Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa
File:                     3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa (raw, json)
Hash identifier:          t53mNfrpGicVjfQ3PiMcXxnSeXT3llEP6nmMQ92ODP4=
Subject key identifier:   AB:E0:73:D4:FD:78:CA:FD:57:70:4F:BE:D9:4C:85:B6:89:34:76:CA
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       0543673E392D6DF01B8C62584CB64CB7240E6666
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa
Signing time:             Thu 05 Feb 2026 21:00:29 +0000
ROA not before:           Thu 05 Feb 2026 20:55:29 +0000
ROA not after:            Thu 04 Feb 2027 21:00:29 +0000
asID:                     271090
IP address blocks:        179.48.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:43:67:3e:39:2d:6d:f0:1b:8c:62:58:4c:b6:4c:b7:24:0e:66:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Feb  5 20:55:29 2026 GMT
            Not After : Feb  4 21:00:29 2027 GMT
        Subject: CN=ABE073D4FD78CAFD57704FBED94C85B6893476CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:52:d7:86:ac:c3:b1:78:5d:dd:fc:3b:d6:
                    cb:52:c1:e6:de:fe:dd:46:50:28:24:0d:a8:50:fa:
                    e3:16:de:2a:78:0b:36:e6:bd:d9:42:3d:b2:57:f9:
                    c9:de:5c:35:60:06:2f:22:50:70:fc:40:b6:47:2f:
                    2b:a0:0f:e3:17:90:c1:20:ee:e5:4e:b6:4f:36:6a:
                    4d:9b:ae:b6:37:e5:9e:6b:bd:77:65:11:a0:7d:54:
                    a0:39:81:bb:db:05:fb:60:f8:98:f0:e8:ee:c0:5f:
                    44:61:d8:b3:56:e1:e3:11:ef:25:62:c8:f0:d0:7d:
                    f8:5d:c7:6b:84:2b:8e:ef:ab:de:c4:e2:ed:99:a5:
                    a2:9a:d2:2c:d7:ba:d5:91:d4:8f:03:25:9f:4b:ff:
                    ff:3a:29:4d:23:06:68:98:e5:6a:39:b1:a7:68:d4:
                    8a:5e:b5:54:c0:4c:64:ad:77:1b:2d:ea:1d:7b:41:
                    af:48:73:37:8d:74:4c:17:e0:c7:16:63:3b:50:8a:
                    c5:fd:c9:35:3b:9b:32:17:53:00:a5:7b:b7:99:f2:
                    a8:5d:2b:b3:87:cb:60:e7:1f:8e:70:59:c6:7f:9c:
                    6a:8f:f3:fa:d5:db:e0:91:84:ea:e2:59:e4:ea:fd:
                    d8:36:b2:d6:76:3c:e2:e8:fa:2b:0b:91:05:c5:69:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E0:73:D4:FD:78:CA:FD:57:70:4F:BE:D9:4C:85:B6:89:34:76:CA
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134342e302f32332d3233203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:d8:19:54:23:77:13:da:cd:33:e4:3f:c7:50:14:55:f2:
         03:80:04:1a:f1:0a:86:0f:48:8a:5c:f3:60:2e:2e:f0:f4:97:
         50:69:57:33:10:72:8f:d6:da:f2:9a:32:19:62:9b:4b:62:6e:
         c9:62:fc:05:97:67:20:dc:fa:ad:65:16:b8:59:c0:63:97:e7:
         2c:fc:4e:b8:21:97:50:71:17:3e:39:aa:69:fd:9f:19:ac:9e:
         bc:a5:59:14:67:2d:96:99:b0:44:2f:c9:42:8c:96:9e:7b:b0:
         cf:d7:d7:3c:d9:4b:0b:7b:a0:51:34:bb:7c:c9:b8:b7:7d:59:
         5c:b3:8d:87:f0:39:04:5f:45:24:a3:1d:a6:7f:fb:88:d5:e7:
         08:20:88:dc:59:5b:2b:f6:03:ca:c1:3d:61:39:00:7a:8d:7f:
         5d:cb:ec:4c:74:83:16:08:14:15:58:ab:b4:f3:4f:e6:96:e1:
         07:cd:0f:82:53:b2:60:2d:80:a5:1a:93:38:8f:c2:3a:6f:cc:
         9e:9f:70:e5:11:81:6b:62:ce:0a:32:c7:71:ab:d9:6a:9d:62:
         c7:67:6b:d3:41:ea:fe:3c:d3:99:05:aa:a6:b7:01:90:45:4e:
         de:00:ef:58:88:57:ca:42:fe:df:60:ae:6c:69:10:c8:f4:48:
         6a:3a:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:48 2026 by rpki-client