Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233382e302f32332d3233203d3e203631373932.roa
File:                     3137302e3234372e3233382e302f32332d3233203d3e203631373932.roa (raw, json)
Hash identifier:          2porUDIWXQzRPGw1lpbiLM8NJFRmoPWfAam3JjOiqQI=
Subject key identifier:   29:28:C3:7B:19:80:07:28:8B:A3:3D:D9:94:3B:3D:E2:D3:16:17:25
Certificate issuer:       /CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
Certificate serial:       23E7A3C9F4C2B498E7D5DF906C95EFD985E52DA1
Authority key identifier: CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233382e302f32332d3233203d3e203631373932.roa
Signing time:             Thu 05 Feb 2026 21:20:31 +0000
ROA not before:           Thu 05 Feb 2026 21:15:31 +0000
ROA not after:            Thu 04 Feb 2027 21:20:31 +0000
asID:                     61792
IP address blocks:        170.247.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 14:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e7:a3:c9:f4:c2:b4:98:e7:d5:df:90:6c:95:ef:d9:85:e5:2d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018
        Validity
            Not Before: Feb  5 21:15:31 2026 GMT
            Not After : Feb  4 21:20:31 2027 GMT
        Subject: CN=2928C37B198007288BA33DD9943B3DE2D3161725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:9f:47:c2:6c:bb:ff:6c:c2:c9:d3:ee:64:
                    94:16:e2:3f:a4:e1:af:b6:4b:52:b8:94:e5:3e:53:
                    bc:f0:69:71:5b:19:30:a5:46:38:99:f7:31:90:5c:
                    b3:ed:6e:3f:16:50:33:16:95:87:ac:94:03:eb:05:
                    66:a3:ea:d2:fb:ed:80:bb:75:f6:08:52:7f:2f:4e:
                    ad:8e:5c:c5:20:12:62:fc:31:59:eb:33:69:32:04:
                    b2:8e:11:74:31:4f:fb:00:30:eb:ac:3d:f8:4b:c3:
                    8d:c1:e3:99:69:06:a1:2c:0d:05:ee:47:6c:1a:64:
                    39:88:b9:c7:02:d8:2f:2a:b5:09:da:d9:3b:89:e7:
                    d1:4e:f5:9e:70:a0:c0:a3:fb:f4:8d:7a:d4:54:42:
                    19:03:64:4a:0a:72:8f:be:c4:92:73:f3:7c:c4:23:
                    05:e4:e7:56:8b:bf:22:ef:25:56:ab:15:97:65:9f:
                    7d:2c:b8:fd:c4:2a:ac:b8:dc:07:ce:d2:95:9d:91:
                    21:b8:59:65:17:3b:8d:c7:cb:4d:5d:ce:e9:f7:64:
                    34:31:69:ae:ae:a0:c9:45:0b:90:08:08:5c:c3:df:
                    0d:35:87:93:45:f0:a9:fc:33:e1:a0:42:06:a8:34:
                    ae:10:44:fd:a4:ed:4a:3b:52:38:a4:b2:36:99:56:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:28:C3:7B:19:80:07:28:8B:A3:3D:D9:94:3B:3D:E2:D3:16:17:25
            X509v3 Authority Key Identifier:
                keyid:CF:3A:0F:4D:CF:62:E8:BC:D4:1F:46:B5:74:F7:A5:5C:04:2E:E0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF3A0F4DCF62E8BCD41F46B574F7A55C042EE018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233382e302f32332d3233203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:3a:b8:20:d9:96:f1:ec:25:25:95:e5:63:60:60:0e:94:
         9e:7f:89:4e:6f:f5:f6:7e:8b:f9:db:5c:9c:81:50:37:93:8f:
         e0:cc:71:18:23:40:b4:a7:00:7f:ad:1a:48:a2:e7:f7:fc:9a:
         30:d3:7b:82:26:de:33:66:f2:8f:ce:bc:bb:4e:cb:1d:e6:60:
         de:aa:f8:81:6b:9f:79:0c:d8:bd:ec:be:c9:27:ff:12:6a:4b:
         09:18:25:7e:40:c5:74:d8:6c:02:49:b2:87:57:fa:ef:1e:6d:
         30:45:b2:04:60:d0:6a:f0:e3:4c:3c:38:a1:c5:ca:50:18:c5:
         77:d4:c7:24:de:a9:dd:4e:bd:dd:28:cc:0b:52:4e:60:20:44:
         4e:c5:84:e5:bb:19:04:df:c2:e8:d7:d0:2e:b8:5a:f5:bb:f0:
         4c:37:03:01:c3:83:17:71:eb:84:f1:ac:27:a3:0d:bb:38:09:
         01:a6:98:72:ec:24:6c:89:fc:95:63:62:a1:09:4d:27:49:2b:
         c2:e9:52:a5:be:d2:0f:7b:45:7d:17:e8:ab:2a:16:b3:a3:f9:
         c8:ea:4e:c2:31:b2:a0:87:f0:4f:2a:47:37:09:7a:fd:6d:ea:
         43:da:21:5e:b9:49:e4:b8:5a:46:24:94:16:7e:ae:a7:e1:cf:
         21:78:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:21:00 2026 by rpki-client