Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa
File:                     36372e3135392e3232342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          81bgKgQBgFLiFtEFJZkyLEPjwgZzu6TERuxyS9ufF1A=
Subject key identifier:   29:AA:69:59:0B:AC:B1:53:2B:72:55:EE:2C:BB:02:DF:79:68:93:66
Certificate issuer:       /CN=1259CD7907D08E561037139E148D8385DFD916E2
Certificate serial:       626579A6F5A60DB4F74B45EE12BD6FAC7FBB71A5
Authority key identifier: 12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa
Signing time:             Thu 05 Feb 2026 15:40:38 +0000
ROA not before:           Thu 05 Feb 2026 15:35:38 +0000
ROA not after:            Thu 04 Feb 2027 15:40:38 +0000
asID:                     17222
IP address blocks:        67.159.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl
                          rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 16:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:65:79:a6:f5:a6:0d:b4:f7:4b:45:ee:12:bd:6f:ac:7f:bb:71:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259CD7907D08E561037139E148D8385DFD916E2
        Validity
            Not Before: Feb  5 15:35:38 2026 GMT
            Not After : Feb  4 15:40:38 2027 GMT
        Subject: CN=29AA69590BACB1532B7255EE2CBB02DF79689366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:00:81:c6:f8:3e:33:f9:7b:4d:80:40:50:
                    ef:75:77:42:40:79:97:a1:d5:52:9b:be:f1:c5:c6:
                    6d:a7:d4:c1:98:e1:00:05:5e:44:b4:bc:6e:2e:33:
                    c5:58:02:b7:36:1c:6e:03:9d:7e:95:55:90:6e:88:
                    be:c8:6a:ee:5e:45:83:74:af:3d:d9:ce:0a:4f:99:
                    2b:3b:32:73:f2:03:49:86:8b:4b:a7:bf:b1:af:fe:
                    4e:6b:ee:46:ff:1c:65:54:02:cd:4f:c1:a9:4a:da:
                    25:d8:d5:93:19:39:84:60:05:90:bc:eb:b7:86:ed:
                    c4:bb:9a:17:0b:2e:9e:54:3a:ce:7b:7a:32:22:ec:
                    5b:9b:b9:44:b7:7e:4b:48:60:cd:5d:ff:73:e8:b0:
                    75:37:cf:81:79:ce:f8:1e:0b:48:4b:53:c1:d3:4c:
                    82:a5:6c:a8:0e:53:1a:aa:d8:bc:1c:51:48:da:22:
                    fa:e1:e6:cf:10:20:c4:d4:43:37:64:98:79:7a:6d:
                    0f:5c:68:2d:5a:a3:26:13:d6:d0:92:e6:b7:bb:cb:
                    31:5e:ce:c2:0a:74:85:37:29:73:bf:78:e6:39:54:
                    3a:e1:0c:74:c1:df:06:6b:af:c0:c4:4e:18:1e:69:
                    6d:c3:82:33:93:c6:7b:ae:35:2b:c3:98:65:7a:7d:
                    bd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AA:69:59:0B:AC:B1:53:2B:72:55:EE:2C:BB:02:DF:79:68:93:66
            X509v3 Authority Key Identifier:
                keyid:12:59:CD:79:07:D0:8E:56:10:37:13:9E:14:8D:83:85:DF:D9:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/1259CD7907D08E561037139E148D8385DFD916E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1259CD7907D08E561037139E148D8385DFD916E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/1/36372e3135392e3232342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:d9:ff:cc:d1:94:13:37:e0:21:6c:6b:b4:3f:39:74:e7:
         f4:1c:93:8d:01:38:24:72:95:c9:22:03:84:e2:4b:4e:74:24:
         af:fb:f1:fd:82:f2:1f:62:e3:cd:65:38:b8:8e:61:a7:14:f4:
         29:3d:ec:c1:3d:fa:31:d2:01:01:14:2a:ac:f7:31:17:4b:0e:
         f2:08:57:09:be:bb:45:14:96:83:dc:58:9d:57:b1:61:58:6c:
         15:3e:e8:d0:42:21:25:d0:25:f6:3b:4a:91:ba:ea:9c:8e:c1:
         b7:72:d0:f6:0c:14:f5:73:27:0f:12:cb:cc:4b:31:80:ad:90:
         5c:f9:1c:a1:3a:7d:15:b4:90:63:90:7d:95:54:d5:46:96:54:
         81:af:83:9c:f0:d4:b6:48:3d:ed:c2:1c:5c:3a:42:81:b2:06:
         b2:a6:00:27:be:52:93:99:c0:cd:4e:b7:f0:07:41:1b:f5:6f:
         82:4a:c8:5f:79:a8:a9:9b:f2:77:04:8f:19:1a:5a:21:a1:ce:
         5d:c8:37:46:3d:86:9c:2e:b4:41:6f:3f:f8:50:ac:62:63:6e:
         6e:b1:d0:9b:3e:99:1f:51:4c:7d:33:4c:83:bc:1d:25:a2:22:
         d2:e5:61:a1:7f:ed:2e:f8:97:50:b0:c7:8a:7a:94:26:b2:3d:
         b2:55:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:05 2026 by rpki-client