Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
File:                     3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa (raw, json)
Hash identifier:          6IoxfjEeRCaFyguVpee+VyofyCdw8Gr9o12gIVLUIw4=
Subject key identifier:   20:AB:9A:40:EA:57:AA:06:28:6B:D7:08:54:5A:4E:5A:EF:14:5D:9A
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       31B049413BECC7E073A5E013A6FC8A643FF43C6C
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa
Signing time:             Thu 05 Feb 2026 16:46:25 +0000
ROA not before:           Thu 05 Feb 2026 16:41:25 +0000
ROA not after:            Thu 04 Feb 2027 16:46:25 +0000
asID:                     266498
IP address blocks:        170.244.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b0:49:41:3b:ec:c7:e0:73:a5:e0:13:a6:fc:8a:64:3f:f4:3c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Feb  5 16:41:25 2026 GMT
            Not After : Feb  4 16:46:25 2027 GMT
        Subject: CN=20AB9A40EA57AA06286BD708545A4E5AEF145D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:51:44:7e:f2:04:d4:7f:c9:54:61:67:7a:
                    c5:aa:30:0a:26:be:91:8e:3c:69:4c:e1:5b:a6:43:
                    2b:74:12:4a:3b:6e:04:55:a1:70:4b:cb:75:b6:59:
                    96:b7:15:37:47:e9:b2:6b:2a:a6:cb:f6:bd:e7:96:
                    ea:c9:5d:26:64:9c:2c:8f:3a:2d:8e:ae:7d:f1:7f:
                    da:72:27:1d:a8:48:52:3a:27:8f:3a:55:67:e6:09:
                    ac:7c:6a:09:bd:1f:9e:b4:6c:14:99:0a:9b:87:45:
                    d5:e0:18:fd:62:64:41:b2:23:70:7f:0e:0e:19:1d:
                    b5:a1:fa:2e:31:19:cc:b0:03:ea:c2:34:02:1c:88:
                    9c:ed:dc:43:39:1c:84:0d:b7:da:4a:c8:43:2b:a9:
                    95:de:7b:47:9e:f3:18:2b:b8:3e:0d:ac:39:5d:08:
                    4a:34:b1:70:a3:eb:ce:49:59:a6:2d:d8:17:2d:f8:
                    9a:b8:dd:49:a8:82:cf:95:e7:02:a2:0c:84:48:8f:
                    c5:03:3c:4a:37:99:bc:aa:5e:d4:f1:1a:a6:1f:2d:
                    5c:41:60:c5:52:01:03:5a:40:90:d2:c8:24:84:d9:
                    cd:49:81:ae:96:b0:a2:64:4e:f9:90:f9:aa:c5:69:
                    4f:23:17:8e:2d:07:e2:a0:3c:1c:45:3c:4b:3d:f5:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:9A:40:EA:57:AA:06:28:6B:D7:08:54:5A:4E:5A:EF:14:5D:9A
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/3137302e3234342e37322e302f32322d3234203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:23:fc:58:ec:2b:c2:43:12:37:ea:66:52:c4:6b:b0:c8:
         b6:cd:da:d4:46:d7:78:c0:8f:f3:f8:bb:0c:df:6c:f5:cf:a5:
         7f:28:21:6a:48:04:65:8f:09:d4:fa:e5:08:41:cd:ed:13:6a:
         ff:ad:bd:56:fe:78:bf:e5:17:e2:75:ce:42:1a:66:7b:30:78:
         66:03:ec:e2:85:72:75:5a:56:2a:e6:cb:2d:ff:40:42:06:41:
         3b:93:e9:a5:13:a9:6f:5b:63:e1:b0:32:de:b0:0e:d3:37:45:
         45:fb:b3:0d:4d:38:a6:3c:74:b4:50:d1:17:e4:d4:e2:df:5d:
         36:2d:71:fa:f2:1a:d9:8e:1d:39:45:dc:9d:69:f2:9d:57:06:
         69:ba:1e:3d:2e:a2:3f:65:cd:9b:ae:fd:29:5a:1c:1c:e3:ab:
         d3:1e:32:57:0f:f1:7b:85:c4:af:db:04:44:39:ce:ac:03:a5:
         33:af:9b:8d:1a:9a:2c:44:2c:ff:89:86:ad:2b:ad:e1:79:8d:
         72:da:83:13:a2:1a:a7:37:31:05:0e:81:c4:73:dd:d5:ed:e7:
         83:0e:a2:37:ad:cd:9d:be:f5:d2:9e:e8:6e:00:dc:73:69:37:
         87:e6:c1:b7:76:78:1c:cc:09:10:12:4e:bf:4a:24:94:49:59:
         16:b0:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:41:27 2026 by rpki-client