Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa
File:                     3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (raw, json)
Hash identifier:          hyiWb13Y+Gxrn9BgVELs6AugDwt9PomXRiGZvHGSJpM=
Subject key identifier:   1C:0E:D2:79:26:A7:69:B6:E5:02:C0:5B:5A:44:A9:7D:33:AB:E0:41
Certificate issuer:       /CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
Certificate serial:       0ABD5EC5A11E99B1BA361FB88517A33E33EB6E8A
Authority key identifier: EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa
Signing time:             Wed 04 Feb 2026 19:00:00 +0000
ROA not before:           Wed 04 Feb 2026 18:55:00 +0000
ROA not after:            Wed 03 Feb 2027 19:00:00 +0000
asID:                     52635
IP address blocks:        177.125.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl
                          rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bd:5e:c5:a1:1e:99:b1:ba:36:1f:b8:85:17:a3:3e:33:eb:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC08655821585A0A5B7D6A0E52FC74EF51F90E73
        Validity
            Not Before: Feb  4 18:55:00 2026 GMT
            Not After : Feb  3 19:00:00 2027 GMT
        Subject: CN=1C0ED27926A769B6E502C05B5A44A97D33ABE041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:06:cd:a1:b8:7f:4f:86:12:28:44:5b:86:8d:
                    0a:5a:d2:21:87:a7:c6:aa:fc:b0:81:b1:f4:d4:d4:
                    35:e7:61:c8:1c:f0:b2:ab:0d:a0:5d:bf:f7:11:05:
                    4a:24:43:9f:b0:fd:75:1d:94:b0:8b:d7:e8:cb:c6:
                    55:e6:6d:ad:af:49:0e:14:01:c5:4d:39:08:14:8f:
                    1d:26:a6:1e:27:58:74:9a:e1:23:c1:ae:f8:0f:f8:
                    81:23:ac:64:d8:fe:f8:5c:e0:2f:30:ca:a4:91:78:
                    4e:d4:8a:88:75:25:6f:85:1e:f7:ad:57:48:69:db:
                    6b:bb:06:f9:c8:aa:98:94:4b:10:3a:d8:4e:40:60:
                    20:97:97:4f:03:ef:a4:f2:38:8c:f6:72:de:69:c9:
                    a8:6d:78:3e:62:a8:2a:1e:65:9b:7f:61:70:14:90:
                    ce:b2:00:cb:f0:c6:f5:20:dc:da:41:72:db:25:73:
                    1c:25:aa:23:ed:de:36:46:26:80:5a:1d:bf:86:26:
                    46:c2:fe:19:f7:b9:7f:0e:fe:76:1c:8f:94:51:5a:
                    4c:bc:36:3a:35:e1:69:f6:33:ec:cf:d4:67:a1:58:
                    f0:5b:1a:16:88:b3:02:7c:46:4e:ac:25:95:ca:3b:
                    cb:91:30:ce:6f:7c:f8:5a:5a:cb:8d:5a:68:72:17:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0E:D2:79:26:A7:69:B6:E5:02:C0:5B:5A:44:A9:7D:33:AB:E0:41
            X509v3 Authority Key Identifier:
                keyid:EC:08:65:58:21:58:5A:0A:5B:7D:6A:0E:52:FC:74:EF:51:F9:0E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC08655821585A0A5B7D6A0E52FC74EF51F90E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/1/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:35:3d:c9:3b:39:9e:d8:43:a6:a2:2f:e7:6f:42:a5:b7:
         cb:2e:68:6d:51:cb:54:c8:78:f9:da:a8:47:e5:96:16:10:81:
         2e:35:34:39:11:1d:2b:23:d1:ad:3a:42:f7:f5:4b:bf:eb:85:
         0f:9a:21:66:8f:79:34:bf:53:0a:cb:ca:1f:10:74:c5:2a:f9:
         c9:04:ac:d9:c2:96:ea:b5:fa:06:b8:03:90:0f:32:c1:c2:b6:
         ab:be:e7:8d:bb:1d:d8:e9:7c:e9:44:18:3a:9d:42:0c:5e:84:
         a1:4b:7d:2c:ac:44:90:c5:35:e1:1a:56:49:97:c9:69:ed:16:
         a9:78:f8:78:3a:19:2d:d0:98:3a:2d:93:9f:59:3c:2a:6b:70:
         bb:95:ac:b4:72:bf:e8:44:ae:77:4b:2c:88:76:bc:40:5e:e2:
         42:21:b0:50:f9:e1:e3:f7:4f:6a:8f:ea:a0:8c:99:f3:22:b8:
         e7:9a:9c:ad:f3:16:8d:3e:45:5b:57:2f:60:fe:31:7e:8d:4a:
         12:7f:15:53:af:ef:30:f0:b4:99:f3:f9:21:4a:21:41:e6:30:
         4a:c2:d2:f4:9d:82:a0:70:86:d8:58:8c:50:e6:9d:81:f9:51:
         e1:e6:82:2d:f4:e2:21:33:57:6d:46:a9:32:31:ca:c8:0f:07:
         97:85:dc:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCr1exaEembG6Nh+4hRejPjPrboowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMwODY1NTgyMTU4NUEwQTVCN0Q2QTBFNTJGQzc0RUY1
MUY5MEU3MzAeFw0yNjAyMDQxODU1MDBaFw0yNzAyMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKDFDMEVEMjc5MjZBNzY5QjZFNTAyQzA1QjVBNDRBOTdEMzNBQkUwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZBs2huH9PhhIoRFuGjQpa0iGH
p8aq/LCBsfTU1DXnYcgc8LKrDaBdv/cRBUokQ5+w/XUdlLCL1+jLxlXmba2vSQ4U
AcVNOQgUjx0mph4nWHSa4SPBrvgP+IEjrGTY/vhc4C8wyqSReE7Uioh1JW+FHvet
V0hp22u7BvnIqpiUSxA62E5AYCCXl08D76TyOIz2ct5pyahteD5iqCoeZZt/YXAU
kM6yAMvwxvUg3NpBctslcxwlqiPt3jZGJoBaHb+GJkbC/hn3uX8O/nYcj5RRWky8
Njo14Wn2M+zP1GehWPBbGhaIswJ8Rk6sJZXKO8uRMM5vfPhaWsuNWmhyF+T7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHA7SeSanabblAsBbWkSpfTOr4EEwHwYDVR0j
BBgwFoAU7AhlWCFYWgpbfWoOUvx071H5DnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RKR2p2cjZ1ZVZxU1NiRnV2Z1NIbnpORXlSMlZrSkh3TWN1OVRBOW1h
bUUvMS9FQzA4NjU1ODIxNTg1QTBBNUI3RDZBMEU1MkZDNzRFRjUxRjkwRTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDMDg2NTU4MjE1ODVBMEE1
QjdENkEwRTUyRkM3NEVGNTFGOTBFNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0SkdqdnI2dWVWcVNTYkZ1dmdTSG56TkV5UjJWa0pId01jdTlUQTltYW1FLzEv
MzEzNzM3MmUzMTMyMzUyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzYzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsX0UMA0GCSqGSIb3DQEBCwUAA4IBAQBt6TU9yTs5
nthDpqIv529CpbfLLmhtUctUyHj52qhH5ZYWEIEuNTQ5ER0rI9GtOkL39Uu/64UP
miFmj3k0v1MKy8ofEHTFKvnJBKzZwpbqtfoGuAOQDzLBwrarvueNux3Y6XzpRBg6
nUIMXoShS30srESQxTXhGlZJl8lp7RapePh4Ohkt0Jg6LZOfWTwqa3C7lay0cr/o
RK53SyyIdrxAXuJCIbBQ+eHj909qj+qgjJnzIrjnmpyt8xaNPkVbVy9g/jF+jUoS
fxVTr+8w8LSZ8/khSiFB5jBKwtL0nYKgcIbYWIxQ5p2B+VHh5oIt9OIhM1dtRqky
McrIDweXhdxR
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:17:55 2026 by rpki-client