Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e302e302f32312d3234203d3e203238323634.roa
File:                     3137392e3132342e302e302f32312d3234203d3e203238323634.roa (raw, json)
Hash identifier:          4ccXWjOQaPDRpN6aAlDLupCDGgaBUwrZAcx/zi8LSmg=
Subject key identifier:   C2:23:7B:36:20:25:91:97:2F:73:F8:8E:AA:A7:8B:31:97:1C:5F:91
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       6F2C7642353898BCAD11F08DF2838F2659B6F0FB
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e302e302f32312d3234203d3e203238323634.roa
Signing time:             Thu 05 Feb 2026 13:18:49 +0000
ROA not before:           Thu 05 Feb 2026 13:13:49 +0000
ROA not after:            Thu 04 Feb 2027 13:18:49 +0000
asID:                     28264
IP address blocks:        179.124.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2c:76:42:35:38:98:bc:ad:11:f0:8d:f2:83:8f:26:59:b6:f0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Feb  5 13:13:49 2026 GMT
            Not After : Feb  4 13:18:49 2027 GMT
        Subject: CN=C2237B36202591972F73F88EAAA78B31971C5F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:a8:9e:af:4a:ec:dc:d6:04:2c:fb:f3:5d:
                    2e:9c:22:7d:e3:74:06:ef:68:54:90:04:78:b9:64:
                    8f:84:15:36:1f:3b:6b:6b:9c:09:fa:92:6d:32:e2:
                    24:6b:fa:a8:44:66:b5:e1:81:d7:44:26:ae:c3:9a:
                    eb:de:e6:f0:eb:64:0b:e5:a2:73:58:e5:7d:dc:39:
                    d4:52:a6:a6:f0:b4:ba:99:d7:2e:f6:1e:7b:8a:4f:
                    47:4e:1c:95:8e:eb:37:fd:64:fb:20:5f:eb:98:54:
                    c7:64:96:3f:75:27:11:63:76:3e:a6:94:f3:ed:a7:
                    2b:a4:b6:4a:84:f2:34:82:00:cb:d8:90:83:26:be:
                    fc:81:78:c1:99:9f:5a:1c:b0:90:b8:7b:8b:79:d8:
                    45:ff:f7:13:18:43:86:68:5f:a0:81:bd:2d:94:16:
                    cb:59:1a:a8:93:02:62:43:27:07:2a:c3:00:9e:d7:
                    cd:07:70:68:fd:2a:8b:f8:5d:20:74:db:5a:0e:3f:
                    69:4d:ff:3a:4c:d5:43:f6:39:36:25:77:75:a2:b3:
                    32:90:0c:e2:7f:30:76:7b:55:4c:ca:ae:79:0f:f5:
                    04:d9:f8:b5:1f:c9:0a:5c:da:90:51:ec:04:85:73:
                    50:25:18:60:08:8d:32:b7:25:41:1c:78:7f:1c:08:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:7B:36:20:25:91:97:2F:73:F8:8E:AA:A7:8B:31:97:1C:5F:91
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e302e302f32312d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:6d:c0:b6:4a:dd:46:6e:53:ee:47:79:94:31:9b:1a:fa:e0:
         fa:61:40:ad:40:98:26:a8:04:78:65:04:0d:a6:17:2b:4a:fc:
         6f:df:26:e0:a2:a5:96:33:4c:f0:c8:4c:12:68:2b:fc:fb:6c:
         06:bb:c4:61:ae:7c:95:47:e1:ed:b3:96:2d:82:4e:fc:09:63:
         e9:5b:80:86:53:3a:b6:05:0b:a7:7c:95:5f:fd:e8:f6:4e:2d:
         00:eb:ed:a1:b1:cb:08:95:63:d8:75:85:5e:d4:17:96:93:d7:
         05:1d:3c:f8:92:42:b3:12:d7:3d:21:75:69:c0:55:9a:c4:da:
         07:cd:f2:03:65:45:90:0f:d8:8e:68:40:d6:9e:e4:76:4c:e1:
         26:5a:f4:fe:9c:93:16:ec:ac:b8:61:e4:c9:84:79:23:c6:5b:
         0a:bd:b5:04:44:f2:2a:15:3c:e8:6e:76:b1:20:7f:8c:ab:1e:
         51:ee:b0:85:52:78:e4:07:8a:2d:73:d3:44:e8:b5:84:58:a3:
         72:69:3b:1d:8f:17:18:da:62:90:d1:ce:18:cb:82:30:3a:ee:
         c3:a3:ec:c6:60:ba:89:55:69:6b:78:e2:7d:57:31:f1:63:cd:
         cd:c4:b6:52:97:83:e0:b9:ff:9a:11:07:fe:a4:23:26:1d:0b:
         e5:16:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:10 2026 by rpki-client