Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/3137372e31302e38302e302f32312d3232203d3e20323632383436.roa
File:                     3137372e31302e38302e302f32312d3232203d3e20323632383436.roa (raw, json)
Hash identifier:          dZpwbV6iNXbSkxRbfegzUUoyrbQIFfBGWrd+nO7xU+w=
Subject key identifier:   43:59:7D:52:D5:0C:2F:9E:9C:A4:0E:5C:E0:11:54:2A:F0:AD:2C:C4
Certificate issuer:       /CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
Certificate serial:       4959FE6CC625C502D15070631CC88BD1D5B8A36D
Authority key identifier: EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/3137372e31302e38302e302f32312d3232203d3e20323632383436.roa
Signing time:             Thu 05 Feb 2026 00:07:17 +0000
ROA not before:           Thu 05 Feb 2026 00:02:17 +0000
ROA not after:            Thu 04 Feb 2027 00:07:17 +0000
asID:                     262846
IP address blocks:        177.10.80.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl
                          rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:fe:6c:c6:25:c5:02:d1:50:70:63:1c:c8:8b:d1:d5:b8:a3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC246C40D838133D032D3CB6AD738DDBFC47537
        Validity
            Not Before: Feb  5 00:02:17 2026 GMT
            Not After : Feb  4 00:07:17 2027 GMT
        Subject: CN=43597D52D50C2F9E9CA40E5CE011542AF0AD2CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:12:9b:ff:90:c8:d6:ad:67:5a:9c:57:57:
                    91:8c:ad:bb:db:ab:cf:40:44:fb:20:2a:52:f1:0d:
                    41:76:80:d2:b4:a6:85:f1:d3:da:93:1a:cb:78:c0:
                    b9:01:f7:d6:79:78:e7:9b:d2:0e:a9:c0:2d:8e:f4:
                    0d:1f:3e:77:90:b2:5a:4d:5e:e2:e1:92:92:1e:96:
                    2b:42:0c:53:45:32:21:52:6b:a1:27:a3:40:fb:db:
                    a7:41:a2:90:b2:60:d7:c3:74:ab:e2:e3:2f:1f:b8:
                    89:e7:45:a3:a7:9c:1b:54:8b:43:95:4a:49:e5:68:
                    4e:32:78:87:79:6b:cd:0d:b3:98:58:45:9b:a9:32:
                    de:0d:18:e5:1f:16:c2:32:5e:35:9d:02:ec:a0:fd:
                    f3:3f:22:90:ed:f1:e1:e3:b1:15:3c:99:7c:d7:02:
                    61:2d:b3:ee:27:ed:95:24:c5:e3:0a:8a:89:5a:4b:
                    67:7d:c7:81:63:4c:7d:58:07:2b:b6:9f:a8:95:b8:
                    bb:bc:d5:32:39:ba:96:85:85:18:79:8c:6a:22:3e:
                    fb:6c:a1:a5:22:8e:b5:d6:0b:2c:eb:7a:f2:79:c9:
                    25:44:90:9f:25:ca:d2:c5:96:b2:29:5e:6b:6a:8c:
                    5a:1e:e3:9b:b3:4d:a6:03:19:1c:ec:83:60:95:64:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:59:7D:52:D5:0C:2F:9E:9C:A4:0E:5C:E0:11:54:2A:F0:AD:2C:C4
            X509v3 Authority Key Identifier:
                keyid:EA:C2:46:C4:0D:83:81:33:D0:32:D3:CB:6A:D7:38:DD:BF:C4:75:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC246C40D838133D032D3CB6AD738DDBFC47537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33o3YguCo8hoRqzVHbtJpjbFF7NzvGBCbP8XPFcwgecD/1/3137372e31302e38302e302f32312d3232203d3e20323632383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:22:ed:3b:41:d1:81:d5:bb:46:b0:26:b7:91:e1:a5:66:7b:
         2e:7b:3d:7f:fe:fb:b7:c2:60:cd:64:50:51:3e:dd:5d:a9:cd:
         1b:be:6c:3f:cb:3d:97:c6:f4:3e:b5:36:f0:a0:78:41:6a:ca:
         30:4a:ed:bb:6b:ca:68:1a:ef:57:ae:c4:9b:a7:a7:08:03:ef:
         9f:0f:2b:c8:78:7a:03:7e:47:fd:2e:92:8c:2e:32:f4:08:a5:
         32:39:2c:fe:26:fc:62:90:70:13:8a:f6:82:e3:ee:b7:d6:a8:
         b5:50:93:91:1f:4f:1b:a2:21:ce:70:9b:56:72:28:3e:c0:e9:
         08:d6:0c:c6:89:af:27:6f:6c:01:bf:67:48:01:b1:5c:c3:04:
         35:20:ce:26:68:c6:0f:d6:ed:e9:fd:0e:d4:13:20:b8:85:7a:
         02:7c:fc:95:7a:1f:e0:ac:50:b5:92:3d:7b:70:8c:c1:f8:0e:
         49:b8:83:c2:84:c3:99:90:5e:40:62:b5:75:b4:01:08:d4:a1:
         20:ea:c7:15:49:ee:5c:b3:e3:a1:8c:f8:bb:ba:fc:64:04:af:
         2b:78:7e:d8:bd:ed:03:92:d1:07:08:f3:77:bd:cf:93:61:77:
         c8:13:d2:8a:45:ef:69:8c:05:e5:02:0f:56:5e:fd:89:da:ae:
         2e:e0:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:09 2026 by rpki-client