Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa
File:                     3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa (raw, json)
Hash identifier:          7gaDgQt3gCmEpOtNuKYGn2BAGnCy9Ud02Ee7gLLs2RM=
Subject key identifier:   39:24:24:0E:5E:28:41:50:E6:56:D5:A3:18:43:9D:C1:70:76:85:BD
Certificate issuer:       /CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
Certificate serial:       3C566CED35407BF7D4D28E52CB60D508E053FC46
Authority key identifier: 93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa
Signing time:             Wed 04 Feb 2026 21:03:09 +0000
ROA not before:           Wed 04 Feb 2026 20:58:09 +0000
ROA not after:            Wed 03 Feb 2027 21:03:09 +0000
asID:                     262428
IP address blocks:        170.82.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl
                          rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 05:37:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:56:6c:ed:35:40:7b:f7:d4:d2:8e:52:cb:60:d5:08:e0:53:fc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F45B39DC45B48A1C4185FBA8AF194B821EFA1
        Validity
            Not Before: Feb  4 20:58:09 2026 GMT
            Not After : Feb  3 21:03:09 2027 GMT
        Subject: CN=3924240E5E284150E656D5A318439DC1707685BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:40:8c:ef:26:72:26:57:58:1c:fc:e7:17:
                    0d:09:33:53:2d:f3:35:12:2b:f7:c1:47:ab:16:47:
                    2a:41:f5:e2:89:79:ae:bc:65:e9:a9:7c:19:8d:ca:
                    90:37:35:39:16:24:cd:40:7a:a4:b1:51:92:f2:f4:
                    9c:18:95:79:7b:3d:c3:be:01:90:3f:ad:4e:33:07:
                    69:81:5d:54:eb:24:f7:6e:bb:e6:7f:10:5d:1b:af:
                    46:41:84:f7:f3:4a:dd:92:22:08:e8:82:ea:c4:3a:
                    fa:ef:c9:8d:e8:06:85:65:fc:27:49:85:24:5e:91:
                    84:4e:0d:9c:68:24:69:63:8c:c8:df:98:77:88:d5:
                    93:16:b4:0b:c5:6a:ec:05:76:77:9b:9d:9c:c6:be:
                    17:22:10:24:2b:7c:69:d6:e9:02:ca:90:59:ea:d2:
                    5f:44:3c:cd:50:b7:46:d7:05:36:e9:d6:7f:d9:0e:
                    89:94:63:a0:59:cd:a2:e8:97:10:d6:27:cb:a6:7b:
                    65:d3:96:31:69:07:10:2b:2a:0e:c0:79:e6:d2:a5:
                    38:1e:6e:ca:eb:02:00:8f:13:7c:60:b4:d2:38:9b:
                    2c:70:66:8e:48:19:27:55:0e:b6:cf:6e:bd:5d:23:
                    df:e1:e2:85:49:d4:a8:f3:db:8d:a1:41:22:a5:37:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:24:0E:5E:28:41:50:E6:56:D5:A3:18:43:9D:C1:70:76:85:BD
            X509v3 Authority Key Identifier:
                keyid:93:8F:45:B3:9D:C4:5B:48:A1:C4:18:5F:BA:8A:F1:94:B8:21:EF:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/938F45B39DC45B48A1C4185FBA8AF194B821EFA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7p9nhwLPmqXPYnXdaTC6dh1BuPDqnccx2MVgu7jCwZW/1/3137302e38322e3135322e302f32322d3234203d3e20323632343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:e1:80:a1:a8:c1:20:a1:25:6d:fa:13:70:d1:de:8a:af:
         ca:fb:ef:c1:47:ca:f0:ab:40:c4:fa:39:5c:dd:fe:8d:8f:3e:
         54:2e:b2:2d:25:f7:9a:9e:94:03:7a:a5:08:57:04:3c:32:5a:
         42:55:58:1b:07:e3:bf:d9:de:3d:b1:86:18:43:b9:00:32:e0:
         31:7f:f5:b5:b1:bf:6a:b0:7e:c6:3e:cd:71:23:76:08:97:33:
         16:1c:cf:9c:e8:2d:e9:e2:21:a9:6d:ab:a7:47:1b:2a:d2:88:
         ac:8c:b8:8b:45:04:cd:07:08:8b:c7:11:70:8a:6d:23:bd:55:
         a4:59:a6:c1:bd:3a:73:e2:d1:8e:04:79:c0:3f:1e:c8:e0:64:
         39:88:96:58:16:c9:b2:cf:39:8a:4e:e7:ac:ee:d3:a9:cf:4b:
         39:95:44:1f:e9:ae:e0:74:6d:88:a0:81:87:dc:b9:fe:71:78:
         bc:d3:cc:b9:3f:88:fe:91:8a:ed:c7:8f:8d:67:39:05:f7:4a:
         cf:a6:13:2d:fb:d6:e6:06:40:17:e1:e5:2e:1d:13:34:ad:03:
         7e:d2:e7:35:cd:0a:4b:24:fb:ba:99:a1:9c:e4:47:0a:bc:ec:
         e3:e7:13:75:51:68:84:04:84:bb:5a:26:8b:df:28:c1:69:1e:
         cc:e5:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:55:57 2026 by rpki-client