Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3137302e37392e3136342e302f32322d3332203d3e203532393531.roa
File:                     3137302e37392e3136342e302f32322d3332203d3e203532393531.roa (raw, json)
Hash identifier:          IOm6rQ/Ex1jnkuhzMO94Dy7C96CZXrcbqlYMxeC6AaI=
Subject key identifier:   1B:C7:A8:F6:80:E5:C5:75:B6:09:C3:5C:30:26:8E:A8:D0:35:16:12
Certificate issuer:       /CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
Certificate serial:       40ECB65F142A4FEF2933502E243710D254FE85DC
Authority key identifier: 00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3137302e37392e3136342e302f32322d3332203d3e203532393531.roa
Signing time:             Thu 05 Feb 2026 08:00:09 +0000
ROA not before:           Thu 05 Feb 2026 07:55:09 +0000
ROA not after:            Thu 04 Feb 2027 08:00:09 +0000
asID:                     52951
IP address blocks:        170.79.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl
                          rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ec:b6:5f:14:2a:4f:ef:29:33:50:2e:24:37:10:d2:54:fe:85:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC
        Validity
            Not Before: Feb  5 07:55:09 2026 GMT
            Not After : Feb  4 08:00:09 2027 GMT
        Subject: CN=1BC7A8F680E5C575B609C35C30268EA8D0351612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:b3:b0:da:57:26:29:8b:be:b3:a2:9f:5d:
                    da:f2:82:b7:99:df:36:0c:23:78:2d:cc:53:5d:11:
                    62:76:07:f9:b5:b8:8b:7f:09:d0:e4:9f:48:1a:43:
                    b2:bb:f2:ab:d0:df:3d:2d:2b:b2:f1:94:24:d5:02:
                    f8:db:f1:45:8f:74:13:91:75:1c:75:18:89:be:a5:
                    d9:05:73:d4:98:c4:85:04:cf:72:01:d2:93:d2:26:
                    5b:ef:9f:a9:dc:d2:87:88:b6:e9:45:4d:d6:87:4e:
                    b1:f2:fa:d3:e5:57:e6:fa:cb:82:8d:14:6f:8d:52:
                    52:74:b0:e7:43:12:95:0d:d4:95:3b:d0:d0:3e:50:
                    d4:7e:1b:1c:88:9e:0e:1f:4b:1a:27:77:d1:77:cf:
                    26:c6:2c:8c:53:f9:b5:81:b4:91:37:87:91:10:74:
                    27:46:66:c8:6c:f7:8b:e0:bd:12:65:8c:61:07:c7:
                    a8:ac:05:94:d5:b9:db:2a:87:e7:44:af:92:9a:58:
                    3c:e2:39:f1:4d:e2:bc:fb:eb:03:dc:c1:30:9a:3e:
                    35:3c:1b:f7:1b:62:80:49:e1:cb:70:a7:c5:ac:8b:
                    02:fc:97:bb:a0:f8:df:c3:27:cf:db:a0:09:f6:89:
                    c6:8e:70:e2:a1:82:7c:06:04:58:ba:74:b5:33:28:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:A8:F6:80:E5:C5:75:B6:09:C3:5C:30:26:8E:A8:D0:35:16:12
            X509v3 Authority Key Identifier:
                keyid:00:BB:B3:56:86:5E:E3:E5:E7:33:9D:4D:63:3A:DE:63:B5:EA:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00BBB356865EE3E5E7339D4D633ADE63B5EA6ABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eu86Wt7B2qhm9PxdwkyaxCnXC8q2KgKC2prRqi35DYYc/1/3137302e37392e3136342e302f32322d3332203d3e203532393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:89:aa:04:b6:d8:97:95:ea:7b:3b:89:43:6e:72:27:ba:bc:
         17:46:99:66:6b:07:41:23:47:e6:75:54:11:da:26:37:03:84:
         15:1d:bd:32:a1:d0:40:4c:40:00:e6:89:da:4b:aa:c9:59:40:
         e6:b0:fa:7e:d7:7f:e3:c1:10:81:41:c4:5d:3e:9c:f7:8c:61:
         05:c8:06:c4:86:01:28:1a:3a:68:c8:2f:7c:eb:53:7b:87:8d:
         f0:89:86:d0:16:bf:3b:ad:1f:47:6a:e0:aa:77:23:c4:37:eb:
         a9:b5:17:7e:2a:2a:4d:55:82:07:fc:16:d6:3c:d8:dd:7d:0d:
         5e:b8:17:88:4e:8f:a0:99:90:0d:08:e8:24:2c:9d:43:34:20:
         f8:ca:89:9d:51:25:82:21:b0:c5:0a:3c:95:cd:bc:26:96:9c:
         46:08:67:93:12:1c:69:e4:9e:1c:e8:1f:de:70:e3:6a:8f:da:
         0b:e3:06:64:a7:4c:55:98:ce:fd:9e:79:1e:59:d5:79:ba:01:
         a6:af:2f:2b:97:44:cc:e6:c3:ec:ce:07:cd:06:4f:d0:5c:c5:
         c0:8c:b5:15:7a:de:13:06:89:fb:5c:4a:bd:db:e8:99:bb:86:
         ae:8c:e2:60:b0:2d:cf:6c:f1:dc:5d:38:1e:c4:bc:4f:4f:fa:
         0d:44:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:56 2026 by rpki-client