Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e38322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          pWFFLyXLNaM4Ldw1vh7WRdwM0idC63XAusojlFE7fiQ=
Subject key identifier:   A3:52:30:62:08:4F:4B:25:3F:8B:AF:E9:D6:3F:AE:B8:3B:9C:A5:9F
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       4181F0F3A29D5BA5A712E45D3E6D35776D17920E
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:06 +0000
ROA not before:           Thu 05 Feb 2026 00:24:06 +0000
ROA not after:            Thu 04 Feb 2027 00:29:06 +0000
asID:                     52653
IP address blocks:        177.221.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:f0:f3:a2:9d:5b:a5:a7:12:e4:5d:3e:6d:35:77:6d:17:92:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:06 2026 GMT
            Not After : Feb  4 00:29:06 2027 GMT
        Subject: CN=A3523062084F4B253F8BAFE9D63FAEB83B9CA59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:ff:55:1b:e6:5a:34:42:38:13:fb:6f:3a:
                    c3:8e:27:3c:e6:a6:33:7c:64:22:44:02:83:e7:f0:
                    80:71:de:73:3a:d9:ca:67:07:74:ee:d8:c6:d8:43:
                    8b:18:3b:3b:2b:30:35:2c:72:48:ad:0d:e6:fa:ea:
                    ba:63:ca:11:a9:96:aa:d3:95:22:3d:cc:cc:c9:97:
                    bb:3e:3f:7c:b9:24:34:1d:70:2c:21:38:50:91:a0:
                    bc:25:dd:88:c9:ec:74:65:73:33:50:01:c0:52:d7:
                    80:8b:ca:6a:42:9d:95:3d:c6:ef:8b:53:8c:d9:88:
                    56:ee:b8:94:d3:17:e0:fb:dc:82:f7:6f:26:95:ca:
                    6d:2d:dd:59:fc:29:5a:68:ba:a8:c4:e8:ae:fe:0c:
                    68:a6:55:29:27:e5:5e:b7:90:0b:e4:35:e8:38:fb:
                    ee:3c:f2:06:7f:e6:df:dd:0a:50:5e:f3:11:d3:c5:
                    c2:9b:6d:ae:80:d1:e1:4c:27:73:76:41:b9:b5:f9:
                    2f:33:bb:e0:6b:26:14:62:93:57:2a:e6:a3:d7:84:
                    a0:de:f9:d5:8a:ee:b8:d3:a3:2c:77:36:ed:3c:25:
                    46:15:a6:a4:c1:29:39:07:9f:6f:e7:92:dd:0a:15:
                    a6:e4:aa:41:f7:6f:36:9a:c7:0d:78:10:c5:ca:c2:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:30:62:08:4F:4B:25:3F:8B:AF:E9:D6:3F:AE:B8:3B:9C:A5:9F
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:50:81:31:c4:f4:cb:86:fe:13:54:bc:e2:75:83:9d:15:6a:
         c8:7f:b4:e8:61:e0:4b:25:44:4b:cf:c9:41:82:02:41:1e:d6:
         0a:0c:5a:9a:5c:06:0f:e6:08:7f:84:dd:42:1b:0f:93:b8:27:
         05:60:44:ab:18:cd:a6:92:a5:24:72:a7:07:c9:ab:05:1d:7b:
         dd:39:57:c8:0e:b1:98:86:8d:fc:33:b0:92:0d:3b:0f:3b:19:
         98:61:4c:80:bd:52:0d:ec:ec:6b:79:29:45:d1:54:51:6c:15:
         2e:38:4a:8d:9c:89:41:5b:a9:d4:29:a2:62:f7:f2:26:8e:a1:
         b4:a2:05:92:7b:6c:f3:01:0c:12:8e:45:91:af:a3:68:e2:79:
         c8:d9:d2:af:0c:26:4d:72:0e:84:23:46:d2:2f:98:13:82:0c:
         9d:be:7c:29:c1:1c:30:41:11:a8:e3:50:4a:a9:2e:09:8a:c3:
         fb:c5:a5:c2:f2:3a:89:ca:62:bf:02:47:f0:b9:0b:44:d9:3c:
         48:14:c1:a3:3e:16:26:c2:dd:24:6a:a9:99:04:b1:07:48:52:
         50:53:7a:33:50:19:7b:8c:e3:45:30:97:8a:40:b3:b7:4d:9e:
         0f:4d:5e:6d:40:82:76:e6:d5:bc:57:87:ba:26:c1:f6:b4:6d:
         40:08:60:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQYHw86KdW6WnEuRdPm01d20Xkg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNjAyMDUwMDI0MDZaFw0yNzAyMDQwMDI5MDZaMDMxMTAvBgNV
BAMTKEEzNTIzMDYyMDg0RjRCMjUzRjhCQUZFOUQ2M0ZBRUI4M0I5Q0E1OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyz/9VG+ZaNEI4E/tvOsOOJzzm
pjN8ZCJEAoPn8IBx3nM62cpnB3Tu2MbYQ4sYOzsrMDUsckitDeb66rpjyhGplqrT
lSI9zMzJl7s+P3y5JDQdcCwhOFCRoLwl3YjJ7HRlczNQAcBS14CLympCnZU9xu+L
U4zZiFbuuJTTF+D73IL3byaVym0t3Vn8KVpouqjE6K7+DGimVSkn5V63kAvkNeg4
++488gZ/5t/dClBe8xHTxcKbba6A0eFMJ3N2Qbm1+S8zu+BrJhRik1cq5qPXhKDe
+dWK7rjToyx3Nu08JUYVpqTBKTkHn2/nkt0KFabkqkH3bzaaxw14EMXKwrsnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUo1IwYghPSyU/i6/p1j+uuDucpZ8wHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsd1SMA0GCSqGSIb3DQEBCwUAA4IBAQBLUIExxPTL
hv4TVLzidYOdFWrIf7ToYeBLJURLz8lBggJBHtYKDFqaXAYP5gh/hN1CGw+TuCcF
YESrGM2mkqUkcqcHyasFHXvdOVfIDrGYho38M7CSDTsPOxmYYUyAvVIN7OxreSlF
0VRRbBUuOEqNnIlBW6nUKaJi9/ImjqG0ogWSe2zzAQwSjkWRr6No4nnI2dKvDCZN
cg6EI0bSL5gTggydvnwpwRwwQRGo41BKqS4JisP7xaXC8jqJymK/AkfwuQtE2TxI
FMGjPhYmwt0kaqmZBLEHSFJQU3ozUBl7jONFMJeKQLO3TZ4PTV5tQIJ25tW8V4e6
JsH2tG1ACGAH
-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:42 2026 by rpki-client