Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/3137302e3234372e3138302e302f32322d3234203d3e20323634393732.roa
File:                     3137302e3234372e3138302e302f32322d3234203d3e20323634393732.roa (raw, json)
Hash identifier:          HBQ5FDqj1642iaZvy/bOOaEpr/g1ECk1eiM93BSKSwU=
Subject key identifier:   37:B6:BF:A4:FF:79:1B:85:4F:B7:7C:F9:26:AF:C8:B6:19:E9:0C:B6
Certificate issuer:       /CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
Certificate serial:       6AA220EFBFE5B67CF51D179E1285995F89AB63AB
Authority key identifier: 66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/3137302e3234372e3138302e302f32322d3234203d3e20323634393732.roa
Signing time:             Thu 05 Feb 2026 10:32:09 +0000
ROA not before:           Thu 05 Feb 2026 10:27:09 +0000
ROA not after:            Thu 04 Feb 2027 10:32:09 +0000
asID:                     264972
IP address blocks:        170.247.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl
                          rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:16:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a2:20:ef:bf:e5:b6:7c:f5:1d:17:9e:12:85:99:5f:89:ab:63:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663644AD50CB8341863619DDB9543F4B9E6AAA1C
        Validity
            Not Before: Feb  5 10:27:09 2026 GMT
            Not After : Feb  4 10:32:09 2027 GMT
        Subject: CN=37B6BFA4FF791B854FB77CF926AFC8B619E90CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:18:e6:55:62:f4:40:79:10:54:3e:73:58:
                    c2:de:b2:28:6c:41:23:5d:cb:8b:e5:69:cd:b1:b5:
                    44:54:2c:61:63:8c:3c:2c:b7:01:f7:3b:69:50:c2:
                    6d:39:e8:10:5a:83:14:66:b3:c6:94:bd:e5:b4:26:
                    d8:08:e3:69:97:d4:7a:c8:cf:3e:34:42:70:0c:e5:
                    2d:04:24:e1:15:e6:6d:19:57:25:cd:09:da:a4:ae:
                    51:1a:d8:8f:0c:2c:b1:1f:b8:7b:5f:9c:98:55:cd:
                    06:7d:e3:bd:07:16:e8:d0:d8:97:1b:86:ab:e7:f3:
                    ad:f6:41:68:bd:c4:7a:82:43:bf:cf:dc:9c:b9:cb:
                    c7:6c:9f:c7:8d:42:dc:38:0b:b1:6a:99:f8:f0:b9:
                    f4:7e:ab:7b:2b:6c:39:e1:ea:61:75:e2:08:b5:dd:
                    4b:22:fc:14:80:39:94:69:2d:f7:9e:fc:8e:77:15:
                    15:ee:dd:c4:56:e9:07:47:5c:a2:b2:01:a5:db:c2:
                    c2:e5:23:59:25:39:46:1a:ed:c3:69:8f:ba:67:4c:
                    17:f1:24:78:6e:39:5d:1d:a6:19:e5:ef:b6:89:5b:
                    2e:30:a0:7c:8d:c8:84:da:c5:ed:db:14:10:a8:b6:
                    74:47:d8:84:ce:aa:a0:58:07:d1:c0:2b:f7:b2:96:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:BF:A4:FF:79:1B:85:4F:B7:7C:F9:26:AF:C8:B6:19:E9:0C:B6
            X509v3 Authority Key Identifier:
                keyid:66:36:44:AD:50:CB:83:41:86:36:19:DD:B9:54:3F:4B:9E:6A:AA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/663644AD50CB8341863619DDB9543F4B9E6AAA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BV29jYfrY3Hia1aUkoQEf5hZpceLHC7RtJzf2oUf9qe2/1/3137302e3234372e3138302e302f32322d3234203d3e20323634393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:fe:c1:db:ac:ee:dd:fc:89:70:e8:5a:52:8a:51:19:ed:
         ce:5c:d8:23:4b:06:49:d6:d5:75:8f:4e:7e:fa:29:3b:cc:63:
         92:4b:21:1b:9f:b1:75:c4:fc:21:2b:5b:a8:70:fc:3e:8e:89:
         31:f7:bb:5e:9c:fc:3d:e3:30:f5:5f:14:56:d7:71:e5:a4:17:
         bf:eb:d5:a6:6d:fc:62:d2:38:8b:43:d8:04:0e:a9:69:a7:a8:
         9b:71:ee:89:74:04:69:15:9b:59:3e:a7:42:58:81:41:ca:94:
         44:51:92:6e:e4:68:53:56:f0:9e:23:79:4d:9c:a4:65:03:bb:
         4d:68:5d:a9:e4:c9:cd:69:ab:7d:1c:d7:c6:d8:c3:a6:5d:da:
         c2:a9:b8:db:e0:b0:85:1e:be:71:5c:df:fc:84:79:a5:41:23:
         21:36:71:7e:64:15:e5:1b:bb:da:e6:d3:73:a2:ef:17:1c:5f:
         4d:d4:74:89:9f:4a:b9:1b:f5:43:7e:f8:af:1c:0e:f8:19:3b:
         28:cd:08:60:b3:10:eb:81:0e:a9:79:85:71:e2:26:dd:0f:19:
         d5:1b:90:c1:10:2d:b9:f1:a4:90:98:ed:96:a4:9f:82:6d:22:
         66:e0:ab:52:ee:41:da:cf:53:44:86:4f:dc:84:ae:6d:46:2b:
         52:15:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:23:19 2026 by rpki-client