Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/3137302e37392e32382e302f32322d3234203d3e20323633353636.roa
File:                     3137302e37392e32382e302f32322d3234203d3e20323633353636.roa (raw, json)
Hash identifier:          C+LStI/6dCYfJrCDYmISjtNX0QrGSYGGRO9+tX4WlyI=
Subject key identifier:   2B:77:30:FA:5E:C7:4F:E1:23:18:32:B2:F8:26:8A:BB:84:BD:F0:DC
Certificate issuer:       /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
Certificate serial:       5E87D2291A38AECF34F4D9E7B7F81DBD8A8C89EE
Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/3137302e37392e32382e302f32322d3234203d3e20323633353636.roa
Signing time:             Thu 05 Feb 2026 03:23:03 +0000
ROA not before:           Thu 05 Feb 2026 03:18:03 +0000
ROA not after:            Thu 04 Feb 2027 03:23:03 +0000
asID:                     263566
IP address blocks:        170.79.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl
                          rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:87:d2:29:1a:38:ae:cf:34:f4:d9:e7:b7:f8:1d:bd:8a:8c:89:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2
        Validity
            Not Before: Feb  5 03:18:03 2026 GMT
            Not After : Feb  4 03:23:03 2027 GMT
        Subject: CN=2B7730FA5EC74FE1231832B2F8268ABB84BDF0DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:5b:94:77:61:84:a6:bc:7a:8e:c7:84:42:
                    10:d9:1a:2f:68:68:d9:f4:e3:99:ab:d7:77:83:ab:
                    d6:56:e8:b4:ae:d5:8c:37:75:6f:1f:25:73:41:7a:
                    43:b5:74:22:96:01:2e:4d:79:db:e0:02:59:1a:c3:
                    87:50:c8:cb:d0:53:40:14:ef:8c:57:f2:7e:be:ba:
                    f8:2b:0f:b3:95:e5:e4:cf:75:79:99:3d:06:3a:1d:
                    15:24:22:4e:8f:70:d3:5e:9f:94:9c:65:36:37:82:
                    8a:d8:70:d2:3d:79:24:de:83:ca:33:19:84:ce:66:
                    d0:32:9f:13:84:90:de:83:b8:b2:b4:91:a6:0b:cf:
                    06:9c:53:0f:20:19:57:b6:17:68:4b:59:28:80:e4:
                    b0:25:3a:35:65:1c:85:be:2f:7a:d7:03:47:6e:53:
                    51:1d:28:dd:a0:ef:f0:6e:86:0d:5e:31:38:d9:eb:
                    fa:9d:8e:b8:0d:01:28:79:72:43:31:0c:cf:d8:5e:
                    84:d4:e7:8c:d6:78:c6:c2:d2:6b:ba:62:91:72:b9:
                    89:0a:ad:f5:0d:ce:35:c2:d1:84:7b:f7:1c:f4:de:
                    c1:11:76:7e:5f:6a:27:0a:0b:5b:8c:f7:08:d3:e4:
                    a4:8a:44:46:64:d7:74:87:a1:f6:fe:24:2e:fb:8d:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:77:30:FA:5E:C7:4F:E1:23:18:32:B2:F8:26:8A:BB:84:BD:F0:DC
            X509v3 Authority Key Identifier:
                keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/3137302e37392e32382e302f32322d3234203d3e20323633353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:05:bf:f3:1e:37:c6:ad:7b:f1:a0:07:ce:5a:0c:ab:90:f0:
         b2:c0:c1:7c:88:4b:62:36:82:7e:b7:5c:58:9b:39:cb:14:f4:
         4f:32:9f:77:9e:b2:31:1c:34:66:08:a9:1d:a0:5a:0f:69:c2:
         25:a2:4b:8e:e1:92:11:e3:a2:5b:dc:8f:8e:57:3a:20:d9:e8:
         42:90:24:ae:58:e0:f9:5f:f1:25:06:4c:65:21:c5:ac:d2:d1:
         ee:c3:8a:f6:d1:67:f3:2f:b0:e4:51:14:c1:a3:8b:d2:3d:f8:
         3f:18:40:c5:f9:ef:22:c5:1b:95:9a:f7:82:82:e4:1e:6a:af:
         56:74:90:37:1d:3b:cd:af:2d:39:eb:76:6b:1b:32:75:7a:ec:
         06:ce:6f:9b:f1:03:e0:8c:44:b2:f2:a7:2a:0e:d8:f3:e0:b8:
         5a:f2:c3:7b:99:d9:d0:4a:7b:7c:86:d1:bf:57:80:42:58:3d:
         16:75:83:4e:84:a4:7f:b2:0f:f9:e3:17:55:f0:ba:68:ae:e7:
         e4:8b:0f:2f:a5:f5:6d:12:63:d5:f4:3f:37:72:c9:09:c1:0b:
         ac:00:4a:5b:dd:63:c0:1f:cf:04:3d:83:a2:db:21:34:bd:f6:
         99:3b:4b:b8:64:fc:d4:70:b1:c2:e6:6a:a5:b4:5a:78:59:ae:
         5f:a1:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:21:45 2026 by rpki-client