Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39322e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          NSgOYZx64nGd73vY5gVnLHBO0k+kMoybR1GY46sgW6Q=
Subject key identifier:   8B:77:52:B4:7D:7F:A3:32:1C:04:4C:A2:17:42:78:5F:2A:B2:81:7B
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       15BC7D856215519B61A3CC86606D3BA1F97ECEEA
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:06 +0000
ROA not before:           Thu 05 Feb 2026 00:24:06 +0000
ROA not after:            Thu 04 Feb 2027 00:29:06 +0000
asID:                     52653
IP address blocks:        177.221.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bc:7d:85:62:15:51:9b:61:a3:cc:86:60:6d:3b:a1:f9:7e:ce:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:06 2026 GMT
            Not After : Feb  4 00:29:06 2027 GMT
        Subject: CN=8B7752B47D7FA3321C044CA21742785F2AB2817B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:63:dd:73:db:53:d5:22:32:db:d5:99:00:49:
                    ee:ff:2f:40:36:ca:74:7a:fa:97:38:74:f4:ab:9f:
                    14:3b:70:4b:ee:ed:d7:bf:7b:08:23:33:f4:94:41:
                    a3:06:47:12:bc:42:89:c8:71:cb:c4:f7:0f:9c:50:
                    54:67:63:31:02:4a:83:0f:4c:87:cd:c1:63:bd:17:
                    e9:37:9f:04:12:71:b5:6c:1c:23:a1:d9:7e:5e:0d:
                    fe:e3:fb:f5:7e:ae:62:ea:11:05:7c:f2:38:5b:0a:
                    d1:38:28:7f:26:63:45:ec:78:58:67:2e:19:50:39:
                    9e:4e:c5:54:28:05:49:a0:58:54:c5:9e:32:a6:9d:
                    49:54:95:1d:c8:e9:c3:01:42:b7:cc:1f:d8:de:4d:
                    27:3c:8e:da:6c:f7:14:ab:a8:56:44:da:87:89:e9:
                    27:72:04:cb:a4:62:d3:94:2d:d8:41:90:0e:b0:6a:
                    7c:e5:9f:e1:a3:af:62:16:eb:25:55:8c:9b:22:e0:
                    82:b8:b2:bf:de:fd:a1:76:3e:5c:15:89:70:84:0b:
                    9f:b6:54:d7:37:1b:23:d4:49:9d:8a:52:f2:6d:d7:
                    e3:7b:15:a6:ff:5e:c2:bb:00:15:92:e1:da:ad:ad:
                    c4:12:d3:f4:06:cd:a2:4a:5c:63:2a:36:12:b7:f3:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:77:52:B4:7D:7F:A3:32:1C:04:4C:A2:17:42:78:5F:2A:B2:81:7B
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39322e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:ac:46:4f:a7:bf:1f:8d:55:9f:87:a0:5a:c9:8b:7e:09:de:
         27:ed:d7:f3:3d:6d:3b:6e:e0:48:40:7d:65:b7:e1:77:4f:95:
         25:3e:ba:55:f4:c4:c8:6a:37:e1:71:6a:b4:45:9c:27:aa:9f:
         78:eb:b0:3a:02:81:f7:0d:24:42:5a:85:23:ce:ca:b4:2d:7f:
         4a:29:6a:c5:16:80:a7:68:68:96:61:e0:f4:ba:c7:f6:2b:e1:
         d3:1d:32:11:77:ac:3c:8d:1f:8d:04:93:22:8b:ae:66:63:07:
         d5:58:85:37:1d:0a:b6:2e:3a:99:00:2e:ff:3b:93:f9:f5:34:
         56:5d:9f:4a:d7:4c:3b:4a:63:7c:42:92:37:e0:f3:a2:ed:41:
         30:4c:d6:50:7d:42:92:b7:0d:8a:b7:3a:87:c4:fb:3a:63:c1:
         5a:66:35:84:82:d2:76:b9:fb:f9:01:56:4b:57:0d:e7:da:84:
         35:eb:cf:7f:f5:1a:d2:fc:2f:10:30:fd:25:22:e9:84:4b:ef:
         d2:43:1c:d3:b0:e1:e9:eb:10:e3:32:05:59:39:8c:6a:cd:b7:
         15:b8:42:ca:10:e2:ff:7d:a7:02:e9:50:5f:c7:da:52:0f:fa:
         15:1e:c3:ec:79:05:ec:1b:1a:59:5f:37:5c:fe:68:1f:41:97:
         61:d8:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:24:44 2026 by rpki-client