Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa
File:                     3136382e3139342e37362e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          rUY49KoEuS4Vi8bQsoRrZDvM+3vulnO5+eqjZfCpnd8=
Subject key identifier:   B9:D7:8D:2E:0E:7C:9A:BB:6A:CE:9A:C0:63:E4:71:0B:87:F1:2A:DD
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       7E73D1D224E2F30D2BF62BCFCE8FD64D9D56B47D
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 14:40:03 +0000
ROA not before:           Fri 13 Feb 2026 14:35:03 +0000
ROA not after:            Fri 12 Feb 2027 14:40:03 +0000
asID:                     52974
IP address blocks:        168.194.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:73:d1:d2:24:e2:f3:0d:2b:f6:2b:cf:ce:8f:d6:4d:9d:56:b4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 14:35:03 2026 GMT
            Not After : Feb 12 14:40:03 2027 GMT
        Subject: CN=B9D78D2E0E7C9ABB6ACE9AC063E4710B87F12ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:e0:df:2f:1b:44:0e:be:67:3b:10:c8:54:
                    d4:a1:78:e8:ec:80:37:eb:ed:2c:24:ca:1e:d5:2e:
                    a7:51:f2:7f:7c:54:9e:3b:88:04:05:e1:c6:61:96:
                    1f:de:72:e6:89:4b:ae:cf:cf:90:78:49:87:30:65:
                    cf:12:0d:24:23:e7:1e:f7:c8:ba:bb:75:fb:a2:fd:
                    09:07:8d:3d:b1:ca:92:64:e4:2f:6d:cb:fa:97:3d:
                    91:5e:7a:1a:b1:2d:f2:18:bf:0e:9b:27:14:4a:78:
                    0a:64:84:f6:e5:8c:73:c0:ae:92:01:35:25:ae:87:
                    98:dd:63:af:1d:39:12:c3:24:5a:1f:f9:18:eb:5c:
                    4a:32:2b:46:22:01:0d:e4:24:1b:8c:ab:98:a0:3b:
                    9b:04:5d:ef:e9:d1:07:50:f8:de:fa:e6:7f:13:ca:
                    8a:a0:cc:64:77:d6:3d:dc:b8:a0:ee:50:2a:a6:f4:
                    dd:47:67:73:4b:a8:e1:91:97:f7:23:3f:62:f3:b9:
                    57:be:84:42:33:e9:1c:4f:c5:33:ff:e4:a7:db:b3:
                    49:70:cd:47:a6:0e:60:dd:32:2c:6b:ba:37:4f:0a:
                    2f:8a:20:09:81:57:b0:0a:a2:97:96:a2:59:6e:ca:
                    9f:26:dc:1d:63:6b:e0:4e:5d:e1:af:2c:83:4e:e9:
                    bd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D7:8D:2E:0E:7C:9A:BB:6A:CE:9A:C0:63:E4:71:0B:87:F1:2A:DD
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:34:3b:bd:dc:cf:b8:59:02:45:70:da:82:19:bf:7f:9f:
         eb:a3:77:c2:49:8e:32:ea:8b:44:1b:32:0a:bb:d9:1b:4e:de:
         04:ce:d8:c8:23:3a:7f:37:1a:af:d0:27:15:72:82:cb:e9:f3:
         a1:78:78:f7:5d:cb:1c:51:22:ec:46:a8:cd:2f:f0:24:46:78:
         24:cd:b8:52:aa:86:b1:b7:07:7b:ee:01:cc:aa:9f:a1:e3:d2:
         58:54:d7:fa:23:f9:ad:5b:c2:f0:c4:2b:d0:b7:3c:c0:41:88:
         ed:0f:c0:fe:3a:b9:8a:23:48:40:db:84:f5:76:06:08:02:9f:
         12:0e:4f:1b:80:95:4a:50:6a:29:1f:ce:aa:dd:d9:d5:70:23:
         1f:6c:20:1e:31:f3:8b:37:87:fa:64:e4:94:e8:74:58:e3:1c:
         77:2d:c6:e4:d4:e4:e7:ae:c9:fc:18:1a:34:fb:3a:f7:02:33:
         ff:e1:0c:de:64:62:50:86:28:d5:89:40:8d:60:4b:a3:9d:e6:
         ea:f9:a5:2c:1c:e8:1b:02:09:f7:b8:5f:83:f8:68:c1:b0:7e:
         b0:78:d9:b1:d9:a2:1e:6b:4a:3d:2a:7c:6f:54:53:5c:d0:0d:
         e6:cc:f8:a9:cc:83:fc:8e:ee:f9:46:7e:b9:46:5b:00:02:6a:
         66:65:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:39:26 2026 by rpki-client