Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38382e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          cBB9LKWFm7p/7Avlj20XjqruX6l4bt8mTGGwpgelvQg=
Subject key identifier:   35:80:00:25:A9:7F:7C:9C:6D:C1:0B:AF:29:CD:3C:A6:3D:93:54:50
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       2E311E66E733EFA5E6F69D497EC519A36BB8D654
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:04 +0000
ROA not before:           Thu 05 Feb 2026 00:24:04 +0000
ROA not after:            Thu 04 Feb 2027 00:29:04 +0000
asID:                     52653
IP address blocks:        177.221.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:31:1e:66:e7:33:ef:a5:e6:f6:9d:49:7e:c5:19:a3:6b:b8:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:04 2026 GMT
            Not After : Feb  4 00:29:04 2027 GMT
        Subject: CN=35800025A97F7C9C6DC10BAF29CD3CA63D935450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:7e:e1:be:d3:df:3d:8d:f4:de:12:fa:cb:
                    14:a5:21:be:fe:ca:27:3e:d2:3c:13:13:24:d8:a8:
                    5c:70:fd:a9:ca:82:a9:b4:25:a3:5a:fe:7b:4d:fe:
                    36:58:12:78:57:3b:e5:1d:53:fc:88:21:d5:6f:a8:
                    ae:d7:59:d6:c6:23:f1:1f:ef:10:ec:2a:96:70:8f:
                    96:50:5b:48:39:19:00:58:e9:25:30:88:83:3a:88:
                    38:95:68:f4:69:b8:9d:50:43:81:50:09:74:28:f2:
                    6d:c1:f4:b7:7e:09:93:aa:49:39:34:07:f4:18:52:
                    e5:24:76:01:06:8a:9f:5b:96:6f:0a:07:8e:d7:ba:
                    ee:44:0a:16:48:70:87:3e:60:a0:d5:f7:2f:37:11:
                    14:e3:28:88:e2:25:ae:76:e1:da:6c:4a:aa:b3:9e:
                    61:cc:24:93:73:31:1b:7b:9e:f5:a2:a0:c7:e9:7b:
                    0a:2b:78:ad:80:02:2b:e5:b3:09:9f:db:f5:e4:ad:
                    58:a6:f8:b6:0b:bb:99:d2:ea:c6:8d:01:1b:f7:de:
                    5f:37:d0:db:cd:f1:a2:34:e8:07:af:cb:82:5c:27:
                    c9:3b:bf:e3:ac:cd:b2:a0:e4:67:89:c2:47:7f:c9:
                    a1:1d:7b:26:25:e1:da:1d:11:1f:44:56:69:c0:2b:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:00:25:A9:7F:7C:9C:6D:C1:0B:AF:29:CD:3C:A6:3D:93:54:50
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38382e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:63:a7:d0:3e:32:64:4f:a8:65:50:e9:bb:8b:74:ff:39:
         36:a4:d7:42:34:3d:d8:76:7e:05:4b:31:cb:6d:f9:70:50:21:
         2e:e7:c8:77:af:ce:7e:a1:e8:78:46:c2:ec:15:aa:0b:44:37:
         f0:d0:6a:42:a2:dd:18:74:06:9d:18:81:a9:80:05:9b:d7:44:
         90:d9:40:4d:38:a8:37:65:f2:a3:02:6e:71:68:3c:1b:59:be:
         88:41:0c:15:25:cb:60:24:ea:2a:6a:26:3a:25:5d:84:c0:ca:
         8d:f9:f0:96:2c:ea:fb:81:e9:82:6f:6d:44:94:58:92:ef:9e:
         17:01:d6:0c:a8:05:66:a5:6c:47:50:26:9e:d4:66:66:0c:de:
         9d:89:27:5d:24:a3:e2:10:28:3b:ba:5e:fb:cd:63:94:de:46:
         98:1c:d7:3a:34:de:e6:67:b7:e8:66:b1:0c:4c:39:4e:04:ff:
         62:f5:68:df:88:28:2a:29:4d:95:e8:e4:7c:44:2a:8b:a0:d6:
         2f:e7:11:43:e5:f2:6b:32:8f:4d:a8:24:af:16:00:73:b0:1c:
         3e:a0:32:74:96:40:15:39:ee:51:bf:3d:8c:e9:80:ef:f4:b6:
         8e:e1:6e:4f:7f:a8:5c:91:79:e0:3b:a6:60:8b:4a:02:9f:9f:
         43:63:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:28 2026 by rpki-client