Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa
File:                     3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          zEuZSqn5bZ8xb1825r2MOOLgbSmhE1/+gK04rIH8GSc=
Subject key identifier:   06:B9:90:B4:48:88:EA:47:09:A9:21:2F:4B:F5:B9:82:AC:2A:06:29
Certificate issuer:       /CN=294426E31AEAEBF273647549DD459DE98A112431
Certificate serial:       0A53B0062AFD8B06FB36444CEC7A73E6B02FB312
Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa
Signing time:             Thu 05 Feb 2026 22:19:18 +0000
ROA not before:           Thu 05 Feb 2026 22:14:18 +0000
ROA not after:            Thu 04 Feb 2027 22:19:18 +0000
asID:                     263395
IP address blocks:        177.125.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl
                          rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:53:b0:06:2a:fd:8b:06:fb:36:44:4c:ec:7a:73:e6:b0:2f:b3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431
        Validity
            Not Before: Feb  5 22:14:18 2026 GMT
            Not After : Feb  4 22:19:18 2027 GMT
        Subject: CN=06B990B44888EA4709A9212F4BF5B982AC2A0629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:f3:40:4a:55:06:59:c5:a0:f0:72:e9:2e:
                    32:61:21:06:c7:7a:4d:55:0d:fb:14:8e:65:4e:51:
                    39:62:a2:21:f2:88:09:a1:be:ee:83:bb:e5:64:f7:
                    2f:ff:a6:cf:a2:46:8b:e5:b5:5a:db:a4:01:27:57:
                    a2:55:ee:9e:28:84:7c:8b:f4:8f:32:ae:16:a2:0e:
                    19:e0:51:fd:a8:4f:5a:d4:d8:2e:07:52:ba:59:b8:
                    14:6b:8e:cc:32:a6:2a:b2:9b:ed:43:4d:b5:3f:dc:
                    1b:a1:d4:c5:e0:c4:f7:08:07:bd:d5:e0:e1:30:10:
                    49:5e:3c:3b:4e:3b:3d:68:25:c4:34:01:57:4a:c2:
                    a2:64:1a:29:5b:d9:7a:a0:75:80:d8:bb:dc:82:c3:
                    0b:fd:75:9c:71:af:7a:b3:a2:70:62:e0:cb:41:2d:
                    87:fd:38:c4:aa:ec:5f:71:46:be:78:3d:73:70:f4:
                    92:9a:d0:6b:c9:f3:d9:4a:31:59:7f:33:1b:fa:9b:
                    51:3c:f9:ab:eb:66:d8:57:1b:02:e1:92:f0:21:e7:
                    8f:b5:be:56:69:52:3e:9d:3b:ce:d0:1c:b6:08:ee:
                    a0:8b:8b:29:47:ae:d4:be:7d:7e:83:54:1c:d4:0a:
                    97:a2:1c:a6:fd:77:a0:df:c3:3e:94:75:36:55:b8:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B9:90:B4:48:88:EA:47:09:A9:21:2F:4B:F5:B9:82:AC:2A:06:29
            X509v3 Authority Key Identifier:
                keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:67:06:92:fc:9a:61:dc:eb:bc:c5:35:44:97:c9:be:3a:
         a9:cd:15:d6:c1:64:37:a9:ba:f3:33:e1:ad:4f:f5:44:3a:7b:
         92:dd:1e:5c:28:85:84:b6:8d:3e:73:00:74:6e:cf:7b:7a:2b:
         3f:88:4b:f4:da:7c:c9:49:d9:92:3e:26:69:5e:21:6d:c4:08:
         0e:0d:43:87:55:59:05:f9:7c:00:61:1b:cf:75:77:6b:a5:7b:
         bf:91:af:ae:9a:14:2d:d0:95:33:b5:a1:78:9c:2b:7b:81:23:
         74:fb:cc:20:57:02:df:9a:59:18:9d:b9:29:1a:59:3d:78:98:
         0d:9d:51:b4:db:4e:5d:eb:65:6a:d5:c4:34:ec:58:4b:8d:1f:
         87:0e:f0:ff:c8:31:eb:38:49:ac:96:24:df:1f:34:85:27:8e:
         ea:5f:95:5d:f1:7f:59:96:9f:33:d6:90:79:63:43:cd:70:d9:
         11:3a:62:57:03:ef:4a:3c:78:c4:f5:9c:98:39:22:cb:4c:ef:
         06:c1:94:79:18:19:13:e5:4d:c7:01:11:11:95:fe:17:9a:15:
         4c:13:76:59:d4:05:9f:2c:51:04:01:a2:9f:14:5b:24:dd:f9:
         58:a8:25:be:79:aa:ad:44:8a:59:54:cb:c8:91:19:23:7b:82:
         d4:b6:c2:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUClOwBir9iwb7NkRM7Hpz5rAvsxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4
QTExMjQzMTAeFw0yNjAyMDUyMjE0MThaFw0yNzAyMDQyMjE5MThaMDMxMTAvBgNV
BAMTKDA2Qjk5MEI0NDg4OEVBNDcwOUE5MjEyRjRCRjVCOTgyQUMyQTA2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrPNASlUGWcWg8HLpLjJhIQbH
ek1VDfsUjmVOUTlioiHyiAmhvu6Du+Vk9y//ps+iRovltVrbpAEnV6JV7p4ohHyL
9I8yrhaiDhngUf2oT1rU2C4HUrpZuBRrjswypiqym+1DTbU/3Buh1MXgxPcIB73V
4OEwEElePDtOOz1oJcQ0AVdKwqJkGilb2XqgdYDYu9yCwwv9dZxxr3qzonBi4MtB
LYf9OMSq7F9xRr54PXNw9JKa0GvJ89lKMVl/Mxv6m1E8+avrZthXGwLhkvAh54+1
vlZpUj6dO87QHLYI7qCLiylHrtS+fX6DVBzUCpeiHKb9d6Dfwz6UdTZVuE6pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBrmQtEiI6kcJqSEvS/W5gqwqBikwHwYDVR0j
BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT
bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3
MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGb0ZxQng3eFN2U3JqMzJaRjJ6SnRCcUNMaXRFRUdEMng0OVZxZFE1U240LzEv
MzEzNzM3MmUzMTMyMzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArF9fDANBgkqhkiG9w0BAQsFAAOCAQEAMy1n
BpL8mmHc67zFNUSXyb46qc0V1sFkN6m68zPhrU/1RDp7kt0eXCiFhLaNPnMAdG7P
e3orP4hL9Np8yUnZkj4maV4hbcQIDg1Dh1VZBfl8AGEbz3V3a6V7v5GvrpoULdCV
M7WheJwre4EjdPvMIFcC35pZGJ25KRpZPXiYDZ1RtNtOXetlatXENOxYS40fhw7w
/8gx6zhJrJYk3x80hSeO6l+VXfF/WZafM9aQeWNDzXDZETpiVwPvSjx4xPWcmDki
y0zvBsGUeRgZE+VNxwEREZX+F5oVTBN2WdQFnyxRBAGinxRbJN35WKglvnmqrUSK
WVTLyJEZI3uC1LbC3g==
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:30 2026 by rpki-client