Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa
File:                     3138372e39342e3132382e302f32302d3234203d3e203238333539.roa (raw, json)
Hash identifier:          l5RWJ9bFjBDndkxn7uPcGNUFlGx2ADOorkZXp9fW3Uk=
Subject key identifier:   29:8F:CC:06:81:81:DC:D3:CD:26:A7:15:7E:B0:6D:DB:55:F1:56:5C
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       70D77173670799E56A0FDCBC895A2BD17A98FBD4
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa
Signing time:             Fri 13 Feb 2026 18:00:33 +0000
ROA not before:           Fri 13 Feb 2026 17:55:33 +0000
ROA not after:            Fri 12 Feb 2027 18:00:33 +0000
asID:                     28359
IP address blocks:        187.94.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:22:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:71:73:67:07:99:e5:6a:0f:dc:bc:89:5a:2b:d1:7a:98:fb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Feb 13 17:55:33 2026 GMT
            Not After : Feb 12 18:00:33 2027 GMT
        Subject: CN=298FCC068181DCD3CD26A7157EB06DDB55F1565C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:94:b2:ea:9c:2e:f4:99:07:a0:ab:f1:f2:51:
                    6e:06:12:8a:c8:6c:d6:f4:33:28:e5:d0:12:af:ec:
                    2a:b0:87:aa:0c:28:38:4e:4b:fd:fd:7a:00:7b:c0:
                    b7:a8:96:d3:8f:4e:af:9a:d4:cb:79:bb:55:0c:d3:
                    a8:91:d4:4a:67:18:0f:df:68:56:de:69:ce:b8:8b:
                    89:79:64:1e:02:29:18:09:b4:d8:b2:dc:a6:1a:13:
                    cb:d6:fa:13:78:87:36:d2:d7:62:8b:88:ce:97:1f:
                    38:ca:a7:19:1b:5a:82:25:4b:9e:46:16:85:57:4d:
                    8a:de:c5:dd:3c:b6:fc:a8:a0:22:76:c4:a4:88:71:
                    74:ed:0c:6f:82:9c:51:dd:9b:5c:15:45:0d:69:8d:
                    d1:c1:f6:6e:40:55:0f:af:e7:4d:20:d5:97:7e:77:
                    ea:23:a3:eb:ce:3a:30:79:7e:8c:18:a6:44:c1:4e:
                    dc:16:63:0b:c6:a0:95:2b:f3:2f:d7:43:4d:16:46:
                    c7:22:19:96:b4:df:4d:df:20:ee:b2:b6:53:70:33:
                    2b:9f:5c:5e:7b:25:83:9f:4a:c0:eb:e0:bd:88:b3:
                    57:69:cf:72:42:ac:72:40:7c:bf:23:be:03:aa:9d:
                    1b:3d:69:53:7b:4b:7f:5e:59:de:0a:a6:ae:f9:2a:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8F:CC:06:81:81:DC:D3:CD:26:A7:15:7E:B0:6D:DB:55:F1:56:5C
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3138372e39342e3132382e302f32302d3234203d3e203238333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:b7:d2:6a:48:9c:eb:68:20:ff:05:a5:3f:81:1d:24:c6:
         11:5d:91:2d:ab:bf:ea:34:c7:85:55:eb:42:5f:6c:17:3b:1a:
         84:78:08:9d:99:c5:94:55:6e:88:7d:f6:33:de:39:6d:66:a1:
         2c:41:31:48:38:e6:0d:59:e8:ed:16:cc:ef:97:80:2b:d7:1f:
         d8:01:a3:26:41:ac:23:3e:5c:84:24:b4:b3:69:f5:5e:9f:9d:
         ec:14:c8:0a:d1:f4:66:c4:ef:f5:b9:82:50:85:a4:32:8f:1a:
         43:de:82:d8:33:4c:68:0f:db:c5:6a:83:4c:77:2b:8c:46:ad:
         c2:29:1d:93:ba:ea:c1:e5:02:1c:3f:6c:ab:2c:f8:df:bb:da:
         50:21:f6:b9:63:7d:41:ef:79:00:5d:24:a9:b2:f3:1b:02:0a:
         d6:78:cf:23:cf:99:49:b9:f6:9d:36:88:39:cc:01:73:74:36:
         25:c8:b7:c0:80:af:3b:d2:f4:33:ad:b4:de:a5:64:ea:be:2c:
         c1:13:f3:d2:ac:aa:7f:16:92:4a:2a:92:10:a2:22:7d:9c:32:
         5c:df:4e:8f:e6:0d:44:73:64:c4:21:d6:5f:e2:cb:e5:2f:aa:
         11:f5:30:0e:14:83:5c:f1:1d:e1:88:e5:6f:d9:55:5f:04:fc:
         8a:fb:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:20:13 2026 by rpki-client