Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa
File:                     3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa (raw, json)
Hash identifier:          hD2d1DFucZOY2ODRVe2+eXov2N0kC4IZnCcz+mydabQ=
Subject key identifier:   9E:BB:A2:C5:21:80:01:84:35:83:9D:70:7B:F0:9F:06:57:2A:0E:38
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       2BAF6B7365560AA2CC19A6B755A03E8449861171
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa
Signing time:             Thu 05 Feb 2026 21:00:29 +0000
ROA not before:           Thu 05 Feb 2026 20:55:29 +0000
ROA not after:            Thu 04 Feb 2027 21:00:29 +0000
asID:                     271090
IP address blocks:        179.48.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 14:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:af:6b:73:65:56:0a:a2:cc:19:a6:b7:55:a0:3e:84:49:86:11:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Feb  5 20:55:29 2026 GMT
            Not After : Feb  4 21:00:29 2027 GMT
        Subject: CN=9EBBA2C52180018435839D707BF09F06572A0E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:b0:ed:84:1f:99:c8:71:07:25:da:3f:e9:
                    31:8e:06:e5:39:11:ec:92:e5:df:4f:a7:38:f4:f6:
                    a8:46:a2:12:c4:fa:11:e4:d9:f7:6a:99:65:1b:64:
                    a3:be:26:6e:5a:a1:c4:a7:a4:4a:92:fa:64:9b:5c:
                    96:08:66:9e:29:70:d6:65:c2:88:f5:b7:53:48:27:
                    2c:62:c9:8e:07:5e:5d:fb:59:70:b3:be:06:88:82:
                    f3:5d:6e:b2:4f:71:db:9f:79:96:ab:35:e6:38:0c:
                    55:16:a3:d8:68:68:c2:46:ef:2a:bc:cd:89:8f:2e:
                    ca:b2:f2:60:a1:b1:5b:9d:2c:0c:ee:4d:a2:93:22:
                    67:9a:82:73:ef:59:b9:24:5c:a5:69:88:03:25:51:
                    3d:91:11:ce:d0:4d:bf:04:ba:8a:cf:6a:00:6f:0c:
                    dc:1c:30:c8:fb:bb:07:65:c6:a8:d0:4c:ce:a8:19:
                    28:d6:88:7c:2b:1a:bb:9a:c8:b1:26:4c:5f:b2:e5:
                    f1:95:cc:24:d4:16:0f:08:92:77:d8:14:56:6f:fc:
                    84:ff:75:36:57:3e:72:75:12:84:35:e9:d7:e0:b7:
                    4f:02:88:2b:55:1b:c0:41:df:33:4a:1e:f3:87:f3:
                    ae:26:be:5e:b1:8b:5a:a0:94:84:e9:b7:9b:df:cd:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BB:A2:C5:21:80:01:84:35:83:9D:70:7B:F0:9F:06:57:2A:0E:38
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/3137392e34382e3134362e302f32332d3233203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:32:8e:6e:cd:a3:0b:0f:c6:fc:c1:c0:e8:49:fd:ec:42:
         68:7d:72:ba:bd:ab:3c:8f:d2:27:f7:57:24:4b:e0:ab:30:91:
         a9:74:bf:35:a1:03:b1:92:bd:4a:6e:09:69:ca:75:6d:35:49:
         09:58:19:23:90:7b:e4:08:9b:37:e0:0c:a0:ac:11:28:1e:89:
         b5:ce:d3:12:c6:22:c2:57:bd:8c:90:48:7b:16:64:4b:7c:05:
         76:a2:ee:8f:f9:a0:d8:bc:08:15:6e:96:68:b5:d9:7b:3a:0f:
         25:92:74:d8:6d:00:f8:23:29:dd:39:01:ce:6d:80:e6:0a:0e:
         f6:e9:1e:00:82:46:47:a0:88:3f:79:dc:67:bb:e3:49:5c:f2:
         a9:62:2a:33:72:0e:0c:b2:a8:91:17:24:99:10:cf:5b:a7:a5:
         5f:a2:42:29:ba:b8:b2:a9:36:a7:c0:79:de:84:c8:cb:08:c3:
         e2:13:15:f3:b6:65:7b:a8:e7:23:6c:b7:b3:30:ae:02:7b:c2:
         4a:3a:69:99:f2:06:5b:91:59:0f:8a:b1:98:02:98:e3:d4:87:
         33:94:85:be:31:ed:2a:75:f5:fe:3f:ac:1f:3a:9c:39:cc:a3:
         84:c5:a8:e8:be:b3:85:ee:18:23:94:e4:2c:b1:fb:2c:b0:39:
         dc:39:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:49:45 2026 by rpki-client