Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          SckOLROTwlokC+BIubGXmSUXwR374I63+/nBjtmALyw=
Subject key identifier:   0E:B1:99:EB:26:E6:41:E6:D7:59:B0:F7:A8:AF:C5:DC:14:D5:85:BE
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       01912B113DD941ED6CD3F8558D90BF1ED5A4425E
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:09 +0000
ROA not before:           Thu 05 Feb 2026 00:24:09 +0000
ROA not after:            Thu 04 Feb 2027 00:29:09 +0000
asID:                     52653
IP address blocks:        177.221.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:2b:11:3d:d9:41:ed:6c:d3:f8:55:8d:90:bf:1e:d5:a4:42:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:09 2026 GMT
            Not After : Feb  4 00:29:09 2027 GMT
        Subject: CN=0EB199EB26E641E6D759B0F7A8AFC5DC14D585BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:2b:10:6a:c3:4a:d7:3a:24:f2:db:b0:0a:
                    ff:e0:16:c3:b4:78:bf:99:9b:39:66:7e:a6:18:36:
                    50:1d:87:d6:d4:b7:d4:b2:8a:c4:bf:b2:db:21:66:
                    7a:3a:c1:dc:b6:45:72:7d:6e:75:48:04:7c:44:f2:
                    ea:0e:5d:0c:a1:71:1c:b4:94:74:93:41:3b:57:f0:
                    a8:61:f3:53:a9:0f:09:a6:db:53:c8:51:6a:5d:99:
                    af:0f:99:46:bb:e8:f7:4e:22:79:c4:8c:6e:b1:3c:
                    25:49:e1:d1:b4:c9:06:87:4f:43:bb:ce:d7:a9:0a:
                    78:18:e7:fc:45:c3:8d:7b:0f:78:90:e5:93:f9:ff:
                    4d:b7:e7:c2:bb:fe:af:ca:a1:f0:62:24:40:f7:80:
                    dc:af:b7:80:9e:af:77:7d:8b:2d:62:0e:e0:2e:2e:
                    71:b9:f2:81:bc:74:15:45:4f:59:a7:8d:02:04:69:
                    ab:77:55:10:99:78:44:e0:04:6d:e9:9a:b0:b4:9c:
                    8d:36:dd:e8:fb:e3:36:34:03:70:dd:bc:8a:11:c9:
                    92:aa:c1:6b:70:fe:b8:e7:6c:4b:7c:4b:1c:e4:a9:
                    34:dd:6e:ab:8d:88:5a:a7:5b:0c:70:28:1e:f5:4a:
                    74:0d:0f:87:82:0a:54:93:22:7b:76:ec:5e:f4:12:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B1:99:EB:26:E6:41:E6:D7:59:B0:F7:A8:AF:C5:DC:14:D5:85:BE
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:60:7f:33:06:56:92:05:14:d4:bb:84:54:76:03:47:64:
         0f:a3:15:36:57:d6:fe:38:e4:80:d1:f1:ce:42:3a:12:fd:b6:
         ba:c7:01:23:7a:ca:28:2e:09:43:34:41:96:f1:6f:4f:1f:03:
         9f:5a:a4:33:92:55:58:01:ac:4b:62:98:2e:70:26:53:da:85:
         32:ea:2b:3a:89:fc:57:5d:41:4a:82:fe:75:9a:92:5e:da:53:
         a2:0d:20:17:ef:26:67:08:3b:18:ad:a3:3d:6d:95:8f:9c:de:
         c8:7a:30:48:3c:30:50:92:8f:ef:92:c7:8e:8f:a0:3c:4b:c1:
         39:13:78:96:16:5a:3c:70:a3:74:44:f8:9f:df:17:18:8d:96:
         c8:5b:47:8b:e8:e9:e9:15:44:30:43:4d:f3:fc:ba:4d:d3:10:
         2c:80:72:91:30:ec:c1:4b:59:6a:59:29:29:00:01:8b:7b:44:
         90:25:4e:fb:fb:de:e4:4e:74:50:89:5c:2e:3f:3a:fe:20:21:
         7d:92:5b:94:66:fe:58:0c:4c:4d:16:94:f7:87:07:d2:a8:0c:
         e5:5d:ec:f3:7a:38:fe:ea:b2:57:4a:7a:56:a0:3c:82:ae:1d:
         28:63:21:63:74:d2:2c:37:b4:24:a8:23:e4:e5:a8:55:18:8d:
         6d:4f:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:44 2026 by rpki-client