Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34332e302f32342d3234203d3e20323633363239.roa
File:                     3137392e3132352e34332e302f32342d3234203d3e20323633363239.roa (raw, json)
Hash identifier:          OwhXDuTWHxGm2ZnwH0fuXEFpX3S5v50UQ/dlz5oK5a8=
Subject key identifier:   00:2C:D1:61:3E:65:41:41:7B:AF:82:A7:D1:8E:F8:63:74:25:B1:78
Certificate issuer:       /CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
Certificate serial:       4C2CA03D5F79D6C5141F2AFCB7DA964CCB2B678B
Authority key identifier: EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34332e302f32342d3234203d3e20323633363239.roa
Signing time:             Mon 16 Feb 2026 18:51:57 +0000
ROA not before:           Mon 16 Feb 2026 18:46:57 +0000
ROA not after:            Mon 15 Feb 2027 18:51:57 +0000
asID:                     263629
IP address blocks:        179.125.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl
                          rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 22:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2c:a0:3d:5f:79:d6:c5:14:1f:2a:fc:b7:da:96:4c:cb:2b:67:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD
        Validity
            Not Before: Feb 16 18:46:57 2026 GMT
            Not After : Feb 15 18:51:57 2027 GMT
        Subject: CN=002CD1613E6541417BAF82A7D18EF8637425B178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:cb:91:b3:80:08:db:f3:83:2f:a1:16:6e:
                    f7:67:6f:8d:c2:4a:6c:ff:93:4b:bc:bd:f6:07:f7:
                    7e:23:24:52:f9:31:1d:9a:43:62:f4:9f:a1:da:56:
                    54:69:3e:7d:54:ea:0b:93:e6:b3:f9:62:7a:01:a2:
                    18:f4:e6:29:9e:c6:e5:a2:ad:2d:99:65:68:6e:af:
                    3c:31:96:46:67:e1:08:fe:93:0e:f1:d0:0b:35:f9:
                    28:f8:b0:ef:79:99:6e:70:32:fb:5f:ef:df:65:51:
                    d2:70:e9:72:21:a8:b8:2c:54:c9:75:3e:8c:f0:3a:
                    ab:41:0b:59:73:04:2b:bb:15:bb:29:09:5d:6b:2b:
                    9b:76:4a:8c:cb:58:a0:26:20:21:0e:18:6b:27:f0:
                    01:fd:f7:38:76:c0:49:11:88:b0:2b:9e:63:ec:22:
                    cf:8c:ba:57:ce:a6:cf:f0:00:c3:72:88:68:dd:b9:
                    36:a6:ca:4e:c0:29:ba:de:81:ab:aa:bd:69:8b:89:
                    f6:ad:5c:5e:9e:9d:f1:fd:34:a2:e0:52:36:a3:a5:
                    ce:f6:02:3d:5b:da:df:5f:0b:23:46:8b:79:e7:c3:
                    f6:88:ac:6d:6d:71:7a:79:75:8b:72:f1:43:17:52:
                    ae:20:94:c9:96:48:ec:0f:04:a8:fd:74:fb:5b:c9:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2C:D1:61:3E:65:41:41:7B:AF:82:A7:D1:8E:F8:63:74:25:B1:78
            X509v3 Authority Key Identifier:
                keyid:EC:92:5A:78:F8:BF:CB:62:0C:80:CC:8F:AD:47:F5:F3:02:EF:FB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC925A78F8BFCB620C80CC8FAD47F5F302EFFBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BhNNZnYcAddNCBnUmnWrCG4aj2ovJZHbJq9MmRgw9cXk/0/3137392e3132352e34332e302f32342d3234203d3e20323633363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5f:b7:16:1d:5f:66:29:31:27:84:92:e6:58:e6:c4:a7:48:
         1d:61:3a:1d:d2:8a:05:d4:f0:e2:db:02:15:ac:0d:b2:bc:84:
         76:81:d4:05:30:ed:34:59:51:69:ca:bd:ee:56:2e:1e:ff:c2:
         f7:60:05:11:34:5f:bd:8e:c6:1d:1b:5e:ef:92:82:6a:fa:41:
         cd:49:6c:e7:9e:dc:39:e4:00:d5:79:71:f7:5f:b8:6e:e4:fc:
         16:a4:17:18:b0:b5:5c:e0:af:09:b6:f7:e9:88:98:43:33:ab:
         4c:8a:d2:41:af:d3:33:4b:c7:f9:fd:87:21:92:5e:81:7f:b8:
         9a:d1:44:91:de:b6:84:69:32:8c:89:3e:70:91:ad:75:48:1c:
         4a:83:d3:22:1f:bc:5c:90:ae:55:37:58:ba:19:61:ed:c8:24:
         0a:a8:01:81:45:4b:95:11:af:d5:35:a3:18:a1:f6:47:8a:30:
         14:c4:e5:0f:ae:d6:aa:4e:02:1d:af:4c:34:0c:6c:0d:e6:72:
         2b:88:6d:fa:dd:f7:41:01:cb:24:2b:18:6e:b9:a2:4c:14:71:
         d2:87:f3:c6:47:d9:ea:86:9a:52:50:f9:f5:c8:f0:dd:2e:88:
         d4:75:57:d6:75:e6:e6:5a:88:85:24:f5:bd:57:57:5f:02:d4:
         9f:20:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:04 2026 by rpki-client