Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa
File:                     3137302e3233392e37322e302f32322d3234203d3e203532373635.roa (raw, json)
Hash identifier:          sLD6XNNPqd//oVoRmutX/ZDxhGw2E1p92Z3HA0MLsrY=
Subject key identifier:   8A:F2:0F:A6:F1:A1:65:FF:9B:14:CB:69:1E:AF:58:BC:24:D2:F8:36
Certificate issuer:       /CN=A601CC15A099E546A3DCBD53AF497300DAA65598
Certificate serial:       2E48300EFAC04720CC09EF8B1EE3109980166C2F
Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa
Signing time:             Thu 05 Feb 2026 18:46:29 +0000
ROA not before:           Thu 05 Feb 2026 18:41:29 +0000
ROA not after:            Thu 04 Feb 2027 18:46:29 +0000
asID:                     52765
IP address blocks:        170.239.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:48:30:0e:fa:c0:47:20:cc:09:ef:8b:1e:e3:10:99:80:16:6c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598
        Validity
            Not Before: Feb  5 18:41:29 2026 GMT
            Not After : Feb  4 18:46:29 2027 GMT
        Subject: CN=8AF20FA6F1A165FF9B14CB691EAF58BC24D2F836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:15:a4:a1:7b:83:b4:83:2d:bd:99:82:ce:
                    fe:6d:e6:86:0c:39:cb:a9:de:7f:1e:6b:f0:06:30:
                    fb:fe:65:65:52:ef:b8:a1:52:e3:5d:b4:bd:2b:9e:
                    8a:29:9f:3b:fe:14:4e:30:6e:03:79:3e:8a:ca:91:
                    8f:28:ae:9f:35:9c:97:f6:c3:97:b5:44:62:a1:44:
                    2a:4a:fc:cd:55:85:7e:a5:11:25:78:28:ef:b6:67:
                    f8:10:bc:bb:57:d1:08:b4:b4:b8:51:97:70:19:3c:
                    ca:d0:9d:9b:15:b5:f4:68:07:54:74:b2:85:d7:43:
                    8d:5c:c8:d1:99:81:a5:e6:ee:c6:45:f1:a8:02:65:
                    0d:c4:5a:65:32:c6:2f:46:db:f7:89:43:3b:4a:73:
                    ff:25:b7:00:34:87:29:1c:74:1e:c4:e6:c9:24:26:
                    94:35:b2:52:e2:4e:78:b2:bd:99:46:24:3a:0d:23:
                    c7:35:b9:75:b9:55:59:36:03:86:c7:39:10:f4:99:
                    22:c4:9a:6a:59:5a:ae:be:6d:fe:f6:0f:06:1c:fb:
                    5a:99:66:5f:43:17:8c:3b:32:c2:1c:b1:b6:1e:b3:
                    d3:68:b1:63:47:21:a7:d1:8e:0c:ec:f2:dd:25:6e:
                    09:f2:6f:95:b5:4f:57:97:da:1a:c4:80:32:5d:81:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F2:0F:A6:F1:A1:65:FF:9B:14:CB:69:1E:AF:58:BC:24:D2:F8:36
            X509v3 Authority Key Identifier:
                keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3137302e3233392e37322e302f32322d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:c1:ca:30:04:6b:e9:f9:06:e5:f6:d8:a9:75:4a:96:d2:
         7e:56:75:a5:e1:c7:26:82:43:59:d0:1f:8e:05:00:84:40:df:
         28:21:64:06:e1:34:71:ff:66:97:81:75:3f:f0:ef:b5:2b:63:
         67:f2:ee:de:8a:9c:69:66:9a:07:00:61:b9:41:6c:8e:35:ba:
         7c:3e:b5:58:73:5a:f7:93:85:02:f8:01:62:72:77:d1:ae:a9:
         d9:d1:8e:62:10:1e:47:91:77:e7:7c:30:1b:e2:4d:d9:03:f5:
         49:d3:21:f3:ef:bb:d5:55:ff:49:e6:b3:eb:09:73:ec:78:87:
         92:e9:b7:ec:14:93:e2:1a:f7:02:a5:1b:24:25:2c:a2:9d:93:
         b6:9b:7a:51:92:2d:76:00:35:eb:2e:5b:85:f0:57:f1:3c:13:
         48:40:3c:62:27:31:31:ec:a9:79:90:6c:2e:c0:4f:b0:aa:d3:
         4f:53:dd:63:d4:ea:3f:b3:2a:fe:62:1d:29:32:07:02:c7:a7:
         bf:cc:5b:ce:ab:3b:a5:af:dd:b4:7d:b2:ae:7f:08:41:d2:8d:
         8f:43:49:74:f7:01:92:c7:de:7f:13:29:c9:4d:e5:1d:10:6e:
         68:b4:02:4f:54:e0:4f:1b:6f:f1:e9:7f:31:a9:64:fe:a8:a7:
         de:00:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:06:23 2026 by rpki-client