Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa
File:                     3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa (raw, json)
Hash identifier:          cW8wsya6zZejkOSQJioRLBENKUo5GekN8U6wgaGN1LY=
Subject key identifier:   BC:95:18:60:13:CA:17:85:6F:74:CB:D2:BF:B1:35:EA:5E:3E:48:C4
Certificate issuer:       /CN=8C7A4B504246FC8EB262A32638A8235756E02512
Certificate serial:       6FE2EE13B87E6325B6FA4E09828145276281882E
Authority key identifier: 8C:7A:4B:50:42:46:FC:8E:B2:62:A3:26:38:A8:23:57:56:E0:25:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7A4B504246FC8EB262A32638A8235756E02512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa
Signing time:             Mon 02 Feb 2026 13:06:11 +0000
ROA not before:           Mon 02 Feb 2026 13:01:11 +0000
ROA not after:            Mon 01 Feb 2027 13:06:11 +0000
asID:                     272483
IP address blocks:        192.144.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/8C7A4B504246FC8EB262A32638A8235756E02512.crl
                          rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/8C7A4B504246FC8EB262A32638A8235756E02512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7A4B504246FC8EB262A32638A8235756E02512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 16:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:ee:13:b8:7e:63:25:b6:fa:4e:09:82:81:45:27:62:81:88:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7A4B504246FC8EB262A32638A8235756E02512
        Validity
            Not Before: Feb  2 13:01:11 2026 GMT
            Not After : Feb  1 13:06:11 2027 GMT
        Subject: CN=BC95186013CA17856F74CBD2BFB135EA5E3E48C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:67:25:aa:e7:19:82:f7:a3:85:a7:ae:2f:
                    c9:a4:ea:a1:5b:07:bd:ed:3a:eb:fe:95:94:8f:a3:
                    fe:ec:cb:b2:4f:9f:18:6e:f0:74:66:ae:15:66:dd:
                    87:c2:45:46:bf:f3:30:e4:3e:1f:52:32:31:c8:b9:
                    a1:f0:fe:fa:31:67:cc:e3:7f:cf:ab:fa:aa:f1:43:
                    05:b2:5b:59:39:44:5d:e7:d3:ae:bf:4d:78:00:f7:
                    e0:db:26:42:ab:b7:71:bf:e8:0b:cc:5a:ad:6a:90:
                    97:d8:dc:91:8f:3c:e4:15:22:d7:ea:13:6d:d3:ec:
                    f2:0a:21:b4:30:92:9e:a6:2f:f7:d5:d3:6b:6c:9c:
                    a6:3c:3d:fc:e9:38:7b:94:1c:61:35:b4:c1:5f:73:
                    62:e3:76:91:4a:0e:02:8d:a5:57:53:8e:8e:32:23:
                    dd:3b:86:ea:57:4d:0c:1c:b4:74:d4:f4:de:bc:e2:
                    ce:5f:18:6a:9e:c0:91:cf:8c:27:c3:51:51:1b:e4:
                    aa:98:bb:46:c4:de:7d:a7:20:62:36:ec:c6:b9:bf:
                    2e:cf:ee:b6:34:56:50:3a:7c:13:9f:63:01:7f:cd:
                    b2:a7:4f:fe:2e:e7:0e:61:53:c6:c8:4b:ee:be:53:
                    36:68:1f:3d:5f:8d:d6:ce:a1:f6:2e:a1:76:7f:1b:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:18:60:13:CA:17:85:6F:74:CB:D2:BF:B1:35:EA:5E:3E:48:C4
            X509v3 Authority Key Identifier:
                keyid:8C:7A:4B:50:42:46:FC:8E:B2:62:A3:26:38:A8:23:57:56:E0:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/8C7A4B504246FC8EB262A32638A8235756E02512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7A4B504246FC8EB262A32638A8235756E02512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/3139322e3134342e3132342e302f32322d3234203d3e20323732343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:d5:82:6a:50:35:64:7f:c4:43:ea:98:ba:c7:f5:dd:2b:
         ee:04:f8:90:4f:bc:43:02:c6:a3:7a:59:06:96:82:ce:db:40:
         e8:3d:cd:4b:0f:84:5f:52:dd:74:9b:94:5d:eb:81:86:86:bc:
         03:98:20:62:6e:7e:89:df:09:6f:90:06:2a:91:61:93:d1:d7:
         c8:ad:dd:18:a2:a4:60:e7:b5:db:cf:8c:ca:f6:eb:e0:02:00:
         9a:34:cf:bf:b6:31:9c:be:fb:21:38:49:7f:c7:80:ad:3c:6a:
         f9:4f:ca:a7:c0:fc:13:e6:49:dd:20:ec:02:a3:4e:27:15:00:
         e3:bb:d6:38:3d:37:5e:e4:63:31:39:6b:bb:eb:02:88:47:c4:
         63:83:49:15:79:b1:c7:b3:69:bd:ad:c5:25:14:71:fd:58:82:
         da:73:24:26:17:8b:98:13:dd:11:6b:e7:e0:f4:df:fe:dd:2a:
         66:07:ca:85:15:da:e7:b6:ec:a6:ec:8a:e2:ab:ae:53:e4:dc:
         2a:97:c9:63:95:6a:e1:ce:1a:c6:85:cd:4f:ae:87:1e:a0:18:
         91:c0:2e:eb:8e:53:e6:53:2b:07:db:9b:63:b8:73:c4:dd:fe:
         2f:00:57:95:8f:ae:b0:62:25:29:d3:41:9e:a0:a3:03:f5:8c:
         2c:48:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:54:02 2026 by rpki-client