Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa
File:                     3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa (raw, json)
Hash identifier:          G7ehQyeKGJHdlURbSAA+9G8HsHbv2niL1fv+l7tG0BE=
Subject key identifier:   A7:03:3E:99:C2:F3:B3:CE:EF:04:C3:0B:45:C4:50:B5:4D:4B:09:FB
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       20EE2560CD6E2B48DCD3695BD7965C5CEEEA1A73
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa
Signing time:             Tue 17 Feb 2026 13:43:57 +0000
ROA not before:           Tue 17 Feb 2026 13:38:57 +0000
ROA not after:            Tue 16 Feb 2027 13:43:57 +0000
asID:                     263612
IP address blocks:        179.189.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ee:25:60:cd:6e:2b:48:dc:d3:69:5b:d7:96:5c:5c:ee:ea:1a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Feb 17 13:38:57 2026 GMT
            Not After : Feb 16 13:43:57 2027 GMT
        Subject: CN=A7033E99C2F3B3CEEF04C30B45C450B54D4B09FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:c5:a4:2f:1a:1c:63:26:e8:e6:9c:6a:5f:
                    42:2b:0b:b5:66:10:56:50:41:2a:8d:09:41:44:7f:
                    55:be:a5:26:2e:02:e3:6d:6e:1b:48:3a:c9:77:5a:
                    3a:47:b9:2e:20:1c:b6:2d:df:d3:65:e7:5c:a3:44:
                    76:24:fe:fd:a9:b2:e7:b7:b0:5b:7d:7a:c3:d4:d7:
                    46:85:a1:72:0e:1c:13:cc:6a:7c:1a:b0:0b:1b:97:
                    58:9e:09:9b:f0:19:80:77:a2:15:8b:f6:7e:f9:fc:
                    14:83:9b:a0:71:dd:7a:43:60:37:7d:6a:fc:a0:d6:
                    1a:99:65:32:24:f8:0a:5e:6a:42:e3:c1:65:92:10:
                    cd:7b:90:63:ea:2f:4e:5d:96:62:2a:fd:b0:40:cb:
                    02:1a:30:41:85:1a:05:75:a4:ae:d5:e3:8a:74:ca:
                    ff:5d:f5:59:7d:7f:91:63:94:43:08:ea:1f:8c:9b:
                    b2:9d:7b:b0:69:63:48:4a:cd:43:3e:2b:2c:cf:f2:
                    71:3c:23:de:7f:cf:e0:84:fc:40:dd:75:5a:f9:86:
                    6f:65:0b:c9:0c:1c:7a:05:79:cb:bc:50:44:28:5d:
                    2c:00:8a:e8:53:2b:ac:4f:e1:d5:1c:e6:e5:cc:7a:
                    1b:96:60:e6:91:06:77:f5:a4:eb:03:28:23:a3:74:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:3E:99:C2:F3:B3:CE:EF:04:C3:0B:45:C4:50:B5:4D:4B:09:FB
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132342e302f32332d3233203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:15:e0:a3:9e:d7:40:20:c3:7b:58:34:ac:a9:99:ba:ab:
         72:82:4e:c2:06:3e:04:e5:c7:a5:f3:45:01:c7:07:b8:b7:b7:
         4b:8e:f3:c3:90:35:e2:52:5e:c8:d1:c7:4c:82:e3:71:76:9d:
         d6:3e:95:cd:af:53:9b:b1:d1:5d:37:df:05:39:93:da:46:d1:
         05:f5:b5:92:2b:84:09:2b:d3:39:be:4e:43:cf:1b:7f:7b:8f:
         b5:b3:23:e4:98:a4:2c:fe:b6:f3:05:2f:db:40:5c:32:70:b5:
         25:7a:8d:c9:00:ce:98:4d:74:36:63:4b:51:cf:e9:0c:c7:ca:
         87:3b:a2:79:08:7c:a8:9f:ca:ed:a3:50:d9:90:c6:08:85:b0:
         18:89:99:1d:03:29:97:85:06:cf:f3:80:5f:c9:fa:83:a3:a0:
         cb:1e:ed:17:55:16:65:f3:b8:71:02:8b:4b:58:70:6c:dc:ec:
         bb:01:58:2d:de:fa:aa:0e:89:af:64:7f:ee:83:4b:56:b6:63:
         c7:28:82:7b:d6:ba:f8:41:c4:ba:36:e6:86:0c:63:91:0f:f3:
         74:80:d4:c2:1a:fe:5e:6a:2a:79:98:25:31:de:c5:1a:bd:43:
         35:af:14:92:e7:6a:41:b2:57:10:61:1c:4d:b3:22:20:eb:df:
         12:ab:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:04:09 2026 by rpki-client