Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa
File:                     3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          a+Ajd1rNIEoZBbQUwIEbu4xFXyizbD6tjcDSd8IkJ/s=
Subject key identifier:   63:47:7C:DF:6C:C7:79:E5:CF:92:15:DE:F1:5C:C7:23:51:93:DC:7A
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       54EE01C3C9B6FFEE6DD1B9AC7DE708AF7113A6D2
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa
Signing time:             Thu 19 Feb 2026 00:04:00 +0000
ROA not before:           Wed 18 Feb 2026 23:59:00 +0000
ROA not after:            Thu 18 Feb 2027 00:04:00 +0000
asID:                     266312
IP address blocks:        170.238.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ee:01:c3:c9:b6:ff:ee:6d:d1:b9:ac:7d:e7:08:af:71:13:a6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Feb 18 23:59:00 2026 GMT
            Not After : Feb 18 00:04:00 2027 GMT
        Subject: CN=63477CDF6CC779E5CF9215DEF15CC7235193DC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:eb:c8:01:5a:01:2f:01:89:6a:88:df:d1:
                    53:cb:d0:e8:0e:76:52:26:3f:c9:85:51:85:d8:17:
                    c5:f5:65:d4:58:35:2f:b6:f9:50:f6:06:5f:d9:e2:
                    69:7b:5c:43:89:a4:fb:2c:1d:be:52:5e:b6:7a:46:
                    0b:31:75:9d:68:da:8c:2f:27:1a:af:1f:59:62:44:
                    ac:8b:91:71:ac:ed:32:2d:7f:a4:16:e5:2f:2e:0d:
                    ef:74:77:12:65:f8:6c:af:61:20:5b:df:9b:07:b6:
                    e3:75:c5:3f:9c:f7:05:05:19:6e:10:9e:1b:9f:90:
                    47:f5:86:7f:d0:7d:2c:5f:32:f6:d4:30:07:ba:8b:
                    4e:fd:dc:a3:37:5e:ca:3e:e3:8b:cd:d3:bc:da:d0:
                    e4:35:77:00:04:15:66:53:a5:a9:95:82:32:9b:d0:
                    e6:2c:52:25:fe:66:75:fb:dc:96:30:ae:f0:22:ff:
                    99:03:77:c2:2c:ce:17:ba:ce:4f:4f:21:35:2f:0a:
                    59:b4:92:5e:e8:f4:a2:7c:cb:fc:b8:74:52:4d:2c:
                    71:ec:f0:51:78:3e:2b:60:c5:d4:06:65:cb:dc:bc:
                    50:21:37:29:0e:70:61:31:93:6f:2f:7e:7b:17:ce:
                    4e:75:7b:aa:c4:77:db:e6:22:73:42:71:bb:87:68:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:47:7C:DF:6C:C7:79:E5:CF:92:15:DE:F1:5C:C7:23:51:93:DC:7A
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35372e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:4c:b4:cc:82:1d:08:c8:95:51:06:9e:67:c9:91:79:80:
         45:ed:ac:81:cd:3a:5f:de:d7:b1:29:99:df:77:d3:3a:8c:84:
         49:0c:44:1e:32:7e:90:d1:35:be:a0:07:47:68:6e:c9:71:94:
         e4:6b:84:31:8d:58:4b:35:cc:35:56:b3:57:67:ef:66:2b:3b:
         0c:b7:d4:b4:d0:2c:b9:94:f0:f1:0a:c9:37:b1:80:ee:83:cc:
         18:c3:9b:13:6b:05:f3:d8:d1:b3:75:bb:78:f3:90:2c:50:28:
         45:7d:cd:55:f8:83:b4:52:81:7b:8c:74:4b:ed:da:5d:27:bb:
         81:c9:f8:b9:c4:fa:13:a0:38:94:aa:36:66:ce:aa:dc:94:71:
         fc:86:1e:5c:48:af:89:2b:76:52:05:90:fb:6d:fa:f6:74:ae:
         5a:63:c0:fe:53:c3:0b:5d:52:1b:e5:2c:32:99:c3:4f:e9:75:
         af:2f:9b:a3:25:4a:a4:f4:e5:65:3b:66:4d:54:18:b6:32:f0:
         f5:71:7d:ce:99:c5:99:b8:ed:01:66:4e:29:f2:da:8b:a8:b6:
         ea:38:80:eb:64:85:d2:78:18:c2:d6:b5:8a:3e:c7:5f:dc:77:
         81:41:35:fe:a0:1b:1a:35:a1:0d:ff:7e:da:4a:85:1a:96:5f:
         c1:02:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:50:47 2026 by rpki-client