Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa
File:                     3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa (raw, json)
Hash identifier:          zYjOKgma5GjcE+SOhZrGU+PQtYIh6Cgnm/tr/z8vp+0=
Subject key identifier:   46:F0:0C:1A:BD:6A:D6:8E:F6:6B:B2:5F:42:C6:56:3A:EC:A5:C3:28
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       4F9E81A4CD572E5A795A2A887CCE3965285C9B65
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa
Signing time:             Thu 05 Feb 2026 04:29:15 +0000
ROA not before:           Thu 05 Feb 2026 04:24:15 +0000
ROA not after:            Thu 04 Feb 2027 04:29:15 +0000
asID:                     270899
IP address blocks:        177.91.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 18:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9e:81:a4:cd:57:2e:5a:79:5a:2a:88:7c:ce:39:65:28:5c:9b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Feb  5 04:24:15 2026 GMT
            Not After : Feb  4 04:29:15 2027 GMT
        Subject: CN=46F00C1ABD6AD68EF66BB25F42C6563AECA5C328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:30:a5:81:95:12:30:41:94:db:77:d6:dc:
                    0e:da:91:74:fb:1b:5a:73:70:ed:7d:23:65:f7:c3:
                    68:d4:6e:69:c0:0b:0f:ef:27:29:a0:09:f6:bb:88:
                    ca:d9:10:00:0f:92:02:71:1d:33:49:74:c8:8a:84:
                    c4:90:94:dd:4b:97:d1:28:fd:04:53:b6:97:5c:34:
                    f4:ab:eb:c8:96:82:cc:07:26:64:6b:eb:ea:7a:af:
                    14:a6:65:01:23:4d:56:3d:b4:ea:c1:da:09:39:90:
                    29:84:9b:71:e7:36:3f:eb:0c:6e:59:5e:0f:b7:94:
                    76:7b:70:5f:39:82:b0:dc:2c:a1:e9:5a:b0:9d:1b:
                    c1:ca:2e:01:28:52:a7:9d:b7:75:81:10:ec:74:18:
                    b7:6c:86:c7:08:1f:a9:95:52:57:d8:a8:70:be:08:
                    1d:9e:df:45:b4:d0:17:cd:80:56:8a:a1:01:13:a1:
                    36:11:2a:b0:db:32:7c:d1:e3:69:fd:cc:ff:02:9b:
                    ba:64:92:14:1f:55:45:31:f2:0f:8e:1e:a8:6b:b1:
                    21:31:45:83:00:38:43:e1:8e:d9:71:cf:a4:a4:24:
                    3b:85:8f:3a:b6:20:b8:78:f4:6a:a4:1c:ba:2f:f7:
                    22:b2:96:86:60:e2:9e:aa:55:17:5b:71:5d:24:39:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:0C:1A:BD:6A:D6:8E:F6:6B:B2:5F:42:C6:56:3A:EC:A5:C3:28
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232392e302f32342d3234203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f3:3b:0c:f8:38:8a:cd:35:45:90:7a:93:97:91:a3:f5:5b:
         9d:f3:d0:5d:5d:a0:b0:3b:b0:14:03:1d:44:af:f2:8b:25:ae:
         1c:65:4b:1a:e6:d0:22:34:2b:fb:4c:83:5e:10:a7:05:c6:54:
         2d:cb:23:1f:e7:f1:f0:d9:64:89:ab:a9:2a:1c:69:17:f4:43:
         05:80:1d:08:68:dc:4d:6f:52:8b:cc:52:62:53:31:2e:4e:7d:
         36:e1:3b:c5:26:2c:84:bf:f7:3d:ba:52:24:f7:10:b9:5f:8b:
         5c:06:db:49:f5:c6:db:1f:f3:a2:32:86:04:6a:7a:29:79:ae:
         2c:2a:41:1c:5c:55:29:19:ff:42:45:77:08:09:03:57:3b:2c:
         29:ff:0d:4c:84:b7:a0:47:d3:04:15:02:b6:3f:2b:15:a5:2e:
         6d:04:b5:7e:fa:c1:a5:e5:55:cf:50:88:e5:05:73:5d:b0:92:
         39:c2:44:2e:59:e2:b6:6f:0e:52:4a:e8:a5:ad:9d:00:d7:88:
         02:0c:e0:26:74:46:ef:c2:5e:e4:87:90:b2:64:40:f7:aa:c3:
         61:70:36:45:fd:82:e5:ff:be:3c:bb:56:cf:e9:5e:aa:95:0b:
         1d:a3:df:61:43:f1:72:8c:97:2a:37:3d:b9:de:e8:ca:0a:ae:
         cb:a7:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:35 2026 by rpki-client