Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e37302e3139322e302f32302d3234203d3e203238333539.roa
File:                     3137372e37302e3139322e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          am0wZ/aLI5xPmHK+7HBa70PDtICK9zqcAO1jcm5ukzY=
Subject key identifier:   A5:CA:7B:34:91:7D:41:EE:1E:B6:23:F9:45:21:00:4B:9E:73:C5:70
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       106823BB3153F21250BA7D71039A25F04BAFC9D4
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e37302e3139322e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 13 Feb 2026 18:00:32 +0000
ROA not before:           Fri 13 Feb 2026 17:55:32 +0000
ROA not after:            Fri 12 Feb 2027 18:00:32 +0000
asID:                     28359
IP address blocks:        177.70.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:68:23:bb:31:53:f2:12:50:ba:7d:71:03:9a:25:f0:4b:af:c9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Feb 13 17:55:32 2026 GMT
            Not After : Feb 12 18:00:32 2027 GMT
        Subject: CN=A5CA7B34917D41EE1EB623F94521004B9E73C570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:d2:89:ce:d2:40:fa:2d:fb:28:15:71:06:
                    a0:c7:b4:03:3a:3b:ab:7d:3d:87:29:5c:af:5e:42:
                    4a:fe:57:ab:c9:80:13:87:da:a7:88:21:e7:92:c7:
                    13:29:fe:74:f0:b7:19:ce:90:3d:7e:8d:34:a6:10:
                    ba:59:40:9f:f9:1e:ad:3e:1a:94:4e:16:93:8c:12:
                    01:e3:d2:68:36:90:b6:cd:cb:c2:56:90:ee:21:40:
                    f0:77:54:7f:44:cd:f6:a4:43:36:02:dc:be:5b:7d:
                    f6:c3:f5:15:5b:51:4e:e8:6a:e8:e5:d4:39:7d:f1:
                    e5:05:27:66:ea:c3:40:4a:ef:f2:6a:49:f4:89:ea:
                    46:fa:62:29:be:59:e3:35:07:44:ac:ea:52:0b:85:
                    d3:c9:2f:36:b2:0c:6b:ff:ba:b8:db:72:52:2a:a3:
                    2c:40:5f:33:4b:bf:8d:21:ad:95:cc:f0:61:e5:a6:
                    3d:c8:cb:c6:5e:78:31:07:c5:3a:81:03:68:b8:92:
                    3b:30:f5:77:ce:fd:f5:fd:70:26:f7:dc:a5:86:f5:
                    ba:0f:59:29:f9:62:f4:d6:be:83:ff:46:3a:9b:aa:
                    55:84:8f:14:67:17:78:15:e2:80:1d:42:23:24:48:
                    02:74:14:6a:15:c4:9d:d4:d7:3f:6a:4f:a4:23:ed:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CA:7B:34:91:7D:41:EE:1E:B6:23:F9:45:21:00:4B:9E:73:C5:70
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e37302e3139322e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:d3:25:03:85:32:37:b2:b4:84:bc:12:08:0c:ff:9a:c0:
         33:03:39:80:71:aa:67:3f:bd:4e:ce:ab:3f:9b:a7:ff:c1:f2:
         85:b7:72:32:94:91:74:ba:a0:c7:fd:4b:88:8a:04:87:e1:be:
         84:b1:77:a9:6d:c6:31:eb:dd:f3:a7:86:db:c2:a1:3d:3c:f5:
         14:4c:37:0d:d7:be:a4:f6:f1:e4:e2:18:aa:e2:36:69:75:a6:
         73:3c:bf:77:a9:42:b2:b7:51:d8:59:9d:04:a7:27:48:3f:de:
         6b:25:b7:2e:d1:f3:5c:f5:66:eb:93:ac:7c:c0:74:4a:c8:9b:
         b4:f3:35:13:3c:b3:11:e3:55:c7:40:52:ef:85:9a:82:4e:97:
         a3:d9:09:21:79:bd:76:70:b8:30:ec:1e:33:e6:5f:16:a4:e4:
         90:26:8a:82:46:1a:e8:03:1a:dd:e8:45:b5:e9:89:d8:bf:d7:
         84:fc:9f:e3:22:39:0c:83:c7:8e:46:c5:98:27:d5:05:77:b9:
         e3:4c:1c:dd:9d:50:ae:d5:ac:06:b5:33:28:f7:c9:27:da:d0:
         2d:a8:f4:d4:87:4a:30:c2:42:da:c3:6c:d1:29:94:1a:6e:2d:
         d9:67:4b:d4:c5:cc:d5:78:1c:20:62:97:de:dd:be:d4:a0:e8:
         c6:9b:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:20:13 2026 by rpki-client