Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
File:                     3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (raw, json)
Hash identifier:          DYGx/T5AnQgCjOey+UURzZWhb0H67r/Ia6mcIhr9I/8=
Subject key identifier:   9C:39:71:87:ED:6E:5B:ED:95:EB:F7:2C:DF:D9:B3:2C:E4:C6:36:F9
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       6B75E807FE12D4A59CE527061D495E7F95795B9A
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa
Signing time:             Thu 05 Feb 2026 04:01:06 +0000
ROA not before:           Thu 05 Feb 2026 03:56:06 +0000
ROA not after:            Thu 04 Feb 2027 04:01:06 +0000
asID:                     264992
IP address blocks:        170.84.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:75:e8:07:fe:12:d4:a5:9c:e5:27:06:1d:49:5e:7f:95:79:5b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Feb  5 03:56:06 2026 GMT
            Not After : Feb  4 04:01:06 2027 GMT
        Subject: CN=9C397187ED6E5BED95EBF72CDFD9B32CE4C636F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:ea:60:3a:ec:3c:c1:f0:1d:4d:a4:37:bc:
                    18:15:d5:c6:da:00:9c:c7:82:0c:cb:61:74:df:ff:
                    a2:12:d6:e3:4a:e1:14:39:bb:0f:9e:37:87:3f:a0:
                    7b:7b:1d:b7:c2:68:21:58:78:c3:9f:b7:f1:c1:0d:
                    ac:7b:e1:9c:12:88:07:2e:d8:7e:86:23:20:cb:70:
                    62:0c:30:5d:f1:8d:21:72:11:08:97:36:bf:f2:ac:
                    b1:8a:fb:f0:76:42:85:a7:a2:ff:d1:30:2f:e7:49:
                    79:a1:38:f6:1b:4d:45:50:93:3f:24:7e:46:10:62:
                    03:6e:77:28:50:42:f4:fe:ec:51:48:31:4f:a8:cf:
                    80:92:b6:7d:b0:4d:75:6f:66:a4:e9:23:94:0b:f2:
                    72:3a:1b:64:26:34:35:e4:b1:69:f6:4c:fb:c0:ea:
                    13:85:9c:0c:59:e1:09:f8:1b:30:c7:7e:ea:92:ad:
                    6a:67:ec:d1:95:b8:f8:af:5d:c6:92:6f:44:43:86:
                    a9:84:06:33:57:a0:28:a7:58:94:84:1d:d2:8f:67:
                    da:1e:98:5d:74:79:07:ab:87:be:a4:2e:89:ec:46:
                    fb:15:ed:58:fe:c1:a2:c3:4b:ea:a2:6c:20:7a:22:
                    83:92:1e:bf:34:74:fc:dc:a7:9b:6f:74:70:41:ac:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:39:71:87:ED:6E:5B:ED:95:EB:F7:2C:DF:D9:B3:2C:E4:C6:36:F9
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/3137302e38342e39362e302f32322d3234203d3e20323634393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:e3:c4:66:ef:4b:c6:00:bd:81:2c:a8:18:ba:07:84:93:63:
         2a:b9:30:62:b1:2b:2a:8f:65:7e:a1:4e:5a:c9:4c:9f:7c:61:
         44:33:96:87:35:e6:a0:11:72:13:d8:ed:71:29:6a:d2:25:6b:
         b5:82:06:66:26:01:82:0b:9d:41:a6:92:af:7a:c9:17:43:a8:
         bb:52:0c:25:1d:1a:e8:3c:0c:db:f8:75:f0:a6:37:6a:d2:f7:
         3c:ff:9d:0d:c3:07:f9:d2:1f:3e:e3:1a:eb:5d:b8:11:72:9b:
         d8:49:c7:dd:4f:0f:3e:de:44:d9:f5:25:6a:b7:8b:5c:ca:8c:
         86:c8:dc:4d:78:dc:67:79:d3:6b:14:0d:90:e1:aa:78:79:b3:
         26:32:4d:8f:72:08:6b:26:f6:a8:8f:c0:8f:df:bc:85:46:bb:
         a6:cd:df:69:97:73:e1:62:49:52:54:8c:aa:02:7c:ac:e0:fe:
         a0:e6:80:5e:75:dc:eb:a5:1d:5f:05:51:ad:ae:27:82:0f:de:
         ec:fd:d5:06:ae:0a:d1:e0:75:ed:f0:60:0f:af:b8:b8:2d:a1:
         ca:84:5a:6e:ee:e7:4f:97:08:ef:c0:e1:46:3a:ec:2f:a8:2b:
         55:91:bf:fb:8b:71:26:75:09:f2:3b:a0:d3:27:3c:2e:aa:0b:
         a7:8a:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:16 2026 by rpki-client