Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa
File:                     3137302e37382e322e302f32332d3233203d3e20323635343931.roa (raw, json)
Hash identifier:          634Oszhi1DFT8bfE7Djq9olQvZXxfzSSYtBicS0WQz4=
Subject key identifier:   B2:21:1E:4E:FE:0D:5C:34:CF:C1:3F:32:F2:D5:4C:AC:CD:CF:F7:7F
Certificate issuer:       /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial:       4F6019F309D4646083405E3C8973B25E0CF30CF3
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa
Signing time:             Tue 27 Jan 2026 19:23:09 +0000
ROA not before:           Tue 27 Jan 2026 19:18:09 +0000
ROA not after:            Tue 26 Jan 2027 19:23:09 +0000
asID:                     265491
IP address blocks:        170.78.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
                          rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:60:19:f3:09:d4:64:60:83:40:5e:3c:89:73:b2:5e:0c:f3:0c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
        Validity
            Not Before: Jan 27 19:18:09 2026 GMT
            Not After : Jan 26 19:23:09 2027 GMT
        Subject: CN=B2211E4EFE0D5C34CFC13F32F2D54CACCDCFF77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:f8:b9:ee:0e:64:7d:91:97:93:29:f2:dd:
                    19:89:ee:5b:63:35:17:22:2e:69:a1:d9:10:00:58:
                    ea:01:fa:08:d8:87:58:58:54:05:15:fd:99:f6:17:
                    48:42:67:8b:23:8a:67:c7:fa:1c:ad:3b:d2:5c:d8:
                    3c:f8:83:8e:7b:3b:fe:57:6d:f6:4e:83:21:86:9b:
                    6d:49:eb:92:c0:47:54:c5:94:02:f6:44:36:78:50:
                    31:00:1c:a6:e7:59:04:e1:8d:54:1c:ef:70:c5:fc:
                    2c:c3:b2:53:a6:00:3a:08:90:08:6d:2c:85:e8:3e:
                    2a:97:30:e9:a4:d6:2a:04:9c:8c:6d:4e:93:10:2f:
                    7c:b4:0f:5a:9b:05:58:93:e0:fb:7b:35:31:8f:8d:
                    12:75:c8:3a:de:65:7c:dd:e4:c7:27:38:80:ca:90:
                    2f:1a:40:e4:5e:b4:d5:74:a9:57:49:6a:1c:30:94:
                    b2:c5:1b:85:71:c7:76:2b:db:7e:2f:ae:91:12:6f:
                    67:27:be:55:a4:b4:8a:4b:4e:b6:2c:8f:76:84:7e:
                    de:71:28:02:a3:e6:43:aa:05:db:69:ff:f7:64:8c:
                    41:07:d0:e6:11:49:78:90:94:8b:88:5d:6c:60:f9:
                    cd:b7:ed:47:76:5b:3b:81:1b:3b:cd:79:69:ac:3b:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:21:1E:4E:FE:0D:5C:34:CF:C1:3F:32:F2:D5:4C:AC:CD:CF:F7:7F
            X509v3 Authority Key Identifier:
                keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/3137302e37382e322e302f32332d3233203d3e20323635343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:65:69:e5:68:ab:6e:4c:f9:0c:05:78:d4:1f:19:cc:00:08:
         18:9e:ea:a5:d6:6f:35:59:0f:7e:55:ab:39:6d:e9:17:60:77:
         60:bd:29:ed:c1:ae:73:e0:89:23:05:14:92:b5:4d:3d:00:5c:
         84:dd:ad:8c:a2:4d:16:f0:dd:03:6c:48:0b:b7:1d:56:18:c0:
         45:1f:51:55:1b:36:f3:14:48:3f:83:27:37:03:63:7a:8f:f8:
         c5:d1:cd:e2:4f:ba:3e:f5:37:86:84:fb:9d:56:4b:d8:ac:58:
         f7:9e:c8:6a:a8:56:14:7d:c9:96:8a:99:6c:bc:04:d2:ac:b4:
         38:95:fa:b2:0a:70:a6:39:45:81:c7:c9:e7:01:65:2d:97:f1:
         b9:00:e2:9e:d4:cd:af:4a:46:92:a5:56:8d:c6:d4:b8:d1:5a:
         f3:b9:28:e4:84:d0:86:95:3f:ce:7e:d8:56:3a:b2:53:5c:82:
         cc:8c:f3:6b:fd:a0:5e:99:7d:66:7e:21:d2:12:1d:60:f9:41:
         98:15:fe:a6:17:2e:a2:0f:f7:54:79:b6:a9:35:31:2f:12:b3:
         de:0e:4e:7f:86:7f:69:93:fc:c3:c6:d5:07:ce:45:43:d0:ba:
         82:eb:70:55:66:4b:2c:99:43:a5:b4:dd:a3:06:27:d0:05:a9:
         f1:8d:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:52:11 2026 by rpki-client