Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          rNnUrPGcJ19UMZBjzZ3B6LE0OTUZQzu7/CwGMFE52Xc=
Subject key identifier:   5A:A0:85:46:5D:9B:51:D7:42:FE:F5:3E:ED:E2:42:3E:C9:15:37:D8
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       7364EA5C409E7E0EF8E7C43306259630FADBA260
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:04 +0000
ROA not before:           Thu 05 Feb 2026 00:24:04 +0000
ROA not after:            Thu 04 Feb 2027 00:29:04 +0000
asID:                     52653
IP address blocks:        177.221.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:64:ea:5c:40:9e:7e:0e:f8:e7:c4:33:06:25:96:30:fa:db:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:04 2026 GMT
            Not After : Feb  4 00:29:04 2027 GMT
        Subject: CN=5AA085465D9B51D742FEF53EEDE2423EC91537D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:09:b4:46:bc:df:c6:7f:f1:1d:50:97:a6:
                    14:73:ae:13:ef:d4:28:09:3d:9b:dd:a5:21:03:ea:
                    38:ae:0c:72:c6:d3:66:ce:7e:96:cd:68:81:1b:6c:
                    d0:05:dd:d9:cc:64:5d:03:33:09:45:62:05:8a:1b:
                    f4:67:2d:56:cd:01:2d:68:41:a5:03:fb:9a:df:c0:
                    11:b1:4d:68:c9:76:48:0b:d5:41:c5:46:90:6b:ad:
                    6a:af:06:b9:f9:98:24:aa:65:d3:a8:f2:68:08:81:
                    33:d5:11:e6:2d:54:c7:75:d2:f0:6d:88:47:20:3e:
                    54:72:6c:3d:3c:6b:e5:56:70:e1:9a:52:66:cc:40:
                    16:a3:31:88:07:c0:a2:f8:83:e8:8c:8d:7b:a6:25:
                    31:db:b7:78:81:a6:c9:a9:e7:7d:e2:12:ef:62:ba:
                    49:78:eb:93:c0:ea:fd:ea:b2:2b:7a:05:1e:b3:61:
                    6d:34:46:a3:af:f1:0f:ab:bc:0c:a6:80:6e:47:fa:
                    80:6b:8f:a9:c7:e9:11:fc:da:c3:52:b5:05:28:37:
                    03:e5:e1:6b:d4:3b:80:b9:d8:22:47:4d:a3:88:67:
                    26:45:8c:b7:13:25:92:0b:7f:70:d2:d9:2c:f9:d3:
                    ac:c2:7e:82:b5:a2:1a:ed:e4:15:8e:47:4c:76:62:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A0:85:46:5D:9B:51:D7:42:FE:F5:3E:ED:E2:42:3E:C9:15:37:D8
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:00:94:a4:15:d8:ac:7b:b4:12:f8:db:70:2d:3e:f8:14:
         00:37:e2:27:72:3d:f0:e1:b9:91:af:b7:9a:24:45:0d:d6:1f:
         0b:a0:4f:3d:45:71:70:24:d7:76:dd:1b:01:56:03:4d:8d:fd:
         ba:ce:9a:27:fa:d6:b7:36:77:0a:ed:8f:e4:25:b7:6e:5d:fd:
         9a:53:14:a0:05:72:d0:ba:7a:cc:74:36:52:5d:50:9b:44:b6:
         49:44:39:df:f9:e3:f7:d1:f7:4a:c2:e6:74:a0:28:5c:29:da:
         c8:df:81:5c:44:ed:66:56:8e:b3:94:13:94:23:1d:d9:a7:5f:
         0c:4f:18:22:a2:65:21:4a:06:95:f4:32:7b:51:38:7c:9e:6f:
         50:4b:43:8c:b1:a2:44:ed:23:f1:d6:e2:88:41:65:b9:b0:fe:
         a2:16:de:ed:e9:50:c3:d3:46:fe:7f:49:d6:97:cc:77:ac:53:
         ad:ec:d3:3e:69:e3:c1:17:9f:5d:62:76:40:38:2b:d7:33:45:
         ab:40:ec:d9:f4:2a:cc:c8:06:0e:13:d9:15:09:a5:07:b8:ab:
         4a:1e:0f:eb:1b:cb:f9:7d:57:d7:26:ab:f9:50:6d:b8:4f:2d:
         0a:2a:34:0c:1f:9c:f1:a6:9a:a2:de:d7:74:7e:5f:b0:42:a5:
         3f:44:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:36 2026 by rpki-client