Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
File:                     3137302e37392e302e302f32322d3332203d3e20323636323839.roa (raw, json)
Hash identifier:          rZTaXIKnQiw3eVa41BnmNEPOZgvOEZc3ujp2ZY+jsfM=
Subject key identifier:   34:A6:00:ED:E6:23:1D:E4:83:2A:F4:7A:41:0C:4E:D3:C4:D5:F4:18
Certificate issuer:       /CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
Certificate serial:       0BF10022A84F91BF4829D9EB80BB2B6D8E5154E1
Authority key identifier: 50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa
Signing time:             Wed 18 Feb 2026 18:53:59 +0000
ROA not before:           Wed 18 Feb 2026 18:48:59 +0000
ROA not after:            Wed 17 Feb 2027 18:53:59 +0000
asID:                     266289
IP address blocks:        170.79.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl
                          rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 13:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f1:00:22:a8:4f:91:bf:48:29:d9:eb:80:bb:2b:6d:8e:51:54:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Validity
            Not Before: Feb 18 18:48:59 2026 GMT
            Not After : Feb 17 18:53:59 2027 GMT
        Subject: CN=34A600EDE6231DE4832AF47A410C4ED3C4D5F418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:c5:42:27:32:8c:97:d5:c3:04:a6:2d:57:
                    71:db:17:f2:de:ae:bb:b0:8f:98:6d:7f:2f:c2:85:
                    da:18:32:7e:29:3a:29:83:49:9c:64:4a:a5:bc:8f:
                    4c:7a:e3:b9:62:70:a1:05:e2:5d:65:69:8f:68:60:
                    cc:e6:84:ee:eb:41:a5:7c:79:0c:35:4f:e7:4e:5d:
                    51:4f:29:a8:19:8c:d7:73:93:d4:d6:9e:b6:4a:a4:
                    6a:6e:e8:3f:4c:58:3e:c1:1b:fe:d1:39:2a:e1:e7:
                    f6:25:c4:35:7e:a6:07:e7:c5:cf:49:ba:ce:9c:ad:
                    23:ec:a8:ca:f3:3f:22:d6:b1:24:7d:26:3d:c0:5c:
                    f1:41:f7:74:77:13:64:33:67:02:55:13:18:38:a5:
                    a9:83:d6:7a:1f:e1:3c:4e:11:2d:2a:de:bc:56:53:
                    0f:e4:f1:c6:7d:b1:ee:e5:c5:c3:99:87:cb:4a:70:
                    06:e8:55:a5:17:77:9d:9d:4a:24:10:bd:6b:61:47:
                    a0:8a:be:6f:4e:cc:6a:3c:67:c6:05:62:b7:50:96:
                    93:5f:1e:be:a1:79:87:b8:06:3f:03:ae:94:ed:f4:
                    46:d0:7d:0f:ff:21:82:03:2c:91:fd:dc:8e:45:7f:
                    fd:f4:04:7a:60:a5:20:59:8a:4c:1d:92:e5:08:8d:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A6:00:ED:E6:23:1D:E4:83:2A:F4:7A:41:0C:4E:D3:C4:D5:F4:18
            X509v3 Authority Key Identifier:
                keyid:50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/3137302e37392e302e302f32322d3332203d3e20323636323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:01:77:c5:f7:4e:9e:21:01:ac:26:78:b1:5e:04:99:72:61:
         54:bc:d7:3d:f1:a8:08:3a:8c:7f:09:5f:dc:41:f4:d1:65:a5:
         9e:7a:e0:8f:db:74:4e:1c:53:2e:91:8b:78:e5:3b:9d:ed:5d:
         e0:76:9b:d5:1e:06:58:52:f0:eb:96:af:29:f3:18:88:9c:70:
         46:68:39:ed:ce:fc:03:25:5f:4d:cb:93:22:46:38:67:a9:01:
         1b:1e:82:d0:8c:ce:33:9a:03:2a:11:7f:16:53:fa:b1:2e:c0:
         92:d4:dc:2b:ed:aa:2e:86:25:56:d0:a4:80:94:6a:1b:85:40:
         0d:5b:ad:ae:74:cd:a4:6f:19:45:ff:2d:7b:00:1f:6b:d1:5a:
         0d:fd:e0:ae:ef:6f:bb:d5:52:45:b8:39:c8:f9:4a:10:87:1f:
         fa:e2:8a:be:e7:7d:39:44:3d:29:71:df:8a:b9:35:3a:ad:8d:
         2d:6a:74:90:4c:60:be:1a:4d:08:d3:01:d6:39:46:66:cb:20:
         4d:69:97:21:88:f1:c0:93:8b:86:cb:80:4a:ea:04:20:29:c7:
         c2:43:fb:d4:a2:90:35:07:7d:ff:eb:2a:f8:47:44:47:2f:9d:
         b2:3c:07:fe:31:cd:24:46:88:92:f8:dc:c9:ee:3a:bc:5c:18:
         c7:97:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:40:31 2026 by rpki-client