Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137302e3234342e3135322e302f32322d3234203d3e203238363538.roa
File:                     3137302e3234342e3135322e302f32322d3234203d3e203238363538.roa (raw, json)
Hash identifier:          y4tp+oWh/qNlMrUEOR1pPWsv4efefCosMs64WrAOnsU=
Subject key identifier:   3E:AA:FD:EF:9B:AC:17:C4:07:9F:9E:64:B1:A4:45:67:BB:05:59:07
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       68037294E59BDF4574C573B49EA30F572EB2435C
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137302e3234342e3135322e302f32322d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:28 +0000
ROA not before:           Thu 05 Feb 2026 11:00:28 +0000
ROA not after:            Thu 04 Feb 2027 11:05:28 +0000
asID:                     28658
IP address blocks:        170.244.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 10:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:72:94:e5:9b:df:45:74:c5:73:b4:9e:a3:0f:57:2e:b2:43:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:28 2026 GMT
            Not After : Feb  4 11:05:28 2027 GMT
        Subject: CN=3EAAFDEF9BAC17C4079F9E64B1A44567BB055907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:88:0f:2f:66:56:9e:b9:4a:24:f2:3e:2f:
                    e6:3a:18:4b:b4:f4:53:4d:d5:64:5d:7b:cf:91:7b:
                    81:90:1c:b7:49:0b:aa:8b:2c:81:e9:fc:53:e5:5e:
                    94:e6:ca:22:1c:8b:95:c2:49:25:b8:45:8f:8f:58:
                    88:32:a8:5e:59:dd:de:c3:b8:30:0b:2e:5d:b1:21:
                    09:d6:5b:62:ca:93:75:e5:f1:56:22:e4:d2:d7:e0:
                    2d:8e:91:c2:ce:c4:db:3b:8e:98:71:c0:0d:ca:56:
                    08:37:95:ae:e2:6f:d7:26:9b:94:01:56:7f:93:39:
                    aa:cc:a3:ee:28:4a:15:b3:22:da:a9:a3:b6:09:a4:
                    b0:65:fd:0b:1e:61:ce:c1:73:9a:37:14:f8:c2:dc:
                    76:12:8f:f4:4d:6c:04:96:67:44:d4:ad:89:e4:1e:
                    9f:88:82:4b:07:85:43:aa:4a:a4:18:f7:e6:53:41:
                    29:ce:f5:a5:31:80:49:c9:e0:79:9d:9e:03:5d:68:
                    2c:f5:ff:61:7c:d2:0a:54:36:39:b1:4e:ad:6d:a3:
                    fa:af:0e:44:3c:3d:f4:0d:75:f2:97:e6:6a:80:fb:
                    99:29:0f:41:f5:5a:7d:75:a3:4b:2f:fa:bc:66:00:
                    73:b8:10:a4:1c:c6:79:86:47:4d:03:0a:b7:22:71:
                    42:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:FD:EF:9B:AC:17:C4:07:9F:9E:64:B1:A4:45:67:BB:05:59:07
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137302e3234342e3135322e302f32322d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:4a:b6:2c:2d:c1:9b:9c:9a:55:38:fc:aa:c4:55:96:a5:fc:
         0e:bb:f2:2f:26:f6:19:07:86:b1:6e:47:f0:ff:ac:08:63:93:
         40:89:d8:ac:e9:2c:67:05:75:fc:7e:58:f6:d2:38:07:ee:7e:
         45:b9:7d:aa:ba:e7:7e:dd:0d:1d:b5:70:e5:f1:2b:8e:17:95:
         cb:ad:74:b4:f3:95:df:88:a6:e5:e0:18:9e:7e:f1:54:31:54:
         76:8c:2e:74:ab:a5:c6:39:25:0e:45:cc:cd:0b:b0:bd:90:0f:
         8c:f4:87:42:24:5b:b9:b6:5e:6e:a4:82:41:f2:35:f4:ae:9e:
         b3:5d:a8:20:b3:89:3e:94:27:17:22:c1:3d:58:85:3e:bc:da:
         a6:06:19:18:01:11:fe:38:4f:68:b4:aa:15:e3:17:fd:eb:c3:
         68:9b:e2:8a:ed:ba:33:b8:c4:de:1e:fc:0a:31:e9:89:b9:0e:
         59:66:07:96:8f:34:61:de:59:18:bc:08:18:cf:1a:6e:18:f3:
         c2:fe:0a:69:2c:62:c5:e1:66:d9:75:99:3a:0b:89:f5:f7:c3:
         6d:de:93:89:81:92:86:3c:68:eb:4f:a7:41:93:79:42:90:c4:
         fe:b0:02:79:2f:d2:ca:55:e1:c8:80:4e:2f:18:1b:ae:a7:b4:
         6e:e8:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:29:19 2026 by rpki-client