Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa
File:                     3133312e37322e3139362e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          mvE1cOtdh/CCv47OQvDB5Ep/kRuNMnBylmV8N6e9nDU=
Subject key identifier:   56:4F:C7:D7:FC:F3:29:FA:76:D1:1E:F1:BA:93:87:55:25:F5:C9:35
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       6AC0E626074EC387EB851985641F0A8D8D05BC93
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 13:40:03 +0000
ROA not before:           Fri 13 Feb 2026 13:35:03 +0000
ROA not after:            Fri 12 Feb 2027 13:40:03 +0000
asID:                     52974
IP address blocks:        131.72.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:e6:26:07:4e:c3:87:eb:85:19:85:64:1f:0a:8d:8d:05:bc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 13:35:03 2026 GMT
            Not After : Feb 12 13:40:03 2027 GMT
        Subject: CN=564FC7D7FCF329FA76D11EF1BA93875525F5C935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:b5:45:3a:58:2d:11:1d:df:14:d7:d3:09:
                    ed:83:54:bc:4c:4e:b2:c0:f5:65:97:da:26:1f:13:
                    95:a2:ed:ef:e5:99:1c:3f:67:d7:56:d4:ab:88:fe:
                    86:f5:46:8c:cc:c5:96:a0:d9:40:c0:c8:79:ef:13:
                    1d:dd:b1:c1:39:20:32:71:fe:d4:d3:09:f6:98:01:
                    22:1a:81:8d:7c:a8:37:c4:fb:71:fc:6c:f4:b0:96:
                    2a:1f:43:2a:8b:77:d3:2f:ff:d3:e4:9e:d9:c9:71:
                    49:74:79:6e:38:83:8f:a8:28:a2:78:c1:cb:09:2f:
                    47:69:a5:ce:e3:df:d0:ba:fe:83:6a:1e:24:de:f0:
                    1b:2f:2a:5b:d2:b1:c4:b6:28:57:dc:d0:9e:19:31:
                    d2:a6:2b:ea:ae:ad:93:4a:a0:c1:f1:df:c9:a4:d2:
                    5d:cb:e1:38:a5:b7:65:cf:c9:e7:c9:fe:bf:de:ff:
                    7a:c6:54:cd:8d:e6:99:48:1b:29:3b:90:ee:b2:0e:
                    bd:e4:29:48:39:a3:6d:bd:84:3b:cc:07:df:dd:3b:
                    04:29:e0:2c:91:97:5b:55:ed:6b:a4:5d:77:e6:b4:
                    de:c0:40:37:81:cd:6a:13:3f:ef:88:2f:be:a9:e3:
                    c4:c2:5a:94:e4:b4:3b:c5:ed:92:5b:f4:b4:3f:da:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:C7:D7:FC:F3:29:FA:76:D1:1E:F1:BA:93:87:55:25:F5:C9:35
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:ec:3c:8a:a7:be:23:cd:58:7a:08:f5:c3:ea:4a:bd:7c:
         e5:c8:95:7d:f0:15:90:1e:d9:6f:a5:14:29:d7:bc:ee:73:87:
         cb:cd:53:d4:b0:90:f4:78:bb:82:65:94:26:95:f3:61:d6:d7:
         73:ed:30:98:87:e1:60:e9:55:10:76:72:2b:4d:7c:f6:b2:06:
         a5:c5:03:62:1e:d5:34:05:22:65:a8:01:73:09:5d:1b:30:16:
         f1:07:2e:69:d2:fa:40:16:3d:ab:f8:51:af:6c:10:74:40:40:
         6b:e7:e1:b7:2a:89:94:d0:c0:98:9c:3d:b8:f9:b0:53:c5:14:
         1c:0f:14:be:14:c5:15:3c:13:ed:37:23:65:d6:3b:9f:d3:88:
         98:b6:73:3f:44:91:4a:f6:07:41:75:f7:18:03:be:e9:54:24:
         76:ff:c8:2f:59:87:78:70:00:62:4f:45:be:76:88:65:2d:3c:
         ee:55:bb:dd:eb:a3:ff:87:fc:8d:41:5f:d9:71:8e:dd:c1:e2:
         e2:84:6f:56:c9:48:e2:5b:06:a3:13:a8:f5:6f:2b:a1:7c:75:
         c0:6d:e0:b1:8e:ce:37:cf:c4:55:a6:fe:c5:1f:58:9c:1e:b6:
         cb:f9:7b:c6:d0:b2:90:d2:64:64:2e:41:dd:b7:6e:53:fa:31:
         b9:7e:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:40:01 2026 by rpki-client