Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e33332e39362e302f32302d3234203d3e203238363538.roa
File:                     3138372e33332e39362e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          Legg651xmzD2f5AcvA19Xd6T+5jqwM8jAv6a4MFp3ig=
Subject key identifier:   41:80:F7:B6:D6:84:CC:68:9B:B7:AE:DD:DA:1C:D7:C2:D3:E9:D7:65
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       7E6EB3A651747FBE0730CEE0AF7431C623973626
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e33332e39362e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 05 Feb 2026 11:05:28 +0000
ROA not before:           Thu 05 Feb 2026 11:00:28 +0000
ROA not after:            Thu 04 Feb 2027 11:05:28 +0000
asID:                     28658
IP address blocks:        187.33.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 06:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6e:b3:a6:51:74:7f:be:07:30:ce:e0:af:74:31:c6:23:97:36:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Feb  5 11:00:28 2026 GMT
            Not After : Feb  4 11:05:28 2027 GMT
        Subject: CN=4180F7B6D684CC689BB7AEDDDA1CD7C2D3E9D765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:73:0c:e1:f9:b2:92:88:d0:36:3b:34:a6:
                    b2:64:ac:f4:63:de:88:88:48:a8:65:6c:f8:b3:ce:
                    f6:ee:bd:3b:39:24:19:7c:87:04:7b:b9:70:fb:cd:
                    81:83:5b:81:9e:91:a2:73:ed:e6:46:ac:59:e1:df:
                    23:78:0b:1b:fd:fa:a5:c2:50:42:7e:c1:76:a7:9a:
                    21:ca:a0:94:21:7a:26:50:a5:48:97:ab:8a:dc:2e:
                    1c:ef:e5:d7:ab:e2:e3:6e:5c:38:f4:e9:df:82:71:
                    f3:3f:37:fd:8f:03:17:96:e7:19:1f:c6:e8:84:3e:
                    98:3a:18:82:63:d5:6d:4b:90:21:e8:9d:30:06:a9:
                    2f:91:a2:84:a3:93:14:06:8d:26:81:ee:99:f8:4e:
                    be:b3:e1:e0:34:d2:e8:e1:63:00:4d:14:5a:08:9f:
                    06:84:f5:75:eb:91:57:3f:a0:75:e8:d0:fc:c3:30:
                    89:a1:8e:02:cf:bc:64:13:b3:75:2e:55:01:f5:25:
                    bc:74:ff:e4:c6:75:16:82:ad:d2:42:8a:d1:bc:fb:
                    3f:2f:3e:7c:6f:31:92:68:de:07:0d:14:96:07:4e:
                    75:dd:f0:d5:1c:f3:01:71:ea:00:57:7c:6c:56:52:
                    9e:22:39:e9:d1:31:f6:ee:bf:85:a6:71:40:91:69:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:F7:B6:D6:84:CC:68:9B:B7:AE:DD:DA:1C:D7:C2:D3:E9:D7:65
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138372e33332e39362e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:6a:50:81:20:8f:8b:5f:87:6c:60:23:39:98:35:f2:d7:
         90:97:5b:d0:1e:7f:21:f6:d1:9f:1a:2c:1b:f0:78:5b:90:14:
         3c:d3:dc:61:46:78:97:da:c5:b5:34:36:8e:ca:fd:c9:f5:04:
         b9:10:4d:71:e4:8f:dd:48:4c:66:c8:be:59:31:38:15:3f:97:
         63:1d:87:ce:3b:94:0f:10:9f:54:3d:e4:7c:80:e2:58:06:2f:
         06:2d:67:c9:ab:90:ef:70:d7:3f:f1:37:c5:72:2b:b3:59:a2:
         64:f6:b5:cc:6f:1d:c4:0d:db:9e:34:86:62:2e:5c:61:53:ad:
         00:75:c4:63:92:0b:b3:86:06:36:5c:19:d9:60:5c:1f:3a:0f:
         0a:5c:a6:65:6c:a1:43:f9:82:8c:8d:e2:47:ba:14:13:fe:62:
         4d:4a:35:eb:21:14:a1:0a:fe:0a:b3:09:cc:10:d5:ea:1b:46:
         43:5f:d5:68:9f:d4:37:1a:4b:8f:60:b6:94:2b:01:c2:bf:52:
         a3:59:2f:85:26:e2:cf:07:4c:0f:46:0f:57:e3:5a:1a:54:aa:
         6f:38:3a:7f:52:29:50:41:b2:a5:61:14:9f:94:73:86:2e:57:
         de:85:cc:5a:b2:bb:c4:c7:7f:f1:de:1e:6c:10:70:6d:5f:61:
         40:b8:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:00 2026 by rpki-client