Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa
File:                     3137302e3234352e32342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          bNOj7LkwCzQfsCTx/6SDDlLK2PNsfM8hluG2YMGyCO8=
Subject key identifier:   BC:F3:72:2E:9B:E8:61:89:85:E7:1A:30:FC:67:57:31:DA:3C:16:53
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       75133DAFD3B827D1BABD689EA42119FA71441408
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 05 Feb 2026 09:06:32 +0000
ROA not before:           Thu 05 Feb 2026 09:01:32 +0000
ROA not after:            Thu 04 Feb 2027 09:06:32 +0000
asID:                     61588
IP address blocks:        170.245.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 19:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:13:3d:af:d3:b8:27:d1:ba:bd:68:9e:a4:21:19:fa:71:44:14:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Feb  5 09:01:32 2026 GMT
            Not After : Feb  4 09:06:32 2027 GMT
        Subject: CN=BCF3722E9BE8618985E71A30FC675731DA3C1653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:0f:58:16:5a:5f:f8:98:da:1d:ec:2a:8d:
                    3d:ce:3e:62:ff:81:80:9a:96:47:6b:1a:0c:45:83:
                    5f:f3:66:27:dc:fa:1d:25:18:94:92:5c:86:49:2e:
                    86:63:1f:c1:11:fa:21:3f:5f:bc:b1:c4:84:a5:05:
                    44:90:61:89:5b:31:c6:9b:c8:4d:10:2b:6f:5c:34:
                    42:37:c5:47:91:2f:8b:c1:2d:d4:a5:30:56:90:e3:
                    b7:48:b8:f2:88:e4:8a:e4:23:d0:49:fd:ef:db:26:
                    f9:6f:7d:44:41:4a:9b:be:a1:5e:d4:75:db:d1:66:
                    97:21:e3:2e:65:88:00:95:ae:ed:3d:72:aa:30:67:
                    1c:b8:90:48:a5:58:d0:b9:54:3f:6c:d1:e4:9d:92:
                    b8:1f:6d:95:54:26:0a:c7:12:be:be:ef:de:3f:14:
                    f2:21:f0:8c:10:c6:65:a3:ef:53:2a:ed:2c:d5:e7:
                    f1:6f:d0:cd:d2:f5:f9:7e:f9:f3:69:d8:00:8c:a7:
                    68:db:0b:bc:1e:c5:3e:d7:b1:1a:e8:35:0b:44:f9:
                    97:59:a2:e5:2c:d9:51:09:ae:9c:a1:54:0d:ec:f5:
                    f8:14:1c:8c:09:9b:e2:01:a5:83:d7:70:9f:21:0e:
                    c7:06:59:23:2f:39:10:f5:1c:e3:3f:23:d8:3a:b8:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:72:2E:9B:E8:61:89:85:E7:1A:30:FC:67:57:31:DA:3C:16:53
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3137302e3234352e32342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:92:2a:d5:2d:cd:88:ad:9c:b6:5a:65:ad:cd:54:07:94:be:
         b9:a7:ac:e1:ad:cd:be:eb:5a:90:d0:c4:73:62:2e:23:2e:db:
         f1:06:4c:d6:d7:db:3b:54:01:d8:1b:db:62:b6:5c:44:d3:ae:
         26:9c:fd:d4:54:88:85:87:9d:9b:75:eb:6e:c0:5b:a1:8c:97:
         07:10:07:11:a3:dc:04:f3:41:1d:2b:65:97:1a:e0:2d:d6:62:
         c3:8d:fd:62:da:56:e8:d5:9b:38:8c:6b:af:27:69:3e:e8:ef:
         da:b0:66:87:c2:5d:d5:ee:63:c9:37:4c:bc:7a:61:8a:3d:8a:
         72:72:7c:09:90:d6:dd:c1:75:30:67:67:9f:a9:be:d7:d3:45:
         a6:0e:05:54:f9:63:6d:37:fa:2b:aa:fa:ea:40:5b:3f:98:45:
         97:23:94:f4:f0:96:22:d4:72:4b:a0:f1:ac:bc:8d:97:e9:a3:
         d1:af:ed:b4:af:b1:bb:90:81:a8:95:d2:92:75:35:4e:40:c7:
         40:0e:1c:dd:61:d2:48:8c:56:af:58:2d:d0:bf:3d:ca:91:61:
         f3:f6:76:b7:06:59:bb:45:f2:39:f2:0e:ac:bd:f6:68:03:a8:
         8b:bf:81:68:f3:2f:69:f1:56:ba:4b:22:7e:79:93:29:ee:0a:
         c3:aa:07:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:13:05 2026 by rpki-client