Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa
File:                     3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          aCsEHePHsSyxhW5nFqsw4O+ktBEfuJvB77b2rC4uGy0=
Subject key identifier:   A9:CD:E6:B4:CC:CB:02:E9:D9:F1:13:4A:7B:BD:C0:B9:09:5B:A8:22
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       12878890DA8DE8AC4ED347429F5F4F768513F749
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:29 +0000
ROA not before:           Thu 05 Feb 2026 11:00:29 +0000
ROA not after:            Thu 04 Feb 2027 11:05:29 +0000
asID:                     28658
IP address blocks:        177.107.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:87:88:90:da:8d:e8:ac:4e:d3:47:42:9f:5f:4f:76:85:13:f7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:29 2026 GMT
            Not After : Feb  4 11:05:29 2027 GMT
        Subject: CN=A9CDE6B4CCCB02E9D9F1134A7BBDC0B9095BA822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:eb:63:3b:c2:d1:9f:a7:af:a3:12:3c:1f:
                    79:17:e0:34:55:25:b4:07:a5:fd:1e:ce:88:2c:4a:
                    a4:58:86:1b:e6:50:34:91:07:d0:e6:45:77:78:77:
                    6e:9f:83:fa:02:72:5c:1e:94:60:01:b8:75:9c:96:
                    93:dd:fc:fb:bd:5b:1e:a0:de:0e:1a:f5:43:32:3f:
                    1f:f6:c5:d6:be:3c:27:d8:d7:d0:ac:0d:7a:8f:3d:
                    e4:3e:4c:4a:95:08:02:fd:a6:ea:7b:1f:ed:01:3c:
                    fd:b2:04:16:17:37:68:55:1d:0c:7a:de:dd:f8:77:
                    a7:85:f7:e1:d6:a8:40:0b:fd:fa:6a:85:00:db:28:
                    88:5c:0c:b7:32:47:47:ba:de:18:c7:10:79:36:ba:
                    4d:00:5f:66:9e:38:18:8f:4f:5d:8b:6a:05:86:a4:
                    50:1f:ad:d5:4c:0c:0c:02:33:44:ca:9e:2f:0b:9b:
                    f3:ef:ca:d1:7d:8f:a3:fd:57:30:58:7d:2d:cf:84:
                    fe:f7:fc:e1:ac:d4:db:63:ca:37:f9:73:fc:5c:7d:
                    c2:9c:32:ca:05:23:49:49:bc:e3:1a:c1:6c:f9:f6:
                    42:58:c1:a9:5f:c1:8e:a5:96:07:6f:38:e6:28:ee:
                    80:7e:24:18:d9:71:49:da:f4:14:77:96:1d:49:85:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:E6:B4:CC:CB:02:E9:D9:F1:13:4A:7B:BD:C0:B9:09:5B:A8:22
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3137372e3130372e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:12:44:83:bd:33:24:c2:ad:61:38:e4:e0:4e:2b:dc:72:d9:
         c4:4b:59:42:b3:47:57:45:c3:e4:65:e5:41:80:7c:aa:33:3c:
         5f:6f:77:d7:36:15:67:0c:06:25:eb:cb:aa:d6:40:50:49:c6:
         ec:8b:59:fd:d7:63:49:42:42:81:30:35:6e:63:42:af:9f:76:
         d1:b7:fa:8f:5f:45:65:94:4e:55:aa:5b:fa:2b:2b:b4:47:01:
         52:08:c2:b7:5e:68:41:ba:88:54:2c:6a:09:52:13:8b:75:19:
         27:ae:ef:fc:c6:71:03:fc:61:94:63:b4:a3:d7:2a:e6:0a:99:
         44:1b:19:5d:ec:f9:a3:d7:ff:0c:d6:b6:a1:8f:bf:d7:aa:48:
         81:d0:8e:b0:8d:89:8e:82:24:53:d2:5e:3e:9d:79:56:32:c9:
         7c:e4:be:8f:87:63:6d:fe:4a:46:bf:19:ce:38:91:02:9a:ed:
         92:cb:e3:ee:ec:0c:27:c3:b8:9f:f1:eb:ca:0f:c8:9c:99:b6:
         36:0d:58:c0:c0:8f:d1:0d:5c:2d:0a:0d:30:f9:f5:10:af:c8:
         de:74:72:21:81:d5:f1:14:dd:fd:59:ad:99:de:a3:37:49:11:
         f7:5e:17:66:fa:2f:20:8c:33:08:72:91:1b:db:0a:75:67:5c:
         a8:54:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:27:56 2026 by rpki-client