Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/3133322e3235352e3138342e302f32342d3234203d3e20323634353130.roa
File:                     3133322e3235352e3138342e302f32342d3234203d3e20323634353130.roa (raw, json)
Hash identifier:          9hv+60VlfX1mp2JWvdo7O5LN2f2g8YDG8TqezUQuojY=
Subject key identifier:   07:45:FE:34:32:17:61:1B:EA:5A:75:B7:DB:21:DD:FE:7E:8A:6F:51
Certificate issuer:       /CN=FF17677ED063D237B582E0298BAD1EFE8EF1CA86
Certificate serial:       1368C6226446F461A8D6F9A887C1AA5FE7644126
Authority key identifier: FF:17:67:7E:D0:63:D2:37:B5:82:E0:29:8B:AD:1E:FE:8E:F1:CA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/3133322e3235352e3138342e302f32342d3234203d3e20323634353130.roa
Signing time:             Thu 19 Feb 2026 01:02:44 +0000
ROA not before:           Thu 19 Feb 2026 00:57:44 +0000
ROA not after:            Thu 18 Feb 2027 01:02:44 +0000
asID:                     264510
IP address blocks:        132.255.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.crl
                          rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:68:c6:22:64:46:f4:61:a8:d6:f9:a8:87:c1:aa:5f:e7:64:41:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF17677ED063D237B582E0298BAD1EFE8EF1CA86
        Validity
            Not Before: Feb 19 00:57:44 2026 GMT
            Not After : Feb 18 01:02:44 2027 GMT
        Subject: CN=0745FE343217611BEA5A75B7DB21DDFE7E8A6F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:5c:1e:93:a7:f0:17:c9:da:e6:cf:d8:a2:
                    94:51:68:07:82:69:fe:83:ac:6e:bc:43:ef:80:92:
                    fc:26:d4:0e:21:6d:a4:49:b1:38:7a:0c:60:28:61:
                    e4:bd:9f:81:36:d8:13:1d:e2:9e:f7:2b:b9:de:cc:
                    ef:4b:a7:92:2c:40:a8:56:44:5d:ca:2c:55:af:82:
                    58:c8:b1:00:fd:00:37:93:f1:5b:e4:4a:1e:e1:e7:
                    ae:69:f9:73:81:d7:2f:a1:0e:33:55:50:39:06:28:
                    f8:86:85:ea:a4:c1:10:bf:fc:ad:1a:80:78:c6:7c:
                    26:81:da:da:80:6b:4c:46:c1:7d:3c:20:7a:d2:65:
                    a6:1d:20:6f:41:d8:3b:43:2d:d2:91:cf:b6:e8:6f:
                    ca:9a:76:c9:3b:3a:a1:ff:9a:00:6d:7e:4a:46:51:
                    32:e3:16:72:4e:5e:e6:88:de:37:35:6b:b2:42:b0:
                    4c:7d:c2:54:aa:c5:b1:4d:f4:6d:59:d2:13:94:4c:
                    75:13:40:45:a7:e5:a7:a3:e3:24:07:ef:30:d7:35:
                    e4:9a:c3:d7:a7:6a:f4:91:2e:9f:83:65:50:ec:9b:
                    61:8b:17:7e:d7:5a:a7:b8:81:3d:7c:a0:a9:e3:cd:
                    d0:3b:04:fd:a1:d7:51:31:a1:05:47:7e:fa:96:87:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:45:FE:34:32:17:61:1B:EA:5A:75:B7:DB:21:DD:FE:7E:8A:6F:51
            X509v3 Authority Key Identifier:
                keyid:FF:17:67:7E:D0:63:D2:37:B5:82:E0:29:8B:AD:1E:FE:8E:F1:CA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF17677ED063D237B582E0298BAD1EFE8EF1CA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WizM153Ba9ku8ck1G4rAWbJ61nXUU1yq3w1VgPwyXPA/0/3133322e3235352e3138342e302f32342d3234203d3e20323634353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:96:78:11:f4:10:d7:e6:74:5f:eb:14:48:c1:e4:1e:09:
         48:7c:4a:e0:a6:e2:b3:4b:13:42:da:32:5a:1b:47:9d:47:21:
         c3:b3:0c:1b:2e:91:24:d9:90:87:f8:fa:8f:97:6b:3d:13:3c:
         05:5f:2e:e6:d2:f7:03:f8:c6:73:44:73:2b:94:44:9e:70:f6:
         44:0c:28:4c:82:d6:1d:c3:4c:35:cb:0b:c2:e4:43:ff:62:a2:
         18:44:85:02:31:fc:c8:bf:f4:d6:c2:38:fb:8c:1c:7c:04:64:
         f6:72:43:61:e7:14:1d:ad:80:d3:72:61:0c:ec:5d:e3:4f:30:
         d9:9b:0f:a3:f6:9d:76:e6:e7:1f:99:24:e2:f3:f9:a4:88:ee:
         7a:88:11:6e:cd:65:74:25:46:df:df:25:60:0e:6a:7e:d1:04:
         a8:c2:f9:19:d6:08:3b:8f:cb:16:30:ad:3d:e1:51:81:9c:3f:
         95:3b:2c:d4:6e:86:f7:55:b6:d8:91:41:6a:18:e4:bc:ec:b1:
         18:6d:e4:06:53:d8:5b:c5:a7:d6:88:c4:ab:c0:96:2e:dc:52:
         d9:04:34:f9:a9:64:80:ff:6f:62:e9:6c:e7:e6:1a:fe:a3:eb:
         eb:f2:db:7e:b8:ef:73:96:24:77:13:c3:52:bf:74:8c:b1:a0:
         aa:b5:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:19:07 2026 by rpki-client