Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa
File:                     3138372e31372e3134342e302f32302d3234203d3e203238323739.roa (raw, json)
Hash identifier:          Sbr3GGSxs/TpbJEnxyaf9FEO3XI7W7CSYVMWuuULCdo=
Subject key identifier:   90:33:90:F9:01:A9:9F:36:81:AB:1F:8E:FE:7A:AF:97:F5:5F:98:02
Certificate issuer:       /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial:       0DC2F35446EF8F2C6817E7B961ABEDA15DC9A133
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa
Signing time:             Fri 06 Feb 2026 00:26:30 +0000
ROA not before:           Fri 06 Feb 2026 00:21:30 +0000
ROA not after:            Fri 05 Feb 2027 00:26:30 +0000
asID:                     28279
IP address blocks:        187.17.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
                          rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 02:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c2:f3:54:46:ef:8f:2c:68:17:e7:b9:61:ab:ed:a1:5d:c9:a1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
        Validity
            Not Before: Feb  6 00:21:30 2026 GMT
            Not After : Feb  5 00:26:30 2027 GMT
        Subject: CN=903390F901A99F3681AB1F8EFE7AAF97F55F9802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:18:03:a5:48:f4:93:4f:53:a8:c8:ee:30:5e:
                    84:31:65:c6:e1:ad:50:ae:11:4e:ff:72:9a:43:ed:
                    48:53:5b:17:77:11:af:95:1d:ba:f6:f0:c6:38:e9:
                    d2:27:07:e3:b6:2c:9f:61:f1:28:4f:b3:08:c5:20:
                    cf:8b:c2:f8:9d:31:b9:48:d2:82:17:51:ee:ea:6b:
                    12:19:93:3a:6a:06:b7:7b:fe:c3:b2:f3:bf:1b:97:
                    78:e0:25:1e:bc:fb:00:e7:a3:58:c5:43:bf:e6:e3:
                    a2:46:99:cd:f7:3b:59:2d:bc:5a:8c:6e:10:a0:95:
                    47:87:81:e4:f3:00:65:63:5b:3c:18:23:1c:d2:d2:
                    d8:88:51:92:d8:31:7c:68:38:fe:f7:be:87:af:86:
                    d7:da:b1:df:2a:bf:1b:3d:9b:05:a6:63:e3:ee:b2:
                    00:e1:c8:bd:c1:85:c4:dc:54:ef:de:03:3e:ed:14:
                    82:1e:40:6b:42:e4:76:e0:44:2f:35:c9:4b:a1:3d:
                    54:27:fe:e9:7f:c2:96:d2:9c:b2:91:e5:36:23:5a:
                    1a:16:13:87:2b:23:a7:2c:5d:a9:fe:c3:2a:17:f7:
                    40:51:65:5d:42:08:2e:c4:bb:1a:14:b0:68:78:f4:
                    2d:ae:35:7f:b1:4d:a6:aa:f2:32:25:49:de:5c:21:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:33:90:F9:01:A9:9F:36:81:AB:1F:8E:FE:7A:AF:97:F5:5F:98:02
            X509v3 Authority Key Identifier:
                keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/3138372e31372e3134342e302f32302d3234203d3e203238323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:2f:dc:d4:64:0a:1c:fb:64:0b:55:46:aa:30:4d:34:38:
         7f:40:53:99:c9:42:81:e0:51:b8:4d:ab:97:57:de:34:99:66:
         23:d7:9b:2c:e1:fe:ec:4d:a2:4d:7b:07:36:37:6e:78:65:b6:
         58:c2:ca:e1:96:a2:61:1a:11:f1:38:80:95:f8:1e:35:03:df:
         80:e0:28:fe:02:cc:66:5f:7c:68:65:50:a9:66:d8:9b:67:24:
         ac:e4:65:5f:ea:0a:69:15:ef:45:dd:30:cb:48:2d:e3:aa:92:
         de:7a:32:2d:99:fe:11:9a:19:65:2d:ba:68:74:0b:ee:7a:7a:
         9c:59:4d:71:e3:0a:d4:d9:43:29:ca:15:6c:6d:d4:7f:db:fb:
         99:61:ea:1b:d9:d3:58:d0:62:77:66:b0:e5:08:ba:3f:4e:6c:
         cb:4d:00:06:1b:09:75:e0:3f:10:7d:ed:9e:88:43:e8:b8:f2:
         62:36:f4:d5:db:55:b2:ee:20:32:a1:98:61:c1:48:2a:29:8b:
         1a:54:35:0a:bf:e6:a3:04:3c:15:62:4e:80:aa:b6:73:9a:91:
         cb:32:44:58:a8:7b:0a:f7:2a:2b:82:29:91:7e:fd:48:67:cb:
         ee:b6:2f:95:8b:2d:a9:e0:0b:06:b3:04:d8:fa:f7:97:dd:9b:
         49:1a:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:27:52 2026 by rpki-client