Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa
File:                     3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier:          qV9NZPspM3KKVhmVe1DENEA4d8wOeW2+jk1EM4bR4c0=
Subject key identifier:   31:2D:56:76:00:36:55:DD:20:B8:E3:B0:77:E3:EA:CF:8C:29:B4:62
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       52D4B03CD70FBFE4A85161F135B2428326D9E1FF
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa
Signing time:             Thu 05 Feb 2026 15:46:24 +0000
ROA not before:           Thu 05 Feb 2026 15:41:24 +0000
ROA not after:            Thu 04 Feb 2027 15:46:24 +0000
asID:                     264233
IP address blocks:        170.80.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d4:b0:3c:d7:0f:bf:e4:a8:51:61:f1:35:b2:42:83:26:d9:e1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: Feb  5 15:41:24 2026 GMT
            Not After : Feb  4 15:46:24 2027 GMT
        Subject: CN=312D5676003655DD20B8E3B077E3EACF8C29B462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:3e:ef:15:c8:55:97:3e:1e:82:9d:18:a2:
                    ee:22:23:b1:50:95:13:25:4d:40:47:12:1d:eb:57:
                    0e:a0:6d:80:3e:be:68:c1:d8:94:3f:6d:7a:db:dd:
                    b7:00:fe:b6:e4:c0:3f:56:cc:59:e5:64:c6:ad:78:
                    ca:05:20:5f:a1:ca:de:e5:fa:3d:92:e4:74:f1:0b:
                    36:c7:c3:5f:6c:5a:8a:2a:a7:43:3f:c2:5f:99:eb:
                    b3:cf:59:b2:ef:7e:e8:01:5a:cd:9c:fa:06:3f:40:
                    30:2e:99:ff:b3:ee:21:b5:45:ad:f5:a2:3e:2d:f2:
                    23:9e:ee:f8:c0:89:e0:1b:1c:d8:69:75:04:52:94:
                    14:55:30:3b:32:5f:f4:07:9b:b5:39:6f:45:f2:1d:
                    f7:25:70:53:ca:40:af:22:c1:51:83:6e:e4:f4:fb:
                    cf:69:92:86:c1:00:25:bb:aa:00:1c:d4:8b:d7:9e:
                    23:1d:32:27:17:7e:f4:0c:6e:cd:c0:66:26:4d:7a:
                    81:4f:1a:54:9d:16:2c:38:f0:25:f3:7f:a0:ee:b9:
                    37:0f:f4:82:6f:ee:af:50:ac:b3:b0:0c:ed:af:89:
                    14:cd:ed:56:8a:d4:1f:e3:70:5d:03:1d:44:b2:01:
                    4a:f0:78:17:42:68:7e:0d:30:a3:24:0d:d6:ad:d9:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:56:76:00:36:55:DD:20:B8:E3:B0:77:E3:EA:CF:8C:29:B4:62
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:df:0b:bc:e4:fb:c6:52:20:da:d3:6c:21:31:25:b2:bd:
         ad:9e:ae:d0:0c:0f:eb:64:01:1b:4b:b7:6f:03:20:b1:f1:b3:
         f8:d5:3e:30:41:ab:50:58:73:7d:8e:04:90:4f:f5:3f:e6:b3:
         65:f0:5a:70:ac:ac:44:a7:b5:73:c3:41:98:51:bf:c9:53:b4:
         8a:c4:d3:5c:7a:fb:30:f5:f0:9c:5f:dd:42:74:df:5b:56:bd:
         5c:4d:bc:ac:fc:4a:ae:7f:e3:d2:7c:48:8a:59:d2:ba:7c:8f:
         da:6e:9d:f1:87:06:c8:20:6f:66:d6:40:76:16:74:ad:63:8e:
         df:56:82:4f:16:6a:ab:53:de:63:91:d8:c4:1f:d4:a2:7e:b9:
         a6:55:c5:de:19:84:bd:58:7e:c9:0f:80:25:1b:f5:99:db:cd:
         a7:96:15:72:7e:92:23:c0:55:f6:24:6f:cd:91:f9:44:c6:79:
         99:ed:17:62:9c:dd:97:a3:5e:c3:ff:0f:28:cf:8f:06:fd:4e:
         67:0a:41:26:4f:ee:9f:c9:1b:e2:cb:b1:76:a1:91:fb:f6:83:
         c4:de:a1:59:b4:e7:68:6f:16:26:29:ce:3b:90:b8:2b:a9:a9:
         5b:70:c4:60:c3:66:4d:2d:9a:59:1c:6e:92:e4:c8:28:39:8d:
         46:97:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:51:17 2026 by rpki-client