Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          mSgoUFH5/9nINYkjc5pYa1CIy8v+JAuuzAZVNF03iXU=
Subject key identifier:   FB:B3:3C:BE:EF:BC:EF:96:AC:F3:18:60:BD:7C:0A:DF:0D:FB:7A:7B
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       676EB6D2C884FC35EFFCF6A02C864BCB9FBDAFBB
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 17 Feb 2026 13:43:57 +0000
ROA not before:           Tue 17 Feb 2026 13:38:57 +0000
ROA not after:            Tue 16 Feb 2027 13:43:57 +0000
asID:                     263612
IP address blocks:        179.189.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6e:b6:d2:c8:84:fc:35:ef:fc:f6:a0:2c:86:4b:cb:9f:bd:af:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Feb 17 13:38:57 2026 GMT
            Not After : Feb 16 13:43:57 2027 GMT
        Subject: CN=FBB33CBEEFBCEF96ACF31860BD7C0ADF0DFB7A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:98:f0:69:83:93:4b:8f:10:c7:20:77:e1:
                    b9:8d:99:95:da:f9:c6:be:c3:3b:6b:86:4e:61:92:
                    ba:cf:20:0f:3e:a1:c4:9a:4e:00:a8:38:83:ad:4a:
                    3d:9d:5d:0a:82:27:67:82:39:49:4d:05:be:93:02:
                    33:b9:09:a0:23:3d:45:63:bf:a0:0a:51:7c:60:ed:
                    f0:66:73:87:72:61:3d:5a:9f:0a:9d:dc:a4:01:23:
                    7e:2c:ae:1a:43:6b:f2:76:98:43:68:cb:19:26:7b:
                    b1:bf:94:37:0a:24:d8:c3:ae:70:c7:dd:5f:87:7b:
                    ea:6f:3b:f0:c0:28:99:16:e6:b0:05:ef:fd:95:fc:
                    ed:45:26:8c:ef:a3:ee:ad:fd:7d:c5:0c:a3:bb:60:
                    32:52:10:17:0e:50:28:8f:62:a3:61:bb:2d:12:df:
                    70:6e:a1:bd:52:a8:0e:45:41:e5:db:e1:9d:a9:33:
                    03:bd:e3:f9:ac:46:26:bf:f1:0f:4d:08:07:d5:31:
                    98:50:fe:db:c6:85:2d:8d:37:3e:b1:c6:dd:45:d9:
                    08:5f:3c:17:ca:71:08:49:9c:f9:35:a0:c0:c0:36:
                    44:15:af:80:ea:62:f6:91:86:be:e5:ce:3c:c4:18:
                    fb:39:b9:1e:c7:d0:fd:e1:e5:84:ef:d8:f3:38:9e:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B3:3C:BE:EF:BC:EF:96:AC:F3:18:60:BD:7C:0A:DF:0D:FB:7A:7B
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:84:72:df:4f:d7:bb:ff:27:7f:de:94:85:c1:95:90:64:f6:
         09:17:1d:bc:4c:29:d5:62:8e:80:c1:d2:36:2d:32:df:6d:c5:
         ca:1c:eb:8c:0f:f8:bc:7c:4a:97:53:50:7e:6f:5b:5b:95:97:
         89:d9:5e:47:d5:4c:d3:74:0a:f0:65:b3:02:cb:73:fb:fe:83:
         47:73:7e:bd:2c:cc:bd:18:42:99:7a:3c:b7:7d:c1:69:0a:35:
         e9:33:1e:23:12:e3:07:b5:15:02:50:c6:03:cf:2b:45:e2:4c:
         ca:94:e4:84:0d:1c:1b:36:fb:ea:50:39:b5:43:22:2b:29:4c:
         1a:95:95:1d:50:bc:b9:ea:69:59:cf:86:3e:de:28:30:38:aa:
         fa:c9:1e:b2:a9:22:a0:3f:3f:49:ff:05:cc:27:f5:95:bc:97:
         a0:54:a5:3e:b4:64:55:ec:c3:5e:b8:51:b4:a4:a8:db:47:4e:
         83:60:43:52:9f:76:32:94:eb:09:2e:9c:d3:00:66:ab:59:c9:
         d6:eb:92:cc:83:25:1a:88:a5:81:a7:26:d8:2b:d1:9a:3d:b3:
         57:d9:aa:4b:28:89:4f:76:f6:05:c7:9d:ae:d9:87:8b:31:d4:
         e4:4e:90:7b:87:1e:59:e2:f7:7b:a5:77:a7:5c:b3:d8:f9:22:
         c1:e9:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:06:40 2026 by rpki-client