Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e38342e3232342e302f32322d3234203d3e203532393734.roa
File:                     3137302e38342e3232342e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          24hQHXcCMdW2FFkBHUjCSrH0oaH319lBQBzoQi3LqPc=
Subject key identifier:   50:75:36:CC:B2:2F:7A:2D:62:E1:49:E9:B7:C5:0C:8E:C6:10:45:77
Certificate issuer:       /CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
Certificate serial:       702EAECA7B6309678878DD928BB63E13AE3FCA8A
Authority key identifier: E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e38342e3232342e302f32322d3234203d3e203532393734.roa
Signing time:             Fri 13 Feb 2026 14:40:03 +0000
ROA not before:           Fri 13 Feb 2026 14:35:03 +0000
ROA not after:            Fri 12 Feb 2027 14:40:03 +0000
asID:                     52974
IP address blocks:        170.84.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 18:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2e:ae:ca:7b:63:09:67:88:78:dd:92:8b:b6:3e:13:ae:3f:ca:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68
        Validity
            Not Before: Feb 13 14:35:03 2026 GMT
            Not After : Feb 12 14:40:03 2027 GMT
        Subject: CN=507536CCB22F7A2D62E149E9B7C50C8EC6104577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:af:7c:3b:66:e7:33:47:9b:e9:fa:ef:f9:
                    eb:e8:66:35:7b:e7:4c:18:8e:fb:04:6b:7a:2d:b4:
                    6a:fd:b1:a9:54:88:34:c1:2d:11:35:69:37:72:23:
                    1a:0f:51:d7:fc:e8:5e:85:74:57:0d:93:fd:23:87:
                    95:66:f3:b3:ac:66:1a:68:2c:2e:98:bf:8a:1f:35:
                    7a:c9:2e:20:df:fb:32:4b:8c:75:75:32:eb:78:d5:
                    9f:25:9a:ab:e8:6a:37:46:cf:32:1c:bf:f7:84:68:
                    49:e0:7f:c5:47:88:f2:6c:a0:64:e6:9b:1d:46:90:
                    08:9b:80:99:20:5d:ee:55:90:49:ad:59:fd:8a:66:
                    18:5f:aa:87:e3:a5:38:f1:67:65:a7:dd:3e:34:26:
                    98:96:ef:e7:0e:cc:c1:a8:83:2d:6c:2a:4d:51:91:
                    b4:69:c9:cb:51:59:88:ab:e9:d5:b1:21:b1:1d:d9:
                    27:fa:86:03:f5:82:83:53:ac:9a:78:77:12:04:e2:
                    15:b5:d1:47:46:42:78:b7:c5:47:8c:dd:d4:18:d2:
                    8b:80:09:76:2a:0d:5a:38:4e:fe:19:b0:11:39:f8:
                    a3:55:7c:a4:12:50:d4:04:3a:97:60:59:67:f7:ac:
                    56:ef:a6:ef:15:3f:23:7f:ce:e6:b7:85:b4:6b:be:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:36:CC:B2:2F:7A:2D:62:E1:49:E9:B7:C5:0C:8E:C6:10:45:77
            X509v3 Authority Key Identifier:
                keyid:E0:B7:8B:98:B4:09:4A:86:E5:8E:4F:A9:EA:D0:06:4F:2A:8C:CF:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0B78B98B4094A86E58E4FA9EAD0064F2A8CCF68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3137302e38342e3232342e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:1f:3b:08:7d:ee:12:f3:81:f7:46:f3:80:f4:31:bf:e9:
         fd:4f:a6:bc:56:fb:d2:8e:f3:34:b6:c0:14:16:7c:49:78:80:
         59:21:a5:92:69:d9:14:40:8b:ac:f5:e1:93:47:c5:1d:92:5e:
         ea:91:59:4b:05:b8:83:3b:da:ee:af:c7:fe:a6:55:d7:8e:f1:
         fa:45:46:48:f4:c9:e3:f9:1a:ab:c8:c3:49:52:b6:1d:3f:93:
         42:5a:b9:ad:1f:69:66:39:29:c8:49:5b:7b:dc:a1:e2:67:ec:
         3a:9c:47:fe:c2:22:cb:5d:d9:14:03:ea:b1:02:fe:76:55:0d:
         20:62:9d:2d:ac:30:52:88:11:a0:c1:d3:94:24:76:ac:91:ae:
         e4:60:bc:61:eb:13:37:14:43:8b:04:1f:37:41:8a:60:10:e4:
         3c:06:d2:5a:83:7f:70:1d:bc:33:f9:89:25:3b:d6:51:98:fd:
         8e:01:c0:f3:c1:85:fd:63:13:3f:a4:ad:4f:b7:6a:27:55:f2:
         83:2c:b7:12:b5:91:5f:da:4b:70:a6:cc:ae:10:57:a7:56:d0:
         71:53:25:b9:32:ba:b5:bb:b7:47:78:56:11:70:48:ca:2e:f3:
         55:40:19:b5:8a:6a:2b:43:b5:e1:e8:18:43:7d:ce:62:bc:40:
         7b:b9:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:37:01 2026 by rpki-client