Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          3d1I66cgVwwW0MFAQUA7qU5/f4nL9naMQKyjA/NYr6g=
Subject key identifier:   72:C4:48:3C:43:34:C5:95:D8:7E:BD:E7:22:3E:88:F8:D6:46:82:A0
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       66FC3061C4C971B0D31B11230658A41CD7ACC794
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:05 +0000
ROA not before:           Thu 05 Feb 2026 00:24:05 +0000
ROA not after:            Thu 04 Feb 2027 00:29:05 +0000
asID:                     52653
IP address blocks:        177.221.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fc:30:61:c4:c9:71:b0:d3:1b:11:23:06:58:a4:1c:d7:ac:c7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:05 2026 GMT
            Not After : Feb  4 00:29:05 2027 GMT
        Subject: CN=72C4483C4334C595D87EBDE7223E88F8D64682A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:09:b7:e0:d2:52:ee:b3:d5:82:b6:cd:9d:
                    b8:a6:e8:61:47:46:25:e1:b4:02:7f:41:59:ae:dd:
                    69:00:96:49:a3:71:b4:8b:d0:c6:5b:8f:f1:f6:bc:
                    73:89:c6:47:6d:8e:6c:c1:56:2e:96:b6:67:77:b7:
                    f8:89:a2:a8:2f:56:ae:7f:d1:5d:88:15:56:46:d2:
                    54:d3:2c:94:e1:a6:ca:90:31:bc:66:1b:43:3a:44:
                    7f:17:32:6d:0f:ea:19:50:ee:e9:4c:62:8b:29:e0:
                    28:24:03:55:11:cf:95:ff:92:44:0b:be:7a:ea:a8:
                    aa:4a:bb:ad:58:94:f0:8b:b9:dc:39:5e:20:02:c0:
                    7c:90:d8:dc:47:3b:33:72:08:80:82:2d:65:de:dd:
                    73:9f:2f:ee:96:f1:c5:ef:55:db:95:3b:5a:1f:04:
                    af:f3:1d:1b:81:45:4e:67:9e:3d:79:99:7e:51:1f:
                    3e:1b:10:e9:bd:27:b0:5a:44:eb:7e:dc:74:cc:bd:
                    bb:fa:b7:41:2e:dd:78:d5:48:12:9d:f5:ea:3e:2f:
                    25:ad:cf:0d:c2:d9:c2:80:dd:31:fb:08:7c:f9:a0:
                    d7:0e:2f:bf:8f:b8:c1:cb:3c:66:1e:e9:11:2c:81:
                    6a:f0:f5:f8:61:da:95:5d:83:ab:d4:4f:a4:e1:f3:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C4:48:3C:43:34:C5:95:D8:7E:BD:E7:22:3E:88:F8:D6:46:82:A0
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:3a:73:42:77:74:e0:16:9d:6a:a1:6e:87:75:e0:e4:95:
         ab:30:b1:42:0e:22:8e:3a:71:90:36:08:e4:39:bf:15:ae:37:
         8c:d8:be:24:63:f8:35:2c:d1:91:a5:6d:6e:a5:15:74:f8:24:
         16:dc:92:7e:f5:bc:08:90:0f:42:dd:4a:f3:17:32:e3:47:74:
         32:7b:c1:e1:cd:57:1c:b9:53:3d:fa:84:c5:fb:5d:01:d5:6d:
         8c:ee:cf:bd:bc:12:6e:36:2e:53:f9:38:95:53:bb:a1:4b:c6:
         16:9f:01:79:08:af:0b:5d:5e:1a:2d:c3:b6:ea:06:a7:3d:ce:
         fd:33:0f:d0:3c:2e:6c:55:e3:a4:d4:b5:fb:0b:73:ff:23:71:
         55:b4:d3:f5:f2:c4:e2:e6:54:5a:b2:bf:e6:a9:ff:c6:50:fd:
         30:79:d5:5c:ea:03:4b:63:e2:9b:2e:9c:14:c6:ab:41:1f:84:
         0f:27:83:a6:1b:69:c9:2f:3a:ba:47:f5:3e:03:fd:0a:b0:24:
         a4:91:bd:19:0b:85:9f:91:d6:e6:32:80:ad:bf:17:d0:91:23:
         57:29:78:8f:4d:b1:96:54:43:d0:44:61:ea:a6:2f:c1:f1:8a:
         b4:ac:30:9a:e4:7a:ca:4c:d2:2f:4e:da:95:49:a0:cb:c6:20:
         a0:87:20:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZvwwYcTJcbDTGxEjBlikHNesx5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNjAyMDUwMDI0MDVaFw0yNzAyMDQwMDI5MDVaMDMxMTAvBgNV
BAMTKDcyQzQ0ODNDNDMzNEM1OTVEODdFQkRFNzIyM0U4OEY4RDY0NjgyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Sgm34NJS7rPVgrbNnbim6GFH
RiXhtAJ/QVmu3WkAlkmjcbSL0MZbj/H2vHOJxkdtjmzBVi6Wtmd3t/iJoqgvVq5/
0V2IFVZG0lTTLJThpsqQMbxmG0M6RH8XMm0P6hlQ7ulMYosp4CgkA1URz5X/kkQL
vnrqqKpKu61YlPCLudw5XiACwHyQ2NxHOzNyCICCLWXe3XOfL+6W8cXvVduVO1of
BK/zHRuBRU5nnj15mX5RHz4bEOm9J7BaROt+3HTMvbv6t0Eu3XjVSBKd9eo+LyWt
zw3C2cKA3TH7CHz5oNcOL7+PuMHLPGYe6REsgWrw9fhh2pVdg6vUT6Th895zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcsRIPEM0xZXYfr3nIj6I+NZGgqAwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1aMA0GCSqGSIb3DQEBCwUAA4IBAQCIqjpzQnd0
4BadaqFuh3Xg5JWrMLFCDiKOOnGQNgjkOb8VrjeM2L4kY/g1LNGRpW1upRV0+CQW
3JJ+9bwIkA9C3UrzFzLjR3Qye8HhzVccuVM9+oTF+10B1W2M7s+9vBJuNi5T+TiV
U7uhS8YWnwF5CK8LXV4aLcO26ganPc79Mw/QPC5sVeOk1LX7C3P/I3FVtNP18sTi
5lRasr/mqf/GUP0wedVc6gNLY+KbLpwUxqtBH4QPJ4OmG2nJLzq6R/U+A/0KsCSk
kb0ZC4WfkdbmMoCtvxfQkSNXKXiPTbGWVEPQRGHqpi/B8Yq0rDCa5HrKTNIvTtqV
SaDLxiCghyBj
-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:54 2026 by rpki-client