5F:6E:6F:B4:CF:D3:3B:34:77:C1:3D:DF
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       11CF6FE4CA9D93681F75D3C0C0A8FF7EBC637DCB
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa
Signing time:             Wed 04 Feb 2026 20:00:10 +0000
ROA not before:           Wed 04 Feb 2026 19:55:10 +0000
ROA not after:            Wed 03 Feb 2027 20:00:10 +0000
asID:                     264342
IP address blocks:        170.245.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cf:6f:e4:ca:9d:93:68:1f:75:d3:c0:c0:a8:ff:7e:bc:63:7d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Feb  4 19:55:10 2026 GMT
            Not After : Feb  3 20:00:10 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:b6:f4:f5:34:b4:30:ec:d6:71:01:08:dd:
                    7b:4f:13:a5:6e:90:7c:ae:f5:df:67:03:58:49:67:
                    6d:e5:48:03:c8:07:94:35:44:54:79:47:2d:e5:54:
                    f7:ff:7e:9c:eb:04:22:3e:8e:01:35:b8:f6:f7:fb:
                    19:ca:a8:8d:f3:c4:04:2b:4a:f1:b0:e7:0e:9d:18:
                    c9:6d:fc:33:2e:20:bb:e4:0a:95:f6:be:a4:71:6d:
                    53:41:7d:d6:71:c5:e6:cb:35:aa:ff:00:95:42:23:
                    c7:e1:21:a9:df:bd:60:93:f4:fb:87:60:fd:2b:53:
                    9e:d4:28:8c:4b:34:d5:c4:31:db:93:8b:03:94:e0:
                    ff:7c:f9:4f:de:bb:df:52:1a:14:9b:08:f2:82:a4:
                    b4:38:01:64:49:61:24:74:c9:3e:d6:77:29:03:d2:
                    fc:0b:8d:60:ff:74:fd:25:06:2c:22:35:52:ea:8d:
                    16:c9:70:d5:4a:ad:5f:84:ac:5f:55:74:87:09:2a:
                    b7:d2:9b:b2:e9:18:83:ec:02:c4:76:6b:85:e0:2c:
                    30:cf:14:a7:b0:da:e5:52:bd:e9:72:8b:7e:dc:d0:
                    56:3b:ea:1d:e1:77:87:56:f1:05:be:7b:3c:05:c3:
                    6e:a3:43:de:ba:4f:75:0f:e8:39:a2:6d:94:b8:cd:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DD:C9:98:FA:99:72:38:5F:6E:6F:B4:CF:D3:3B:34:77:C1:3D:DF
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3137302e3234352e3133362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:56:df:98:5a:45:ed:32:fc:c4:6f:75:9e:50:19:0b:c5:
         b2:f0:4b:38:f1:12:75:fc:04:cb:83:da:da:19:4f:d0:32:be:
         f9:3f:ae:9c:b0:01:5f:a7:34:4a:76:c4:21:c2:21:95:ce:a6:
         39:84:f0:a1:9b:10:39:db:21:ad:74:e9:8f:25:6e:0b:11:25:
         d5:08:dd:bb:61:aa:6a:09:2b:99:d8:72:02:ca:bd:08:4e:01:
         0e:98:d2:d1:8e:b5:14:9d:f7:1e:32:40:99:bc:d3:26:1d:8b:
         19:0d:c7:e9:4e:b8:f0:28:85:14:68:ae:ca:97:98:a9:f9:fe:
         05:e5:91:47:d9:ab:1a:56:6f:e3:fc:b6:9a:74:84:f7:da:06:
         5e:86:92:4e:a3:20:be:87:d5:1e:31:d9:6c:58:7f:3f:53:07:
         a3:77:f2:9c:d7:30:7d:54:33:b2:6c:fc:5f:e9:77:fe:9a:71:
         99:79:75:6d:d7:eb:b6:e2:2e:9c:40:c2:46:53:31:03:bc:fe:
         ca:3c:68:61:cb:34:7d:6a:36:27:cf:ed:26:09:5c:b3:1e:cb:
         8c:a1:f4:4d:be:24:d1:e4:29:e9:98:8e:3e:ed:ab:9c:15:5d:
         47:61:05:e1:1f:ca:70:7f:4f:66:05:ee:e9:57:8f:52:00:1c:
         1d:da:f6:9a
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUEc9v5Mqdk2gfddPAwKj/frxjfcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5REVEQjY2QzEzQTY4QUZDRDJCN0EzNzZEOUU4MTRD
OUYyMEJDRDAeFw0yNjAyMDQxOTU1MTBaFw0yNzAyMDMyMDAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVCREI2RjRGNTM0QjQzMEVD
RDY3MTAxMDhERDdCNEYxM0E1NkU5MDdDQUVGNURGNjcwMzU4NDk2NzZERTU0ODAz
QzgwNzk0MzU0NDU0Nzk0NzJERTU1NEY3RkY3RTlDRUIwNDIyM0U4RTAxMzVCOEY2
RjdGQjE5Q0FBODhERjNDNDA0MkI0QUYxQjBFNzBFOUQxOEM5NkRGQzMzMkUyMEJC
RTQwQTk1RjZCRUE0NzE2RDUzNDE3REQ2NzFDNUU2Q0IzNUFBRkYwMDk1NDIyM0M3
RTEyMUE5REZCRDYwOTNGNEZCODc2MEZEMkI1MzlFRDQyODhDNEIzNEQ1QzQzMURC
OTM4QjAzOTRFMEZGN0NGOTRGREVCQkRGNTIxQTE0OUIwOEYyODJBNEI0MzgwMTY0
NDk2MTI0NzRDOTNFRDY3NzI5MDNEMkZDMEI4RDYwRkY3NEZEMjUwNjJDMjIzNTUy
RUE4RDE2Qzk3MEQ1NEFBRDVGODRBQzVGNTU3NDg3MDkyQUI3RDI5QkIyRTkxODgz
RUMwMkM0NzY2Qjg1RTAyQzMwQ0YxNEE3QjBEQUU1NTJCREU5NzI4QjdFRENEMDU2
M0JFQTFERTE3Nzg3NTZGMTA1QkU3QjNDMDVDMzZFQTM0M0RFQkE0Rjc1MEZFODM5
QTI2RDk0QjhDREZCRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtb229PU0tDDs1nEBCN17TxOlbpB8rvXfZwNYSWdt5UgDyAeUNURU
eUct5VT3/36c6wQiPo4BNbj29/sZyqiN88QEK0rxsOcOnRjJbfwzLiC75AqV9r6k
cW1TQX3WccXmyzWq/wCVQiPH4SGp371gk/T7h2D9K1Oe1CiMSzTVxDHbk4sDlOD/
fPlP3rvfUhoUmwjygqS0OAFkSWEkdMk+1ncpA9L8C41g/3T9JQYsIjVS6o0WyXDV
Sq1fhKxfVXSHCSq30puy6RiD7ALEdmuF4CwwzxSnsNrlUr3pcot+3NBWO+od4XeH
VvEFvns8BcNuo0Peuk91D+g5om2UuM375wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKLdyZj6mXI4X25vtM/TOzR3wT3fMB8GA1UdIwQYMBaAFKyd7bZsE6aK/NK3o3bZ
6BTJ8gvNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F0eUZzOWtHN1pqdGJL
ZFV6V1VtdXNTRm5nOXlUSDFGd0NLZktrNW1XWExjLzEvQUM5REVEQjY2QzEzQTY4
QUZDRDJCN0EzNzZEOUU4MTRDOUYyMEJDRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BQzlERURCNjZDMTNBNjhBRkNEMkI3QTM3NkQ5RTgxNEM5RjIw
QkNELmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdHlGczlrRzdaanRiS2RVeldV
bXVzU0ZuZzl5VEgxRndDS2ZLazVtV1hMYy8xLzMxMzczMDJlMzIzNDM1MmUzMTMz
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzMzM0MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq9YgwDQYJKoZIhvcNAQELBQADggEBAED0Vt+YWkXtMvzEb3WeUBkLxbLwSzjx
EnX8BMuD2toZT9Ayvvk/rpywAV+nNEp2xCHCIZXOpjmE8KGbEDnbIa106Y8lbgsR
JdUI3bthqmoJK5nYcgLKvQhOAQ6Y0tGOtRSd9x4yQJm80yYdixkNx+lOuPAohRRo
rsqXmKn5/gXlkUfZqxpWb+P8tpp0hPfaBl6Gkk6jIL6H1R4x2WxYfz9TB6N38pzX
MH1UM7Js/F/pd/6acZl5dW3X67biLpxAwkZTMQO8/so8aGHLNH1qNifP7SYJXLMe
y4yh9E2+JNHkKemYjj7tq5wVXUdhBeEfynB/T2YF7ulXj1IAHB3a9po=
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:57:09 2026 by rpki-client