Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137302e3233332e31322e302f32322d3234203d3e203532353331.roa
File:                     3137302e3233332e31322e302f32322d3234203d3e203532353331.roa (raw, json)
Hash identifier:          pIEI30WMhZtrxL1qZa9ePqpJglpKMPjRGF0d8N5tVrI=
Subject key identifier:   9C:D3:4A:26:00:E5:68:16:29:A6:1A:FA:6F:7D:9C:7F:6B:5C:79:8A
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       29BCCFDE6E606D0290555884B9A5330FC98D005C
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137302e3233332e31322e302f32322d3234203d3e203532353331.roa
Signing time:             Thu 05 Feb 2026 02:00:32 +0000
ROA not before:           Thu 05 Feb 2026 01:55:32 +0000
ROA not after:            Thu 04 Feb 2027 02:00:32 +0000
asID:                     52531
IP address blocks:        170.233.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:cf:de:6e:60:6d:02:90:55:58:84:b9:a5:33:0f:c9:8d:00:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Feb  5 01:55:32 2026 GMT
            Not After : Feb  4 02:00:32 2027 GMT
        Subject: CN=9CD34A2600E5681629A61AFA6F7D9C7F6B5C798A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:81:63:70:5b:66:44:67:91:8f:de:59:e3:
                    a7:89:ed:43:3b:5d:bf:f3:28:b3:f7:a2:00:8c:6b:
                    b9:dd:34:78:94:85:82:ce:ee:9f:3c:5c:fb:e1:74:
                    2f:7e:1a:95:bd:31:68:57:1d:0d:8f:db:fc:85:49:
                    40:c5:f8:ad:e2:dd:8d:4c:ee:eb:4e:bb:84:36:50:
                    c1:dd:da:a4:fd:12:55:89:81:4f:2d:19:40:50:a6:
                    ee:95:11:37:3d:d2:47:fd:7e:4c:72:c2:0f:48:79:
                    51:86:4a:df:5b:50:3e:46:2b:07:2c:46:f5:ba:df:
                    8d:28:42:3e:39:26:a1:b6:97:0b:2d:ff:93:63:68:
                    10:1f:78:4b:23:97:20:3b:44:39:19:10:4d:35:2a:
                    be:63:67:85:79:75:17:c9:b8:40:e9:03:ac:20:e4:
                    d2:eb:e3:4c:61:07:ea:33:e2:c7:a0:fa:6f:3b:18:
                    74:10:2d:2f:5f:dd:d3:ef:e4:e2:90:53:b2:a8:1a:
                    f3:a5:8f:a7:b9:36:d0:1d:53:fe:2c:13:34:f6:a3:
                    c6:1d:94:a9:7e:cb:45:3a:b2:e4:88:9b:6a:8a:4e:
                    4b:4b:e2:10:50:0c:4f:cb:6f:18:b8:32:b8:c1:a6:
                    92:ff:f6:72:98:fd:3d:be:ea:31:71:cc:20:b4:4d:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:4A:26:00:E5:68:16:29:A6:1A:FA:6F:7D:9C:7F:6B:5C:79:8A
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137302e3233332e31322e302f32322d3234203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:42:2a:0b:4b:b5:de:af:c5:02:ca:54:55:ff:f4:3c:a9:
         a5:32:c7:ab:33:17:e4:aa:97:ca:50:aa:21:f1:1b:20:ba:4a:
         e6:b6:df:2f:87:3f:86:ab:52:c1:28:ba:b4:2e:1b:d1:32:06:
         0b:f5:31:81:24:53:13:5a:c2:6b:ba:86:92:08:93:9f:44:3b:
         49:b7:c6:aa:c9:1a:3d:32:8c:b8:2b:ec:fb:31:27:30:8b:a1:
         50:cc:0f:62:35:a1:7f:2f:74:3e:03:24:18:35:5c:c3:c2:ba:
         3f:37:b7:59:df:0a:28:ef:09:50:89:23:05:aa:12:6d:77:f5:
         20:b3:da:a4:42:52:ba:61:f2:68:73:6c:76:31:0f:59:77:b7:
         99:0b:fb:7a:35:f0:9e:2c:11:31:24:30:eb:e9:d6:a7:29:19:
         4e:0a:f1:9e:c6:06:c8:e6:2f:f2:a4:26:89:0d:2c:dd:42:35:
         39:30:c6:21:0e:9a:9e:8a:c8:f9:54:c4:75:41:01:0b:23:61:
         92:92:91:64:eb:1e:c0:6a:ec:60:7a:37:4c:ee:83:da:dc:b1:
         be:58:e1:e5:45:c0:77:4c:54:d6:07:05:67:fc:0a:24:8a:69:
         9c:73:64:38:b8:06:4d:8c:76:b8:b7:98:0d:c7:f4:96:1e:3d:
         e8:1b:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:02:20 2026 by rpki-client