Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39312e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e39312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          T61w75e1mTdceKyhgan6JGMCtGZXdjkYSyihX1MrUsM=
Subject key identifier:   97:44:34:8F:8C:7A:A1:BC:3A:27:61:2D:76:77:F9:F4:B2:E6:E3:5C
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       473D5D864190FABEF4BCE7F42CF001203DD2A3A2
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39312e302f32342d3234203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:07 +0000
ROA not before:           Thu 05 Feb 2026 00:24:07 +0000
ROA not after:            Thu 04 Feb 2027 00:29:07 +0000
asID:                     52653
IP address blocks:        177.221.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3d:5d:86:41:90:fa:be:f4:bc:e7:f4:2c:f0:01:20:3d:d2:a3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:07 2026 GMT
            Not After : Feb  4 00:29:07 2027 GMT
        Subject: CN=9744348F8C7AA1BC3A27612D7677F9F4B2E6E35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:1c:a6:10:7a:e3:92:7d:84:4a:e8:3d:3a:
                    fe:0a:ef:87:65:34:05:04:d1:b8:ea:17:a1:36:64:
                    30:f1:0a:a6:67:36:79:a3:88:21:a3:06:80:1b:2d:
                    23:a2:d6:41:14:03:06:3c:dd:5f:94:23:37:45:c2:
                    d5:0c:bd:59:42:1e:55:c4:12:53:93:9e:18:55:c5:
                    df:e0:b1:f4:66:e0:6d:e9:b2:38:1c:68:1e:8a:72:
                    90:63:42:ab:34:f5:a6:41:9c:8c:c2:13:8d:d0:5c:
                    6b:1d:8e:0f:c3:12:cb:f9:db:a0:f9:8a:dc:68:49:
                    4c:fd:c0:ec:da:84:4c:b4:d2:64:cc:25:1d:f5:04:
                    e9:4a:b3:ca:ad:66:ae:fe:e0:10:30:f3:9c:86:28:
                    ca:11:b6:6e:e4:af:df:39:be:64:5d:b5:16:54:7d:
                    54:05:82:25:5b:fe:90:3b:42:cc:f3:81:ce:fa:b3:
                    f4:28:24:4a:43:ed:cc:91:f4:6b:87:c7:b1:40:be:
                    81:61:1c:6a:1b:95:3e:0f:11:f7:aa:8b:1b:4b:2e:
                    04:25:e6:76:8d:7d:cd:ad:77:60:4b:d1:9c:05:a5:
                    e3:2f:b6:31:a2:35:2b:e5:ca:73:e4:56:d5:2f:cc:
                    58:bc:6f:df:53:fa:8a:6e:7e:fa:8c:31:71:89:1d:
                    26:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:34:8F:8C:7A:A1:BC:3A:27:61:2D:76:77:F9:F4:B2:E6:E3:5C
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:5f:9b:a5:b5:e5:c5:9d:db:0f:eb:b8:32:ee:88:5d:13:
         b9:98:a2:3c:9e:19:37:47:48:7b:51:3b:96:74:60:dc:76:79:
         ed:08:58:07:82:df:3c:5c:d0:46:60:c4:57:46:2b:c5:e0:28:
         24:d8:30:17:ef:8b:d8:e2:89:c1:81:69:99:1f:e8:16:bc:cb:
         b6:48:eb:dd:8e:fa:df:ae:0f:ae:de:4d:bc:87:22:1f:0c:54:
         6b:10:3d:b4:e0:61:f9:d6:1e:6c:5d:04:64:90:7e:41:b1:ea:
         4c:e4:82:e2:76:1c:0f:56:a0:62:bf:d0:a5:c2:74:c3:f1:88:
         77:ec:ac:8b:60:c5:32:f5:c9:d5:b0:6c:f4:a2:57:a4:50:11:
         e8:d6:42:a6:83:ff:b7:65:81:41:ea:08:6d:f1:90:f7:1a:f3:
         5d:94:fd:fc:d5:ea:fa:76:bb:f1:41:96:1c:b4:21:8f:0f:8a:
         3a:6f:61:75:62:90:5a:b4:b1:f3:b9:98:1c:9a:61:1d:a3:76:
         36:8e:37:db:47:99:b4:d2:c2:61:50:17:d4:c5:b9:be:81:27:
         42:4c:56:a5:71:48:81:6b:93:a8:72:a4:47:58:5f:af:9f:4c:
         c9:5d:e5:a1:dd:f0:55:24:d1:d1:55:ec:ae:b5:1a:cf:69:b9:
         39:6d:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:04:35 2026 by rpki-client