Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
File:                     3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa (raw, json)
Hash identifier:          ANoUgyhlanJ4lrwwOCrD0BFZZ3UeLU2MsQTe4fjfCR8=
Subject key identifier:   AB:84:81:E7:F5:C5:0D:52:31:13:CC:8F:D1:0C:4E:A1:37:A6:55:4A
Certificate issuer:       /CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
Certificate serial:       2BE8BF115C9DA9C4749857CF7536790159B6DF7D
Authority key identifier: FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
Signing time:             Fri 06 Feb 2026 19:00:00 +0000
ROA not before:           Fri 06 Feb 2026 18:55:00 +0000
ROA not after:            Sat 06 Feb 2027 19:00:00 +0000
asID:                     270628
IP address blocks:        177.70.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl
                          rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e8:bf:11:5c:9d:a9:c4:74:98:57:cf:75:36:79:01:59:b6:df:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
        Validity
            Not Before: Feb  6 18:55:00 2026 GMT
            Not After : Feb  6 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:87:13:10:05:df:76:17:9f:3e:c3:5e:b0:b8:
                    8c:b2:7c:51:f7:70:e5:c8:7c:6a:73:82:e7:94:16:
                    02:e9:0d:e1:cc:31:41:26:2d:a8:d7:f8:db:c1:4e:
                    08:91:88:d7:93:7f:26:c9:6c:8d:db:1a:37:51:d0:
                    48:9c:a0:7c:05:83:2a:be:a4:4d:21:90:d9:ce:49:
                    3d:af:04:6e:fb:a6:89:a0:c9:2f:32:15:51:5b:41:
                    ba:f2:84:fc:b8:a5:64:a0:fc:ab:f5:f7:67:e7:66:
                    d8:49:3c:a5:0e:16:c6:d5:d7:2a:17:e7:12:08:7f:
                    eb:66:0f:67:e9:10:d0:fa:da:8b:2f:4a:b5:33:7a:
                    ee:15:ee:f5:af:48:1b:fc:f6:e0:23:f7:63:58:60:
                    38:fd:38:9e:a4:93:df:df:28:32:ff:8f:ae:f6:27:
                    22:29:7a:52:08:74:fd:ca:d5:6f:74:ec:ad:61:f8:
                    dc:dd:3d:17:b6:9c:da:84:3b:32:87:77:a2:65:3c:
                    15:4a:7d:af:64:f1:2c:63:6e:dc:14:5d:11:a1:78:
                    64:3d:f2:4a:8a:02:b4:33:11:ff:df:8f:c2:a9:2f:
                    ac:f1:03:71:1e:8f:6a:1d:3d:94:33:1c:ec:e7:99:
                    a1:b0:41:4b:99:bd:07:54:95:93:17:5a:e9:c9:ca:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:84:81:E7:F5:C5:0D:52:31:13:CC:8F:D1:0C:4E:A1:37:A6:55:4A
            X509v3 Authority Key Identifier:
                keyid:FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:c5:99:24:a6:77:cd:38:0f:ff:88:dd:9f:70:5c:69:57:
         b4:1d:c3:1d:26:ea:64:4c:7f:45:de:c6:bd:1b:c5:8f:10:c0:
         2c:10:dc:ed:12:69:87:3a:4e:dc:3d:69:05:4c:2e:47:bc:61:
         08:0e:c8:67:b8:b7:fe:96:ea:92:25:78:a4:13:ce:5e:33:89:
         91:a8:c6:b8:4f:5e:db:2b:92:c1:d2:dc:5f:89:73:c0:ba:ce:
         17:04:05:44:f5:d0:13:8a:27:a8:6b:95:5f:da:82:d8:3f:ef:
         6e:2e:cf:d6:5b:3e:d1:b9:37:28:44:99:59:e5:74:db:3f:85:
         1f:a3:72:c0:59:9e:79:64:43:58:ea:cb:cf:d3:a0:a3:5b:de:
         79:bb:e9:d9:a9:be:5a:71:0a:d5:dd:50:cc:03:02:d2:63:69:
         a9:cc:18:e8:64:ac:a5:14:49:66:4c:86:f7:a0:7b:36:6d:ed:
         75:a3:4f:ed:f1:64:33:bc:de:84:44:90:36:cf:b4:59:2b:83:
         6c:ea:36:d1:b2:91:df:3e:c8:48:ef:6b:75:b8:7d:2b:6c:92:
         20:ab:a4:2d:06:1d:e3:af:61:73:03:b1:e0:e5:f1:cd:c9:8d:
         06:91:ae:7c:c4:cd:09:9c:53:e5:7c:f2:6b:40:de:38:9d:61:
         fb:25:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:40:57 2026 by rpki-client