Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130332e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          1VvPc+9JNFMauXxMrT/MLVhpcx/WSz8CxvmTMyQDCOc=
Subject key identifier:   A6:7A:F8:13:4F:21:C0:0A:B1:77:EE:02:55:D9:24:DF:AB:68:AD:1F
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       2D0BD413AAA3923ED59CBBBA1375DCDB81D73F5B
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 05 Feb 2026 19:00:34 +0000
ROA not before:           Thu 05 Feb 2026 18:55:34 +0000
ROA not after:            Thu 04 Feb 2027 19:00:34 +0000
asID:                     61672
IP address blocks:        177.11.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 09:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0b:d4:13:aa:a3:92:3e:d5:9c:bb:ba:13:75:dc:db:81:d7:3f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Feb  5 18:55:34 2026 GMT
            Not After : Feb  4 19:00:34 2027 GMT
        Subject: CN=A67AF8134F21C00AB177EE0255D924DFAB68AD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:3e:28:0b:74:e4:e9:3d:24:1d:6c:e9:43:
                    54:d2:41:bd:2a:78:34:c2:aa:81:92:59:c4:99:11:
                    08:3d:ec:4a:5b:f4:f5:e6:3c:8b:51:e0:e9:da:92:
                    04:2e:a2:53:34:cb:a0:cf:89:30:56:e8:3c:bb:93:
                    19:44:f5:a2:e6:f8:60:c4:85:ce:d6:73:6d:42:5a:
                    dd:3b:f1:7e:a4:0d:cb:d2:c3:3a:fb:97:3f:a7:d2:
                    55:8c:25:e3:6e:ec:ad:45:fe:4f:87:a2:74:48:bf:
                    05:7f:a4:4f:43:82:87:27:07:c5:53:d3:49:f0:5a:
                    b9:54:9b:4c:27:1d:1a:ae:0f:07:7e:51:d6:17:57:
                    ff:68:63:31:df:77:fc:6e:1f:96:bf:b9:b0:1f:5c:
                    91:27:2f:f8:cd:21:32:49:9d:bc:5c:fc:40:51:22:
                    52:73:21:87:9f:b0:bf:fc:ec:d5:41:9e:64:a4:69:
                    3d:d1:36:db:7c:cf:b1:ff:ac:fe:1d:4b:09:0b:51:
                    27:99:eb:8e:2b:f8:79:45:10:bb:74:5a:d9:7c:ef:
                    3a:08:82:a8:71:7e:9b:82:15:29:a4:00:35:15:a9:
                    4a:ec:a6:7c:cd:21:e4:e8:33:d0:37:98:c2:14:95:
                    76:33:25:ec:2d:7f:cd:19:09:4d:2c:94:94:88:5a:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7A:F8:13:4F:21:C0:0A:B1:77:EE:02:55:D9:24:DF:AB:68:AD:1F
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130332e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ec:44:f5:4b:9b:a3:17:3a:e6:51:74:ee:91:54:f3:93:0d:
         9f:d2:28:81:08:90:bb:a0:b4:ce:50:b0:83:0a:fb:9b:bb:6b:
         c5:46:29:12:83:40:41:21:8f:67:51:66:1a:93:34:f7:a6:69:
         97:cc:6e:e6:ed:bb:f8:67:6c:0d:bd:18:3f:59:e1:08:0d:8d:
         f6:23:b6:30:18:97:df:b2:74:40:62:dd:1e:60:b7:6e:27:7e:
         8d:68:78:aa:3d:d3:ea:0b:d6:c0:8e:34:57:cf:1d:c1:b9:bf:
         12:4e:ef:a1:7c:9c:9e:fe:ec:f4:55:96:6a:38:6c:35:29:01:
         c3:af:a9:8d:81:0a:ea:70:64:57:2d:ce:09:84:4a:af:b0:23:
         db:7b:fd:a3:44:76:44:a3:ea:4b:d9:e0:26:8b:79:53:43:6d:
         e6:74:b5:1d:b9:7b:de:f4:22:34:e4:b6:35:53:0c:84:c2:05:
         5b:a9:51:e4:47:a9:66:43:25:00:38:e3:92:9a:56:4e:7b:f3:
         45:b0:65:a1:01:53:9d:6e:66:e2:ef:22:a7:c5:ee:11:f7:9f:
         b4:a2:6c:98:a9:2b:3d:dc:96:1a:c9:06:47:e8:bc:17:d5:4d:
         69:57:82:37:07:d9:f1:f2:a3:00:2e:ba:7a:ea:58:a8:93:ea:
         68:ed:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 07:18:39 2026 by rpki-client