Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa
File:                     3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa (raw, json)
Hash identifier:          rXr2bJ39jCeqU4SAckeSsiqb861SznCx7EmadTic1Zo=
Subject key identifier:   75:03:3C:05:73:14:CC:7C:29:49:E3:49:70:FA:7D:86:D5:27:95:EC
Certificate issuer:       /CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
Certificate serial:       78ED23C1D261A4AD198183B7DF794DD9A265FAFF
Authority key identifier: C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa
Signing time:             Wed 04 Feb 2026 20:00:00 +0000
ROA not before:           Wed 04 Feb 2026 19:55:00 +0000
ROA not after:            Wed 03 Feb 2027 20:00:00 +0000
asID:                     267322
IP address blocks:        192.144.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl
                          rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:23:c1:d2:61:a4:ad:19:81:83:b7:df:79:4d:d9:a2:65:fa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
        Validity
            Not Before: Feb  4 19:55:00 2026 GMT
            Not After : Feb  3 20:00:00 2027 GMT
        Subject: CN=75033C057314CC7C2949E34970FA7D86D52795EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:f3:23:ac:fc:f3:7b:9b:3e:90:b9:09:27:
                    0a:21:60:9f:1d:7a:e3:a8:8e:f9:ad:d5:57:47:c6:
                    6b:6b:6a:53:53:70:2a:83:a8:1d:2f:54:8e:dc:5e:
                    ed:df:75:cc:93:f4:e5:87:37:54:a6:36:12:fb:81:
                    66:b9:7a:20:8e:0e:71:42:1e:54:c9:51:f2:83:e4:
                    ab:35:c3:c5:26:91:ca:e9:6d:ae:19:5c:4f:b5:4a:
                    ad:2e:cc:32:13:f5:e1:93:86:f0:49:5f:d9:ca:21:
                    63:24:7f:e9:05:ac:2d:82:1c:f1:d0:87:0c:2e:44:
                    e5:0d:87:f1:44:91:c7:06:e2:43:09:ad:5e:6d:77:
                    f1:09:a0:0a:fb:39:3c:b3:c3:c9:71:49:98:71:64:
                    9d:35:a2:d6:29:e2:4f:ad:0e:61:46:58:5f:9e:fd:
                    99:24:48:3c:b3:a8:d5:65:ac:37:91:fc:2a:87:6d:
                    68:f5:39:49:a5:01:31:0f:f6:fc:18:1f:e0:8c:67:
                    c2:c2:06:2c:58:74:d8:12:c6:80:ff:73:72:3c:88:
                    77:aa:c7:30:52:a8:c6:6f:7a:a5:5a:d4:75:1b:67:
                    d9:c0:f5:12:22:26:b1:a6:34:39:20:7d:12:54:f4:
                    a7:62:da:17:60:a7:b4:2f:f1:24:9f:91:05:32:1e:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:03:3C:05:73:14:CC:7C:29:49:E3:49:70:FA:7D:86:D5:27:95:EC
            X509v3 Authority Key Identifier:
                keyid:C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/3139322e3134342e37322e302f32342d3234203d3e20323637333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:6a:0c:33:a0:7d:11:de:13:40:36:49:4b:26:1d:ec:64:21:
         a9:ac:36:7b:59:f6:a8:df:c5:b6:40:01:2c:d4:c2:8b:1c:26:
         a4:32:1b:e4:50:cd:29:d4:ad:4f:38:38:71:90:08:e5:c6:51:
         5a:b3:61:25:19:12:2f:3d:c8:43:2f:02:80:9a:a7:ef:3b:ea:
         01:7a:bf:55:8e:e7:42:07:10:6e:21:9a:a3:97:28:76:1a:b3:
         c6:38:79:9a:bd:d3:5f:96:3b:33:cd:8e:3c:b9:db:38:04:5a:
         66:e4:af:87:0d:66:9a:e1:c2:c7:b3:f6:de:6c:e8:c4:0f:e5:
         5d:6f:7e:8c:44:bd:94:83:86:3d:aa:dd:b1:90:1e:a0:e3:a5:
         22:dc:09:e7:52:83:44:af:38:83:8e:7e:a0:46:86:45:16:d9:
         7b:7f:bd:03:91:9c:71:7f:24:0e:5a:41:aa:02:8c:fe:4e:47:
         32:51:e9:ed:f2:9b:ef:aa:1e:27:b6:cb:92:9c:5f:f9:d8:6d:
         d1:50:6c:65:a5:28:d9:e4:1a:73:80:ca:93:e4:6d:5f:da:59:
         76:d7:5d:7a:7b:34:55:1a:de:da:83:95:0a:cd:e0:c0:32:de:
         7b:a8:c8:d1:7c:9a:66:33:33:3a:7c:c0:55:83:14:30:4a:83:
         d7:24:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:16:04 2026 by rpki-client