Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          kiQjBuQGmQTbmcBRBw8xwAtDVwFuGY8XxZQsqYDcAcc=
Subject key identifier:   A7:B2:A9:64:BD:D1:B9:73:4B:2B:EB:20:13:A6:FA:D7:CA:86:62:16
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       13FA7770CE3A81CDABFCDEC23C9591F4C6C6581F
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa
Signing time:             Wed 04 Feb 2026 20:00:02 +0000
ROA not before:           Wed 04 Feb 2026 19:55:02 +0000
ROA not after:            Wed 03 Feb 2027 20:00:02 +0000
asID:                     266320
IP address blocks:        170.238.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fa:77:70:ce:3a:81:cd:ab:fc:de:c2:3c:95:91:f4:c6:c6:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Feb  4 19:55:02 2026 GMT
            Not After : Feb  3 20:00:02 2027 GMT
        Subject: CN=A7B2A964BDD1B9734B2BEB2013A6FAD7CA866216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:19:5b:36:bb:5a:15:18:da:98:2f:9c:ea:
                    da:73:ba:7e:b3:8a:63:be:89:e4:78:d5:2d:c3:95:
                    16:a8:96:95:8a:80:fc:1d:e6:11:0f:dd:a3:d2:fa:
                    00:a2:70:86:18:7f:da:ad:b9:ab:d0:14:37:b4:31:
                    45:9a:fa:cf:ed:17:73:d7:d3:f6:d6:34:5c:61:30:
                    d8:ae:4e:3b:55:09:84:3a:2c:f3:83:57:b7:12:9c:
                    fb:66:f3:b9:c8:36:21:1c:22:64:ea:a2:e5:2c:26:
                    1c:d8:ff:ae:82:9f:d4:84:3e:7a:99:51:f5:6b:ee:
                    6a:9d:70:63:6d:63:d2:38:24:46:4b:e9:2f:e6:39:
                    66:cb:2f:06:ca:d5:f6:8c:61:f3:a5:20:2f:d8:bf:
                    ee:1e:b0:73:e3:d9:81:5c:f7:97:81:85:1b:81:ca:
                    63:45:03:92:bf:9d:14:f1:9c:3e:19:ca:9e:73:4a:
                    88:95:44:fe:a6:17:64:2c:1d:42:12:a1:35:15:52:
                    0d:bb:68:36:ad:69:68:ba:59:c5:14:68:a6:7e:54:
                    77:ec:ba:e3:d6:48:53:0a:bd:e7:e6:25:c9:e5:1b:
                    ce:1b:f0:cc:b4:e4:83:f2:0b:a2:89:7b:99:19:c2:
                    55:96:28:19:dd:4b:3c:79:73:9c:67:2e:b8:74:b4:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B2:A9:64:BD:D1:B9:73:4B:2B:EB:20:13:A6:FA:D7:CA:86:62:16
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133382e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:f1:21:70:66:ab:7d:78:86:49:36:10:aa:a2:24:d4:8a:
         38:f7:38:8f:db:7d:3a:01:3a:32:90:0f:36:26:1f:c8:2d:ba:
         04:aa:d7:ac:b2:4c:c4:60:b9:d0:1e:c8:1f:5e:38:21:d9:cc:
         a0:04:74:e1:d9:58:fc:6e:4e:7b:db:1e:99:41:30:7e:20:55:
         b9:31:1b:9f:ab:0d:70:65:9e:06:c6:4c:19:70:15:7f:68:72:
         72:cd:1a:42:b7:af:a4:22:15:25:40:97:a5:d4:0c:21:d1:73:
         c5:f9:26:6b:12:22:5b:cf:15:03:27:ad:63:0c:ae:f2:50:a1:
         ea:45:e0:ff:d4:e1:77:4f:ba:1b:bf:99:65:60:8b:ca:7e:57:
         2a:43:d1:c3:50:b7:d1:80:5f:c0:97:e6:03:1e:67:11:26:e7:
         e5:44:7f:84:ef:f1:c0:30:b3:95:9a:e4:97:b5:ab:35:dc:b6:
         2f:0c:13:e3:99:11:5d:5d:2d:eb:e6:4c:a8:fa:d6:58:57:78:
         e9:53:67:82:59:04:2c:18:12:c1:a4:63:d1:1c:5f:5e:10:4c:
         e7:5b:22:42:6d:29:a4:e7:39:40:e5:8a:8d:f9:be:5e:e8:90:
         da:04:60:98:72:02:46:20:2a:92:08:32:4b:84:1d:3b:c2:ea:
         2b:d7:af:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:51:13 2026 by rpki-client