Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa
File:                     3137392e34392e3134342e302f32322d3332203d3e203532363339.roa (raw, json)
Hash identifier:          1Rdu+6D/6SRfoWYwx4TQXLZ/QZfdW+L+PqLNd8BSusM=
Subject key identifier:   52:A9:78:F2:E0:62:B5:4E:1E:92:91:9E:D8:CD:5C:21:A0:E7:97:DF
Certificate issuer:       /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial:       06AD4B77F618B203772366F7248FABDECA83DD8B
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa
Signing time:             Thu 05 Feb 2026 00:09:35 +0000
ROA not before:           Thu 05 Feb 2026 00:04:35 +0000
ROA not after:            Thu 04 Feb 2027 00:09:35 +0000
asID:                     52639
IP address blocks:        179.49.144.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
                          rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ad:4b:77:f6:18:b2:03:77:23:66:f7:24:8f:ab:de:ca:83:dd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Validity
            Not Before: Feb  5 00:04:35 2026 GMT
            Not After : Feb  4 00:09:35 2027 GMT
        Subject: CN=52A978F2E062B54E1E92919ED8CD5C21A0E797DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:97:59:4e:0f:ab:a7:41:d5:7a:fd:bc:0e:
                    5b:e7:dc:ae:24:7a:f3:f4:c5:ab:30:22:6b:71:14:
                    92:f5:fc:53:1f:4e:6f:23:f0:b6:5a:ef:26:7b:c5:
                    86:b1:17:39:f3:9e:60:99:76:67:66:16:9b:ba:ef:
                    1b:40:3d:0f:21:a4:20:52:66:a2:54:2d:10:ee:58:
                    35:b0:8a:88:97:c5:0d:38:b1:b3:a5:3e:b6:78:12:
                    2e:47:79:b6:b4:65:c5:e9:f1:98:68:77:b9:7a:c4:
                    66:5c:c8:84:ee:2f:31:e0:74:29:8c:5e:6f:39:ba:
                    80:d8:6a:7b:d8:5d:e8:2e:0e:91:74:0a:cc:a3:aa:
                    f9:14:a9:77:6f:16:1c:8a:a0:16:cb:d7:e6:06:c7:
                    eb:eb:5b:39:98:03:43:66:07:02:59:29:1e:1f:1e:
                    b6:07:c7:0d:08:7a:03:d5:e9:51:0a:30:d0:3f:33:
                    da:0f:dc:d1:b8:73:52:40:9c:e1:62:3a:6b:a6:f5:
                    ba:1a:fb:65:63:43:ba:32:8d:fa:07:d0:41:74:c9:
                    d1:22:b5:17:2c:ee:96:69:1b:60:54:22:a8:28:0d:
                    e5:e1:f8:bd:ec:08:b3:3f:59:20:3c:73:df:1c:d3:
                    fb:79:12:a6:54:1e:d9:51:ef:98:b1:2d:70:d7:70:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A9:78:F2:E0:62:B5:4E:1E:92:91:9E:D8:CD:5C:21:A0:E7:97:DF
            X509v3 Authority Key Identifier:
                keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/3137392e34392e3134342e302f32322d3332203d3e203532363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:32:3a:0a:26:ce:a7:95:1b:f0:8b:89:c2:9b:be:c9:42:94:
         80:74:f9:82:66:2c:85:21:6f:03:74:2f:99:a6:2f:af:9a:07:
         db:26:b2:f1:7a:3f:d7:bb:95:c2:de:6d:a0:9a:42:c5:7f:a0:
         91:39:15:1f:12:0b:51:81:25:e6:83:33:17:31:83:1c:c9:06:
         6b:9b:d3:8c:eb:e1:58:8a:c6:e1:91:83:fc:60:17:3c:9a:f6:
         c4:fa:23:f6:c9:11:41:d8:9a:5e:70:5d:d5:c9:ee:ab:6e:93:
         0f:42:c7:84:68:6d:f8:e0:a7:2f:2f:5e:ce:59:4d:c7:d9:c2:
         6d:53:79:da:f1:d1:c9:f0:ab:e7:71:33:cf:1d:71:85:39:36:
         32:e2:49:21:d2:48:26:e8:06:88:19:3d:3a:98:ef:3f:3c:70:
         d4:e0:f1:e0:39:79:d2:7c:6b:7a:f3:6b:30:27:b4:46:a4:c4:
         1a:22:e4:4d:1c:b9:ea:48:6a:4a:5b:e4:0d:49:71:a0:74:00:
         c8:24:ac:f0:42:fb:ce:28:25:16:94:17:64:d7:ae:65:c1:05:
         2c:ee:df:d9:13:78:d2:e8:5d:5b:b9:c4:80:83:3e:f7:c9:7f:
         ef:37:d5:34:8a:41:9c:fe:c9:9c:50:9f:54:1b:ff:92:ce:de:
         d5:78:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:49 2026 by rpki-client