Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38372e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          mdXDdA9nX6Px8U8IbBBIQNtUd5D9LtgR6xDRoadmOiI=
Subject key identifier:   04:6F:57:8D:C1:1C:69:FA:69:0F:F2:4A:2A:F8:82:0D:02:90:41:65
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       01E06AAB4A1FDBA308457C2B2D3AA254CBDB27AC
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:09 +0000
ROA not before:           Thu 05 Feb 2026 00:24:09 +0000
ROA not after:            Thu 04 Feb 2027 00:29:09 +0000
asID:                     52653
IP address blocks:        177.221.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e0:6a:ab:4a:1f:db:a3:08:45:7c:2b:2d:3a:a2:54:cb:db:27:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:09 2026 GMT
            Not After : Feb  4 00:29:09 2027 GMT
        Subject: CN=046F578DC11C69FA690FF24A2AF8820D02904165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:73:4e:67:3f:66:bc:9a:01:1e:b0:bd:51:
                    14:a1:1c:cb:f1:6b:9c:29:ec:a6:53:d8:8f:10:9f:
                    ae:40:60:fe:74:92:1e:d7:81:16:01:9c:c4:e1:80:
                    0a:da:ca:23:5f:92:98:fa:16:d0:61:06:7c:ce:fe:
                    7e:63:45:67:28:f5:07:13:e6:20:2a:66:af:f0:b9:
                    49:a0:e5:1b:3e:38:a1:9b:5a:12:26:20:93:66:80:
                    13:58:dc:c6:cc:af:bc:04:20:f7:83:9e:e8:a0:ef:
                    53:6b:3a:04:e5:a7:07:dc:69:d1:de:e7:dc:3b:36:
                    38:b6:7e:59:07:4f:d0:ea:49:b7:2a:cc:18:bc:f6:
                    57:cf:54:fc:cb:17:75:2c:81:3a:0b:6a:5d:9c:dd:
                    18:e5:25:41:57:5d:e9:16:35:7b:ba:cd:08:c6:86:
                    ed:cc:d9:a1:a6:94:4d:2e:94:be:87:a7:f6:65:84:
                    61:b8:fd:0a:c0:e1:95:7b:d4:39:f3:9c:41:06:74:
                    8c:67:73:7d:f9:bf:a4:bf:1c:c2:30:2c:54:03:e7:
                    23:43:24:4b:4c:6e:da:40:5e:52:bd:51:8d:2e:3e:
                    84:2d:bc:8f:ff:05:73:b3:77:1e:7e:71:f7:ac:a8:
                    98:74:3f:5a:bc:88:6f:c1:bd:79:fe:b9:df:a8:25:
                    d6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6F:57:8D:C1:1C:69:FA:69:0F:F2:4A:2A:F8:82:0D:02:90:41:65
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38372e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:5e:e6:24:ef:df:ac:a3:49:e9:44:75:48:4e:35:ad:3c:
         ef:9d:e1:65:70:7f:72:19:55:85:1a:39:f4:76:25:28:7f:f7:
         11:f5:de:b0:72:0a:2b:b2:12:82:4f:5f:d0:12:9a:5d:fa:62:
         d8:31:e2:f9:46:de:c9:69:ff:84:3f:cc:4b:e3:20:6a:95:e1:
         9f:c1:52:ee:b6:10:9d:7e:79:21:5e:b5:61:e2:04:75:f9:f2:
         f9:a4:5b:31:88:ff:6b:b2:2d:69:d5:4b:53:5a:a8:05:f8:6b:
         9a:dd:72:9a:c8:6b:c0:a4:09:b7:bf:7e:99:a2:44:3b:2b:e1:
         40:1e:20:51:1a:c0:a9:b9:85:b6:82:aa:e7:d4:a8:a0:00:87:
         03:59:c0:20:ff:13:08:a6:b0:dd:84:88:ad:fd:cb:9a:ba:93:
         19:7a:08:b4:48:22:01:78:a2:74:0a:59:86:59:cb:03:5d:73:
         36:ab:3f:a0:ef:62:b5:b9:2c:3d:a2:03:54:06:58:01:de:75:
         65:54:5b:82:0c:55:31:3d:5d:ba:4c:8d:3c:3c:58:c4:f8:26:
         8b:85:d0:7f:9e:47:d7:9e:02:ce:b6:14:5a:3b:bf:b5:59:ff:
         7c:77:8d:c2:36:4f:ec:41:84:43:cf:98:63:46:27:f4:a5:84:
         4c:09:63:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAeBqq0of26MIRXwrLTqiVMvbJ6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNjAyMDUwMDI0MDlaFw0yNzAyMDQwMDI5MDlaMDMxMTAvBgNV
BAMTKDA0NkY1NzhEQzExQzY5RkE2OTBGRjI0QTJBRjg4MjBEMDI5MDQxNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCn3NOZz9mvJoBHrC9URShHMvx
a5wp7KZT2I8Qn65AYP50kh7XgRYBnMThgArayiNfkpj6FtBhBnzO/n5jRWco9QcT
5iAqZq/wuUmg5Rs+OKGbWhImIJNmgBNY3MbMr7wEIPeDnuig71NrOgTlpwfcadHe
59w7Nji2flkHT9DqSbcqzBi89lfPVPzLF3UsgToLal2c3RjlJUFXXekWNXu6zQjG
hu3M2aGmlE0ulL6Hp/ZlhGG4/QrA4ZV71DnznEEGdIxnc335v6S/HMIwLFQD5yND
JEtMbtpAXlK9UY0uPoQtvI//BXOzdx5+cfesqJh0P1q8iG/BvXn+ud+oJdYjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBG9XjcEcafppD/JKKviCDQKQQWUwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1XMA0GCSqGSIb3DQEBCwUAA4IBAQB7x17mJO/f
rKNJ6UR1SE41rTzvneFlcH9yGVWFGjn0diUof/cR9d6wcgorshKCT1/QEppd+mLY
MeL5Rt7Jaf+EP8xL4yBqleGfwVLuthCdfnkhXrVh4gR1+fL5pFsxiP9rsi1p1UtT
WqgF+Gua3XKayGvApAm3v36ZokQ7K+FAHiBRGsCpuYW2gqrn1KigAIcDWcAg/xMI
prDdhIit/cuaupMZegi0SCIBeKJ0ClmGWcsDXXM2qz+g72K1uSw9ogNUBlgB3nVl
VFuCDFUxPV26TI08PFjE+CaLhdB/nkfXngLOthRaO7+1Wf98d43CNk/sQYRDz5hj
Rif0pYRMCWNa
-----END CERTIFICATE-----
Generated at Thu Feb 19 05:56:00 2026 by rpki-client