Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3134332e3230322e3137322e302f32322d3234203d3e203532393734.roa
File:                     3134332e3230322e3137322e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          u+w5lHB6RLx+PRa6xXDmm65A3/jxvi1+MDerRbE3wRk=
Subject key identifier:   83:A2:38:86:20:AE:47:BE:B9:AB:D6:FB:E2:E2:FE:A8:61:6F:ED:0B
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       36BE15C6A545D34E8871093234AC82DEEF729E12
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3134332e3230322e3137322e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 14:40:03 +0000
ROA not before:           Fri 13 Feb 2026 14:35:03 +0000
ROA not after:            Fri 12 Feb 2027 14:40:03 +0000
asID:                     52974
IP address blocks:        143.202.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:be:15:c6:a5:45:d3:4e:88:71:09:32:34:ac:82:de:ef:72:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 14:35:03 2026 GMT
            Not After : Feb 12 14:40:03 2027 GMT
        Subject: CN=83A2388620AE47BEB9ABD6FBE2E2FEA8616FED0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:be:d5:97:26:dd:4c:cd:4f:00:1c:bc:d0:
                    2a:62:19:a1:93:c6:86:8e:b4:83:b6:b3:ec:c9:70:
                    7b:f7:a9:df:71:19:55:9c:3f:2c:c2:aa:40:c6:f7:
                    25:93:75:f9:7c:71:99:8a:0b:f6:54:7d:9a:25:a2:
                    1b:fe:be:12:22:fd:a4:61:05:d4:1a:1d:af:de:5c:
                    a1:8d:9f:29:bb:e9:80:cf:ae:89:d1:e2:76:b7:f1:
                    ee:c5:9c:8d:3e:51:72:18:a8:39:91:bc:17:de:8b:
                    48:91:89:fe:ce:d5:b9:02:44:09:d3:93:50:3e:e3:
                    d6:1d:8d:60:e3:5e:84:bc:11:f6:70:41:ea:bb:0f:
                    ea:da:3d:a8:72:07:5b:3d:97:25:6e:aa:92:3d:85:
                    28:d4:9e:b2:aa:23:f9:b7:24:f7:9d:38:1b:ff:da:
                    0d:d7:01:cc:d9:c1:33:06:0e:34:0b:ab:91:23:e3:
                    ea:94:af:57:20:63:0e:52:74:28:5e:73:ab:cf:d4:
                    de:35:e4:d0:a0:e8:16:fd:b5:71:a7:62:eb:59:04:
                    ea:9c:78:ed:75:85:10:e8:80:7f:16:43:31:73:c9:
                    29:92:fe:c2:3b:fa:2b:3d:cc:57:a1:ad:71:4c:aa:
                    bf:f0:34:de:9e:d4:40:51:ec:2d:37:c7:1d:5c:d0:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A2:38:86:20:AE:47:BE:B9:AB:D6:FB:E2:E2:FE:A8:61:6F:ED:0B
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3134332e3230322e3137322e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:5a:17:d4:82:b2:29:d9:e3:39:8f:87:62:11:38:1d:46:b4:
         29:3c:7a:e8:b7:23:51:bc:ad:96:33:10:89:da:3e:d3:93:51:
         46:1a:bc:aa:45:84:50:d0:34:5b:f4:f4:f4:51:42:b0:da:9c:
         04:cb:9b:dc:c1:00:f8:dc:51:f2:b3:d2:0c:23:ad:35:a2:87:
         cc:bb:18:eb:31:02:1e:17:1b:fe:0e:f7:9d:6a:01:16:98:a5:
         8e:75:0f:ca:22:1f:cd:62:ff:e9:6b:97:ae:09:9c:19:8d:18:
         2f:9e:59:b2:6e:99:d8:59:29:97:ff:bb:2c:03:b1:2f:0e:80:
         ff:70:6d:70:a9:51:e5:19:d7:a0:18:53:0d:d1:d9:59:21:5c:
         4b:31:55:f6:00:45:4f:bc:38:5e:6d:80:2c:ac:c9:bf:ed:0f:
         96:f8:57:ab:13:3c:58:5e:9a:65:f2:9f:18:e9:79:ed:1e:fc:
         a0:84:47:75:56:69:13:69:6d:d3:d4:02:dc:c8:21:e0:a1:24:
         43:5c:8c:28:42:cd:54:03:36:cd:59:0c:ca:44:13:31:b9:86:
         78:9e:ea:ca:fe:5a:65:a4:24:f9:c5:c9:58:b7:2b:18:ed:4b:
         77:93:06:48:1f:92:19:eb:7f:e8:71:ae:52:38:26:71:77:65:
         ce:32:b9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:40:31 2026 by rpki-client