Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137302e37392e3139322e302f32322d3234203d3e20323632333738.roa
File:                     3137302e37392e3139322e302f32322d3234203d3e20323632333738.roa (raw, json)
Hash identifier:          569psRKXuF9nDbugWAmkq0YB7za8KkbULBmVLNeZVGA=
Subject key identifier:   6F:44:3E:33:A1:9F:4A:87:7D:D3:59:75:EB:EA:F8:D1:12:4F:A7:02
Certificate issuer:       /CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
Certificate serial:       52E4F2A52014FDD0D6DEE57542234CE65AAC3679
Authority key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137302e37392e3139322e302f32322d3234203d3e20323632333738.roa
Signing time:             Thu 05 Feb 2026 20:23:11 +0000
ROA not before:           Thu 05 Feb 2026 20:18:11 +0000
ROA not after:            Thu 04 Feb 2027 20:23:11 +0000
asID:                     262378
IP address blocks:        170.79.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl
                          rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e4:f2:a5:20:14:fd:d0:d6:de:e5:75:42:23:4c:e6:5a:ac:36:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA
        Validity
            Not Before: Feb  5 20:18:11 2026 GMT
            Not After : Feb  4 20:23:11 2027 GMT
        Subject: CN=6F443E33A19F4A877DD35975EBEAF8D1124FA702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cb:4f:94:7f:bd:43:da:17:0c:d5:a0:c5:22:
                    3d:09:78:67:db:21:fd:eb:4c:62:8e:73:37:1c:0f:
                    ed:d4:ba:fa:1e:ff:0f:2f:dc:9c:6e:13:1f:32:7c:
                    45:a4:ff:f1:aa:97:cb:b9:e9:69:b3:28:cf:53:10:
                    19:07:6f:9f:f0:78:56:ad:32:1d:e3:50:f1:97:28:
                    f8:7d:d3:59:99:e3:a3:b1:0b:08:78:8c:52:d4:4c:
                    bc:e5:32:b6:72:40:e2:34:13:86:74:75:ad:a0:be:
                    24:00:f6:9e:73:81:79:63:da:1c:46:0c:2a:fe:e0:
                    51:96:f6:79:82:0e:a1:0f:b4:53:7b:f1:2c:28:b4:
                    fe:94:dd:a8:01:3b:59:e5:b0:31:58:7e:ff:a2:35:
                    5d:02:96:a1:a3:2e:b3:19:50:85:08:30:1b:73:a6:
                    77:2c:c3:02:4d:f3:f3:1a:be:2e:2f:20:d8:73:07:
                    66:79:80:8f:d5:d1:0e:56:54:3c:ed:23:c8:16:1b:
                    47:d1:2f:ca:b5:cb:31:bd:91:aa:ec:83:81:d1:06:
                    ec:71:9c:8a:e7:c7:29:55:e2:14:d0:27:7b:bd:bb:
                    43:74:46:b9:8f:20:ac:5c:c8:36:b8:92:a5:1a:5f:
                    53:7d:16:7c:64:9b:8a:e3:40:29:5e:7f:d3:3a:f2:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:3E:33:A1:9F:4A:87:7D:D3:59:75:EB:EA:F8:D1:12:4F:A7:02
            X509v3 Authority Key Identifier:
                keyid:12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/3137302e37392e3139322e302f32322d3234203d3e20323632333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:87:28:94:5e:f9:1a:b0:bc:2e:71:18:d3:ea:58:d6:e6:
         b1:b4:24:1e:62:c4:a0:a6:ed:b6:fc:5b:c2:3d:9b:88:11:4e:
         d3:71:4a:01:e6:9c:fa:3e:4e:14:20:db:f0:5b:0f:63:25:53:
         37:e7:91:64:13:0a:8f:d7:f5:20:18:28:6c:18:41:b8:b2:4a:
         dc:2b:a5:0d:2e:bd:5f:d6:9f:88:21:2f:95:02:19:e8:ce:a4:
         bc:63:8d:78:46:2c:f6:88:8e:95:cb:3c:f6:3d:46:1a:44:5d:
         22:e3:8b:52:6a:4d:e9:93:f9:30:ab:76:9d:8b:ec:55:d5:8b:
         2a:74:26:e3:99:47:aa:6e:fc:ca:c7:2d:4c:66:50:e6:69:43:
         86:17:41:13:6c:51:d9:a0:0f:27:56:15:5f:d8:6d:3f:6f:29:
         35:3e:6d:5d:b2:66:03:e3:23:26:b3:8a:7f:12:61:62:71:8c:
         e0:73:60:6b:b1:01:87:18:19:f0:1d:80:aa:6f:f8:40:34:fd:
         f0:5e:0e:fe:97:34:0f:84:00:81:43:dd:74:f5:20:5a:e5:9a:
         50:91:b8:b9:43:ae:0c:e8:92:7b:d0:f0:b9:3e:62:5f:8c:23:
         aa:89:6e:78:3c:95:ec:19:75:5b:12:af:11:d0:34:00:9e:46:
         77:43:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 20:38:05 2026 by rpki-client