Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
File:                     3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa (raw, json)
Hash identifier:          FlnQNNut+j/0Vybq1+OCTyV66EdfaaWlQnHDBMZvdfo=
Subject key identifier:   ED:94:04:40:7A:BD:19:4C:6A:7C:09:20:09:22:92:37:52:6C:29:8F
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       57AD51FC54EF889E5DE53688A1D4829158DB64E9
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     266320
IP address blocks:        170.238.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ad:51:fc:54:ef:88:9e:5d:e5:36:88:a1:d4:82:91:58:db:64:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=ED9404407ABD194C6A7C092009229237526C298F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:fb:2f:b9:fe:ba:8e:d3:62:91:f3:d1:d1:
                    05:d1:b7:a7:e6:c0:73:5d:de:a8:6b:bf:59:1f:bd:
                    4a:4b:a4:94:7e:81:7e:49:33:86:ec:32:37:c2:5c:
                    bb:36:aa:30:e6:81:a8:41:0c:22:e7:b9:cc:d7:cb:
                    d2:f9:37:d3:ce:bb:6c:88:8a:92:75:25:49:02:41:
                    f4:15:71:8f:87:33:3a:00:38:0d:1f:f5:48:42:55:
                    c1:aa:3c:92:6d:43:8d:94:5d:5e:0a:f4:dd:47:69:
                    53:51:1a:4e:a7:d8:87:5d:15:32:f2:86:93:db:bd:
                    73:9b:25:e8:48:e7:9b:25:9b:0b:84:70:e1:13:7b:
                    c4:60:d1:05:96:5d:dc:1d:c5:6d:53:76:ba:5c:a8:
                    a2:4a:c0:52:65:21:7c:91:90:51:2b:0a:5c:60:50:
                    1a:81:1d:c2:35:73:f3:c3:a7:fc:9f:82:5e:cb:1d:
                    3e:98:a5:f8:97:5c:90:44:8e:dd:3e:c2:a8:c4:7f:
                    35:f0:46:f0:6f:3d:57:cd:ae:97:3f:6c:23:34:79:
                    bc:0f:46:e2:10:16:c3:62:3a:36:84:8b:55:01:94:
                    d9:3a:fa:54:4e:4d:77:82:f2:25:b0:f6:c0:5e:52:
                    da:04:ae:8a:e6:88:60:9f:31:76:03:66:11:91:f7:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:94:04:40:7A:BD:19:4C:6A:7C:09:20:09:22:92:37:52:6C:29:8F
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133362e302f32332d3233203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:d8:44:ae:fd:eb:c8:b6:d9:a0:da:19:c2:cb:d9:da:54:ca:
         82:5f:57:e8:14:18:ff:2a:31:5f:23:58:8c:ec:f1:32:81:38:
         1d:fb:ab:0b:79:16:11:8c:c9:4f:d1:19:d8:d6:c7:18:16:68:
         44:fc:41:b0:fb:38:d2:54:32:84:42:6e:42:fc:a2:4b:56:39:
         59:59:25:16:2d:72:69:9b:00:db:42:05:ff:d9:e0:fe:db:98:
         aa:b3:aa:8f:2c:fa:86:16:88:3a:17:9b:2c:ae:45:af:14:e3:
         ed:51:8d:21:77:de:bd:84:08:d7:5e:09:20:99:f0:10:f7:0a:
         63:08:4a:cf:f3:7a:c3:1a:a6:38:30:5a:2b:6c:72:3e:4e:9b:
         e0:c5:74:0c:99:cd:9e:72:4f:3c:3d:98:5c:81:7f:c8:01:40:
         d6:d5:6a:b8:04:63:e8:29:06:06:d6:ef:64:de:78:7f:35:41:
         f0:b3:c4:3f:ff:07:33:32:70:78:de:f2:b5:34:08:fb:c1:0e:
         51:89:55:7f:b7:1a:1c:c5:3d:9d:ac:46:fd:94:c7:ba:14:b4:
         79:66:dd:3b:b2:0f:b6:36:b5:93:15:45:31:90:67:ac:fa:41:
         e0:ac:ea:0c:ed:75:37:96:94:39:1b:83:7d:2f:8c:86:96:76:
         56:73:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:25 2026 by rpki-client