Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3137392e3139312e382e302f32312d3234203d3e20323635343430.roa
File:                     3137392e3139312e382e302f32312d3234203d3e20323635343430.roa (raw, json)
Hash identifier:          4+Ekpcwv6Tbzda/8ymLjDEpHx3aMnk6P3TVEjhvcXDQ=
Subject key identifier:   12:2D:AA:F4:CD:B6:B4:D7:C4:DD:14:D4:BF:07:47:8C:F6:2F:5D:2E
Certificate issuer:       /CN=D4DA9F477593CD447FEE14D83B87CF3109732518
Certificate serial:       73A254950A248017FFAE81484A76744B47AB7C21
Authority key identifier: D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3137392e3139312e382e302f32312d3234203d3e20323635343430.roa
Signing time:             Mon 09 Feb 2026 20:26:36 +0000
ROA not before:           Mon 09 Feb 2026 20:21:36 +0000
ROA not after:            Mon 08 Feb 2027 20:26:36 +0000
asID:                     265440
IP address blocks:        179.191.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl
                          rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 19:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a2:54:95:0a:24:80:17:ff:ae:81:48:4a:76:74:4b:47:ab:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4DA9F477593CD447FEE14D83B87CF3109732518
        Validity
            Not Before: Feb  9 20:21:36 2026 GMT
            Not After : Feb  8 20:26:36 2027 GMT
        Subject: CN=122DAAF4CDB6B4D7C4DD14D4BF07478CF62F5D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:1b:87:71:ed:00:cb:9f:6b:3d:c1:3f:6a:
                    bc:a0:73:48:26:ae:e1:da:e3:c1:f1:25:3f:73:6f:
                    d0:2e:23:e0:42:4d:7f:68:31:38:8f:17:bc:9f:b4:
                    33:29:cb:e3:5d:e0:88:25:e4:03:cd:6e:dc:47:a8:
                    65:19:59:ed:54:4a:ef:31:12:24:47:39:e1:09:e7:
                    50:d6:2d:9a:af:cb:c7:6a:70:4f:bf:21:04:87:5a:
                    76:8b:01:8d:5f:fa:42:03:72:b9:6d:9a:d9:60:16:
                    6a:c9:fd:0e:e4:14:0f:b7:10:ca:b8:75:59:6b:24:
                    9c:9e:44:79:69:83:2b:e6:f0:f0:4a:e5:b9:0f:e1:
                    21:91:75:63:2b:20:98:71:b1:c7:dc:b1:0e:84:86:
                    50:27:9d:91:ec:59:16:c0:99:37:5b:8f:b5:b2:e8:
                    f8:23:c7:1c:e5:8d:63:27:e4:70:ac:17:8b:f1:0b:
                    0f:4d:0d:b3:6c:a6:d1:a1:ba:ff:08:7e:00:5d:23:
                    bf:59:cf:0d:2e:cd:d9:a2:ca:cc:9c:ad:56:c0:7c:
                    df:4e:09:19:08:cf:47:6b:a4:55:71:d5:ab:cb:c9:
                    92:f6:f5:87:c3:45:d8:4e:65:d8:70:25:d3:04:24:
                    fe:6f:87:98:74:6a:fc:3b:69:59:b7:12:ee:12:76:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2D:AA:F4:CD:B6:B4:D7:C4:DD:14:D4:BF:07:47:8C:F6:2F:5D:2E
            X509v3 Authority Key Identifier:
                keyid:D4:DA:9F:47:75:93:CD:44:7F:EE:14:D8:3B:87:CF:31:09:73:25:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/D4DA9F477593CD447FEE14D83B87CF3109732518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4DA9F477593CD447FEE14D83B87CF3109732518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FW621Zc3Su5UuuxbSyMM9AAp9vq6r4syinuuq1AeyNzV/0/3137392e3139312e382e302f32312d3234203d3e20323635343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:17:26:66:dd:01:2e:3d:9d:34:33:73:f9:b8:f4:d0:47:2a:
         54:21:50:9d:7c:a4:1a:6d:14:26:20:6e:0c:0f:f9:b9:44:90:
         1d:e0:c8:2c:ec:83:be:89:f0:98:0b:13:15:1c:b4:92:fa:2c:
         27:77:e3:f3:c0:84:60:1e:ff:e1:17:ad:06:30:58:85:c7:c2:
         b8:f0:53:d4:9b:8f:75:6b:4a:60:4c:9f:e9:ab:46:54:b9:d6:
         4a:be:c4:73:07:de:ce:c6:b0:eb:21:25:12:fc:3d:69:0b:b5:
         d1:fb:7b:1e:9c:6f:db:52:27:e7:ba:47:3b:43:02:e3:91:2b:
         3f:56:29:f1:a5:4c:ac:bd:04:27:bb:ce:c5:af:71:a2:93:84:
         10:07:29:76:9e:d5:af:7a:a1:3f:f4:80:df:f2:18:47:c8:5e:
         cc:6a:e6:da:1b:eb:15:7f:98:3e:34:ad:2e:9e:f9:3d:a9:9a:
         fb:52:98:6b:39:27:b7:e2:c2:7d:3e:b7:73:6a:f5:03:8c:8e:
         2e:bf:3d:5d:73:46:93:28:39:5f:ef:9e:3a:8a:b9:cc:a1:2d:
         9c:03:c0:6d:6b:13:5a:63:0a:57:95:e8:99:96:28:6c:63:56:
         38:29:11:fc:e5:c2:7a:1a:af:db:4c:41:97:cc:77:74:2a:3b:
         0e:f0:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:25:12 2026 by rpki-client