Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34312e302f32342d3234203d3e20323633363239.roa
File:                     3137392e3132352e34312e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          V7T9GPLx81Y7eCVU9x0hgE9zNKwuZ3Ez2fUkMXgAvEE=
Subject key identifier:   0F:0A:23:81:29:2A:7C:BB:EC:7B:6A:47:EA:DC:D1:5D:37:AA:FB:08
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       4D2054266E122EC11AE10CAEAC349E301BAAF876
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34312e302f32342d3234203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:38 +0000
ROA not before:           Mon 16 Feb 2026 18:46:38 +0000
ROA not after:            Mon 15 Feb 2027 18:51:38 +0000
asID:                     263629
IP address blocks:        179.125.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:20:54:26:6e:12:2e:c1:1a:e1:0c:ae:ac:34:9e:30:1b:aa:f8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:38 2026 GMT
            Not After : Feb 15 18:51:38 2027 GMT
        Subject: CN=0F0A2381292A7CBBEC7B6A47EADCD15D37AAFB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:fd:a8:c7:71:fd:a8:6e:04:a8:96:f3:3b:
                    7a:c6:40:cf:5c:ae:af:70:91:37:15:47:9d:b5:05:
                    10:72:e5:c0:51:37:87:86:2b:5d:ce:e8:a7:20:1c:
                    80:46:40:32:c1:bb:fa:ab:5a:f8:48:9c:4f:91:08:
                    80:b8:af:bc:b2:00:02:53:cd:bf:fa:af:34:d7:d1:
                    2a:c3:b2:0e:6a:13:92:4e:3e:86:31:c8:af:d6:0c:
                    89:c1:9a:fd:fe:63:1e:ca:c8:48:b1:31:24:12:12:
                    5b:01:b6:bd:8b:2f:02:10:a9:2a:22:ca:5b:6f:ac:
                    e5:9c:b7:28:bb:69:15:54:a7:bb:e8:bb:37:5d:96:
                    6a:6b:e6:ec:12:d3:2a:b9:82:e8:d9:ac:4b:0a:62:
                    1d:cf:5b:98:1d:ba:1d:b2:86:d0:ad:e9:b8:4d:b9:
                    74:65:21:23:96:7d:3f:9e:4b:08:92:21:06:78:9f:
                    a3:0e:47:02:e1:42:e9:56:70:02:31:fe:af:b8:cb:
                    76:ee:18:17:9a:fa:f1:74:29:7d:03:f9:04:5f:a2:
                    ad:80:c9:4d:99:62:b1:87:56:a1:f8:60:cc:a6:4b:
                    41:0a:e7:d1:cb:55:95:5e:91:31:a8:f9:ac:7d:1d:
                    a9:4b:24:b4:2d:a1:06:45:62:66:86:ae:68:64:2b:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:23:81:29:2A:7C:BB:EC:7B:6A:47:EA:DC:D1:5D:37:AA:FB:08
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34312e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:fb:a4:28:bb:d4:8e:aa:43:08:05:41:d6:f3:26:9d:ce:75:
         70:3f:b1:ab:2a:77:c9:1c:09:26:31:d2:7b:c5:48:8f:57:06:
         07:a3:af:5a:85:ff:33:56:01:79:86:3d:73:0c:0a:03:b7:e7:
         45:9a:fb:3b:90:41:c7:e6:47:a5:74:87:99:33:f5:eb:42:00:
         52:6b:2e:d5:a7:02:b2:d1:d0:63:3a:e1:02:d7:aa:b9:eb:51:
         9e:de:cc:0a:dc:33:a5:64:81:d6:30:ac:e1:b2:ac:19:9d:71:
         84:b2:a0:d9:c1:c0:97:74:90:6d:74:00:94:19:65:e3:52:12:
         f8:2a:a9:8a:1c:f2:bc:e8:b4:fa:77:20:cd:73:e0:05:b2:8f:
         44:ef:fd:5c:e8:a9:f0:c7:e1:ee:81:8b:50:cf:37:d9:0d:41:
         47:23:be:e1:fa:e6:79:1e:bb:83:d4:fa:ae:bf:17:79:73:66:
         c9:12:51:e0:25:3d:30:cb:d7:a9:ca:47:58:a7:44:5a:ae:6b:
         7b:c4:fa:ed:3b:cc:6c:75:b9:b1:2b:87:71:86:39:58:bf:89:
         1d:3d:4d:18:c8:8b:d3:99:ab:2c:b0:a4:96:9c:70:69:5c:87:
         09:22:12:b3:18:d8:28:37:7f:9d:6b:42:2e:33:3d:55:aa:0e:
         a9:43:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:14 2026 by rpki-client