Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa
File:                     3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa (raw, json)
Hash identifier:          Rq6aNws3XBU+So+P+Fr5VXJMIPZN5orbfyFViNy8x2c=
Subject key identifier:   62:1D:64:3C:42:77:9A:4F:DF:07:9A:4E:C0:38:9D:B9:88:10:9C:33
Certificate issuer:       /CN=9A705AE47CA3B06117A7D60A5C1DF68C898AA415
Certificate serial:       6056E2D14E8BA221BD622F593C0622E730E139EB
Authority key identifier: 9A:70:5A:E4:7C:A3:B0:61:17:A7:D6:0A:5C:1D:F6:8C:89:8A:A4:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa
Signing time:             Sun 18 Jan 2026 06:01:53 +0000
ROA not before:           Sun 18 Jan 2026 05:56:53 +0000
ROA not after:            Sun 17 Jan 2027 06:01:53 +0000
asID:                     263631
IP address blocks:        179.125.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 23:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:e2:d1:4e:8b:a2:21:bd:62:2f:59:3c:06:22:e7:30:e1:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A705AE47CA3B06117A7D60A5C1DF68C898AA415
        Validity
            Not Before: Jan 18 05:56:53 2026 GMT
            Not After : Jan 17 06:01:53 2027 GMT
        Subject: CN=621D643C42779A4FDF079A4EC0389DB988109C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:fe:33:58:62:84:fa:44:b1:ea:b6:47:ac:
                    fc:5e:55:04:43:0c:fb:eb:ff:32:90:ab:4d:9a:9e:
                    c1:2b:0d:c6:41:c6:d5:40:4f:75:aa:2f:23:5f:73:
                    14:17:27:27:a1:fa:32:0f:f6:ef:49:bb:c2:c3:85:
                    01:4f:f7:b8:4f:96:c7:6f:b9:ee:98:49:39:ba:64:
                    69:ea:cc:7d:4e:e2:ad:29:be:4d:3e:92:3d:d2:69:
                    01:30:b0:b9:ea:1e:84:6b:b7:b9:bd:4f:1d:5a:0e:
                    b9:f0:c3:23:c2:a2:ba:36:b0:7b:1d:91:f0:5c:16:
                    3d:cf:9c:56:5d:61:63:21:dd:70:2f:41:42:15:16:
                    89:37:e2:39:37:63:8f:39:a8:22:66:23:4c:9a:53:
                    9d:9a:56:fe:5f:a0:dd:83:ab:ea:e6:bc:b2:c2:2a:
                    bb:b6:75:de:f9:19:32:20:4d:32:4c:f2:f1:40:81:
                    d9:0d:af:cb:9e:d9:e0:93:b0:ef:16:9c:9a:01:43:
                    0f:43:72:4c:a7:06:b3:a0:55:c4:9b:6e:39:fa:f6:
                    cf:d8:c0:42:5e:c3:f7:6d:0b:a7:31:9f:d3:b5:bb:
                    71:a8:79:90:78:eb:aa:9b:6e:0a:65:8c:36:d0:c3:
                    e7:0e:81:4a:e5:0f:ec:53:f1:70:f7:6d:e4:99:f5:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1D:64:3C:42:77:9A:4F:DF:07:9A:4E:C0:38:9D:B9:88:10:9C:33
            X509v3 Authority Key Identifier:
                keyid:9A:70:5A:E4:7C:A3:B0:61:17:A7:D6:0A:5C:1D:F6:8C:89:8A:A4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A705AE47CA3B06117A7D60A5C1DF68C898AA415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/0/3137392e3132352e34382e302f32312d3234203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:27:d0:e9:b7:38:59:bf:62:7d:f9:7d:26:32:e8:e7:40:f6:
         de:8b:7a:d7:a6:c2:c2:9f:be:7d:60:77:ff:1c:2b:43:17:b5:
         58:85:02:6b:cc:32:06:a8:b3:40:20:d3:c5:4b:85:54:a1:0e:
         86:1a:e4:da:69:a7:30:bb:d3:a8:44:40:62:48:ee:d1:7a:9e:
         a7:24:1c:29:a8:d3:dd:81:f5:14:76:9c:17:b0:0e:8b:59:46:
         4d:2b:99:6a:51:65:31:59:8b:5e:7c:b4:0b:7a:93:ce:83:69:
         38:10:c6:0b:30:19:ce:3e:43:2c:e8:7b:a6:17:f4:3e:e8:53:
         c5:f5:6e:46:a7:f5:69:bb:57:b2:ed:07:0d:d4:b6:36:21:26:
         6d:9b:b9:8a:b0:fb:05:9e:b2:d0:0e:20:f4:dd:75:c1:33:ad:
         89:e1:b7:ad:d5:df:08:73:2e:ad:a3:d9:bf:77:7a:8c:0e:2a:
         94:41:3e:77:cd:58:8a:5a:63:16:29:4b:3c:da:ea:bd:8c:fb:
         75:5b:fb:07:79:ac:2e:d2:19:96:9c:12:00:28:85:3e:43:bd:
         5f:79:85:3a:49:51:b7:e8:42:d6:4f:d0:f4:d4:79:0a:55:94:
         3c:63:1b:71:6c:ab:71:84:97:a0:6f:64:74:f5:3f:42:bd:7d:
         31:7d:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 08:52:23 2026 by rpki-client