Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e3132342e3232342e302f31392d3234203d3e203137323232.roa
File:                     3137372e3132342e3232342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          zS2bpsIvpXuqQgy4R/wfW06+tWND5bapkBmMqAk3VqY=
Subject key identifier:   0D:E8:7A:0A:A1:0B:2C:F8:D3:B1:4E:B3:53:BE:99:0B:C9:03:85:65
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       2B1EA3A6B09D6B8EFF9E138A4B23D339BE50D0F0
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e3132342e3232342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 05 Feb 2026 15:40:37 +0000
ROA not before:           Thu 05 Feb 2026 15:35:37 +0000
ROA not after:            Thu 04 Feb 2027 15:40:37 +0000
asID:                     17222
IP address blocks:        177.124.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1e:a3:a6:b0:9d:6b:8e:ff:9e:13:8a:4b:23:d3:39:be:50:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Feb  5 15:35:37 2026 GMT
            Not After : Feb  4 15:40:37 2027 GMT
        Subject: CN=0DE87A0AA10B2CF8D3B14EB353BE990BC9038565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:a6:bd:b7:40:3a:96:49:b8:16:36:24:e5:
                    31:f1:a1:72:e8:41:86:17:a2:72:5a:ae:31:1b:85:
                    fc:c7:78:30:c5:2e:f1:ea:33:51:31:0c:5f:ac:79:
                    f2:73:b3:44:e8:18:72:63:78:30:82:f2:cc:ea:64:
                    c0:2d:4f:e7:63:fd:61:b6:72:5f:83:53:89:88:dd:
                    04:fe:8f:d1:60:cf:ee:13:ce:79:d6:6d:86:73:20:
                    bb:60:a9:67:09:19:00:0e:2a:3e:58:28:c0:13:64:
                    13:d4:6a:bf:d1:1b:16:b7:2f:cd:2d:0b:c9:09:2f:
                    1b:f4:8b:70:47:32:95:66:da:1b:fa:48:a9:2f:a8:
                    bf:d3:0a:4d:aa:b8:65:05:be:84:b4:6c:fa:19:45:
                    b9:50:dd:35:26:1f:9f:55:c5:02:c7:4e:90:58:ea:
                    50:10:ba:c3:0b:f8:68:31:cf:1b:52:cd:1b:3d:43:
                    42:6a:1b:6f:48:f1:63:ae:9b:fd:8d:fa:1f:f2:83:
                    60:41:a0:25:b5:f9:3f:14:23:bc:2d:e9:2c:8f:e1:
                    c3:44:c4:16:d7:7a:e0:bc:74:d3:67:a1:d0:0d:cf:
                    e6:44:01:53:d7:e2:7b:cf:bd:74:e1:6b:5f:d1:cd:
                    08:ae:db:dd:7d:7f:f2:c6:1c:32:f3:36:a3:7d:5e:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:7A:0A:A1:0B:2C:F8:D3:B1:4E:B3:53:BE:99:0B:C9:03:85:65
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/3137372e3132342e3232342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:68:91:50:aa:6a:41:12:0b:30:0d:11:70:48:16:e6:ea:
         67:d1:0c:ab:f3:2b:9b:25:48:bd:d2:7c:e3:68:32:b6:30:3a:
         35:ba:be:8a:72:19:a8:1d:ad:af:05:0d:f8:bd:b2:4c:98:e3:
         37:8a:7c:f5:9c:25:11:25:01:3b:49:b2:2a:d8:3c:fd:0e:9b:
         82:b9:49:84:6d:d9:2d:1e:b7:85:c6:b4:86:6d:d4:c0:39:8d:
         70:00:ed:79:77:cb:3a:7c:49:3f:f1:aa:53:9d:4d:f5:cb:e8:
         42:a7:78:22:67:5d:36:7a:32:72:48:3d:7b:3d:e3:70:75:b9:
         d9:02:49:4c:25:3f:f9:51:ba:30:45:8e:31:87:de:f2:94:ca:
         38:5e:69:7b:8c:77:cc:09:05:5e:dd:10:e9:90:2c:0f:c3:c9:
         07:20:65:ec:07:55:01:0f:c8:e2:dc:a4:0d:b3:70:22:0d:28:
         a5:f3:87:79:cd:d2:d5:5a:6f:9f:5f:d0:77:13:61:25:0a:5e:
         20:40:aa:bf:b5:60:f6:df:d8:1e:01:d2:37:4d:a8:2e:c6:7c:
         eb:da:cf:ff:3d:f9:35:ad:16:3f:f4:3f:d3:e2:95:19:95:9c:
         a9:12:02:27:97:39:99:a4:34:9c:6a:da:84:d7:30:64:55:b4:
         db:88:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:45 2026 by rpki-client