Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa
File:                     3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa (raw, json)
Hash identifier:          eDbVhinYnYt+M6qbMFiwtDNSUIvX5oS/zra/MQzQYyg=
Subject key identifier:   27:0F:EE:2A:33:D4:22:0D:5F:0F:9B:75:4E:04:DB:BC:EC:E6:20:42
Certificate issuer:       /CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
Certificate serial:       3685611037FB1D4E40B9B57C7CCBBB4F37ADB2DB
Authority key identifier: F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa
Signing time:             Thu 05 Feb 2026 17:00:43 +0000
ROA not before:           Thu 05 Feb 2026 16:55:43 +0000
ROA not after:            Thu 04 Feb 2027 17:00:43 +0000
asID:                     271177
IP address blocks:        179.51.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl
                          rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 01:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:85:61:10:37:fb:1d:4e:40:b9:b5:7c:7c:cb:bb:4f:37:ad:b2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Validity
            Not Before: Feb  5 16:55:43 2026 GMT
            Not After : Feb  4 17:00:43 2027 GMT
        Subject: CN=270FEE2A33D4220D5F0F9B754E04DBBCECE62042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:f9:60:af:d0:ba:ac:b0:34:fd:79:b9:da:
                    ea:55:b8:e4:71:4c:09:e4:e6:60:fc:50:10:a4:13:
                    61:88:dd:b3:0a:9c:f0:4d:58:7b:d0:3d:bc:a2:0d:
                    b0:ea:e7:25:63:d1:1e:14:9c:d0:16:5d:60:1c:b6:
                    a8:a5:1c:af:93:9f:2b:9f:e3:4a:15:b5:8b:8d:71:
                    18:cd:f3:71:00:19:52:72:df:1b:4f:0c:7d:9c:6a:
                    65:67:14:9e:71:8a:af:3f:a5:f9:e0:1c:09:2e:ca:
                    a1:9c:8a:04:97:ff:e2:ac:ff:e1:58:c8:8f:d5:6f:
                    0c:48:a8:02:85:16:c5:b5:90:63:52:4a:9e:ee:62:
                    ae:19:c9:97:46:c8:0b:fc:6d:13:e5:6e:c5:d2:18:
                    cb:a7:01:cf:6e:42:d9:57:57:32:03:d6:f1:c6:25:
                    ab:ce:5e:02:ca:39:3a:a9:f9:b4:0b:3d:4a:0d:1b:
                    94:41:cb:1d:a5:98:f9:f1:47:40:ee:24:d2:62:48:
                    fd:62:69:e9:d1:fe:64:89:67:a8:7c:3a:59:ca:03:
                    98:b1:94:9c:fa:4a:a6:3d:3e:d8:cc:b8:8c:99:44:
                    09:b2:c1:75:ff:ac:8c:47:32:51:7c:3a:b9:b1:76:
                    da:f6:e6:02:da:cf:7b:0e:00:1a:ae:1c:7f:94:66:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:EE:2A:33:D4:22:0D:5F:0F:9B:75:4E:04:DB:BC:EC:E6:20:42
            X509v3 Authority Key Identifier:
                keyid:F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/3137392e35312e3138342e302f32322d3234203d3e20323731313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:fb:23:f2:4b:f8:8a:c9:c9:a1:43:71:1d:c9:ae:6b:7a:94:
         a6:35:15:2e:d0:fe:77:48:46:98:26:01:03:d5:a5:9d:66:ba:
         7a:a5:9c:6f:5d:57:d7:80:39:b3:79:30:7e:94:5c:aa:39:85:
         d8:41:36:a3:e2:eb:18:9f:5a:65:1d:07:17:a0:3d:87:f5:36:
         f7:9f:09:43:17:2b:75:b1:a3:62:6e:43:3f:63:99:52:e1:76:
         9a:bc:c4:63:36:f5:c2:4a:3f:85:76:10:ed:55:89:fc:9a:15:
         cc:31:c0:88:6a:ef:8c:42:71:99:d6:c1:f1:93:5a:48:91:6e:
         ba:99:76:d4:13:ef:74:ec:9d:30:f1:9a:ce:1d:47:91:7c:8a:
         fa:52:06:aa:4b:60:87:3a:7f:c9:74:b7:11:d8:18:f5:2a:5b:
         81:ce:3f:d1:fb:00:54:c7:a5:91:62:f2:10:28:a0:42:03:54:
         08:d2:38:56:b6:dd:ab:a7:f6:f7:16:29:0e:19:7e:96:e2:90:
         f5:9b:b9:14:8d:f1:6e:6e:77:e8:7b:21:40:2c:36:a1:97:4d:
         60:52:61:18:c7:38:69:ea:c2:b9:79:f7:e2:d7:82:fd:be:2b:
         19:9e:6b:77:e8:1e:86:95:8a:1e:cf:66:fb:19:0b:6f:da:59:
         dc:0a:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:03:26 2026 by rpki-client