Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
File:                     3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa (raw, json)
Hash identifier:          WPOPNIWq7LGr+nxAjnXMgjLrMlVsTQM9ZCUnaYyMpJc=
Subject key identifier:   56:B4:71:FA:5D:6A:E7:26:CA:4E:A8:D9:D0:58:C3:15:C9:B0:C8:A6
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       7D3AF4AD955396DECABF7A72FF77654EE3CD1328
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa
Signing time:             Thu 05 Feb 2026 03:53:44 +0000
ROA not before:           Thu 05 Feb 2026 03:48:44 +0000
ROA not after:            Thu 04 Feb 2027 03:53:44 +0000
asID:                     266611
IP address blocks:        128.201.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:f4:ad:95:53:96:de:ca:bf:7a:72:ff:77:65:4e:e3:cd:13:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Feb  5 03:48:44 2026 GMT
            Not After : Feb  4 03:53:44 2027 GMT
        Subject: CN=56B471FA5D6AE726CA4EA8D9D058C315C9B0C8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:ac:73:b8:ef:6a:4c:27:44:52:35:c1:bd:
                    68:b8:98:48:c1:ba:2b:22:15:e5:3d:ab:68:9c:cf:
                    01:07:f2:7e:be:e0:b7:8e:45:cc:18:d2:96:15:50:
                    be:ef:32:e8:5e:4a:3f:5f:3e:d0:42:2c:59:b2:5f:
                    8d:07:93:42:36:a9:6d:1a:d2:82:22:02:cc:f9:0c:
                    d2:84:87:29:f8:79:40:bb:17:f3:2d:36:56:da:f6:
                    bf:65:bb:a0:c9:c1:8a:45:22:77:87:d6:15:44:07:
                    d9:e5:ef:a5:a2:3a:97:ef:1a:ae:4b:47:f5:0b:b7:
                    28:22:67:59:f3:25:00:e9:01:9a:3c:79:1a:3f:43:
                    fb:71:68:b6:4d:ac:fa:cc:12:0a:a5:ed:a3:38:58:
                    3b:52:f6:5e:4e:19:52:f9:d9:35:cf:0e:67:13:31:
                    2b:d7:c6:97:c4:90:ce:a8:4e:13:92:68:6e:1c:65:
                    09:66:74:97:0e:9f:23:ce:18:be:e1:aa:04:9a:2c:
                    60:0b:8b:6f:60:30:10:5b:a0:42:a8:3a:dd:28:3a:
                    83:5b:5a:8b:6e:44:17:c9:30:7b:49:d0:cc:aa:87:
                    60:72:aa:12:d7:3b:1d:9a:4b:d1:94:17:41:1f:a4:
                    d8:7f:a5:22:4a:9f:30:18:d7:49:be:38:61:d5:a1:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B4:71:FA:5D:6A:E7:26:CA:4E:A8:D9:D0:58:C3:15:C9:B0:C8:A6
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32332d3233203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:f9:7c:cc:a4:df:de:66:fb:04:2f:70:a4:f1:f3:4f:37:
         2c:f9:3b:69:3b:e1:e8:50:19:17:13:21:b9:67:3e:e7:5a:05:
         04:64:5d:c6:81:f1:85:93:6f:41:b0:08:a8:90:9d:5c:a5:47:
         00:6d:7c:07:f7:96:fa:89:de:30:37:47:76:0b:82:e5:f3:fd:
         04:88:d0:7d:49:f6:8a:07:dd:4f:49:f4:0a:12:6a:3c:f9:1f:
         f4:37:60:40:ba:ba:d7:e8:ee:90:86:e2:aa:57:8c:9b:51:17:
         2c:cc:35:08:f4:55:91:d1:25:a1:45:60:6c:18:e8:d0:e4:85:
         6a:b7:cd:1b:d2:d3:d5:f6:e8:c3:90:22:cb:7e:59:ce:48:91:
         eb:e5:be:f1:56:17:42:4a:60:30:a9:1a:7a:8e:86:b4:5e:d4:
         46:b0:63:d3:5f:37:9b:06:8d:87:60:af:ee:5b:1c:a3:c5:f6:
         b8:7d:68:87:fa:d3:86:67:bc:70:83:12:e6:c0:98:72:a9:bb:
         08:73:ad:cd:05:b1:a8:91:87:b0:9c:69:2c:9c:51:d8:f7:ae:
         67:61:94:d0:8f:ac:0d:a4:ee:f9:84:37:e6:92:53:2e:c7:90:
         3a:4c:37:86:d3:fc:9e:34:90:71:26:77:ed:65:6b:e0:5f:f3:
         d3:08:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:54:20 2026 by rpki-client