Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa
File:                     3137372e3232312e39342e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          o9odZUrkNXsah1jQkdBPAtvYI7x9+YlOhii+mu4+A/k=
Subject key identifier:   A1:6E:8B:11:BE:D1:CA:96:D7:A9:3F:92:EB:A8:77:CE:8F:A8:41:70
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       58E0BFE534A1DE1CE9707A95F6B9CF3ACBD79D13
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa
Signing time:             Thu 05 Feb 2026 00:29:09 +0000
ROA not before:           Thu 05 Feb 2026 00:24:09 +0000
ROA not after:            Thu 04 Feb 2027 00:29:09 +0000
asID:                     52653
IP address blocks:        177.221.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 07:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e0:bf:e5:34:a1:de:1c:e9:70:7a:95:f6:b9:cf:3a:cb:d7:9d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Feb  5 00:24:09 2026 GMT
            Not After : Feb  4 00:29:09 2027 GMT
        Subject: CN=A16E8B11BED1CA96D7A93F92EBA877CE8FA84170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:a2:5c:94:42:f8:16:c5:ff:07:25:33:89:
                    73:d2:77:1b:67:30:e9:f6:7b:95:72:86:fc:a7:bd:
                    5e:96:b1:53:2c:d1:8a:c8:47:eb:16:e9:03:a3:0d:
                    d4:d9:f8:9e:6e:53:74:59:f5:69:87:a0:43:ed:ec:
                    fc:b5:f9:1b:04:00:b4:e3:fc:8c:50:37:a9:9c:4c:
                    ce:c3:e9:96:dc:dd:b7:68:04:68:f9:51:93:90:6d:
                    63:1d:62:7e:08:13:53:7e:1c:cb:6a:e2:a4:08:85:
                    60:97:eb:b6:0e:53:9c:93:ea:88:ac:21:6a:0a:a8:
                    79:18:64:9e:11:24:64:88:f1:06:b6:81:c1:f6:df:
                    60:27:c3:44:e4:c8:39:c2:f1:9b:e5:41:cc:a1:ed:
                    e6:2f:bf:3f:57:50:cc:8f:65:00:e4:4d:cf:12:61:
                    dc:25:25:b8:5b:17:79:4b:4e:d8:ea:3f:f0:8d:97:
                    56:78:76:b5:47:cc:04:d6:53:f5:da:62:7a:a0:bc:
                    ec:18:e5:63:de:56:de:90:6b:57:0f:10:58:28:08:
                    ba:a3:96:65:32:e2:66:2d:10:f7:da:6e:c3:c6:ab:
                    35:b5:b9:9d:95:f9:74:f6:38:ca:4a:58:f4:9d:ad:
                    ab:c4:c1:64:d7:8d:50:80:ec:4a:6e:99:0e:26:ed:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6E:8B:11:BE:D1:CA:96:D7:A9:3F:92:EB:A8:77:CE:8F:A8:41:70
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e39342e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:5b:06:1d:61:1e:aa:67:f8:67:7f:60:5b:c6:d3:9a:b7:
         46:bb:d1:5f:3c:ca:ec:45:5b:89:b0:ff:a8:ef:cf:99:77:b2:
         ef:50:37:86:92:46:c8:f2:d2:95:15:ee:d1:e0:99:e8:27:3b:
         50:de:82:2d:5b:7c:cb:02:80:f8:c3:a7:83:80:e8:5c:b3:ba:
         52:9d:36:19:33:0a:1e:70:73:1f:78:34:1a:d3:dc:12:d0:00:
         48:b9:61:8e:f9:ae:eb:9a:2a:bc:0b:00:c2:70:dc:1b:10:81:
         bf:54:d8:05:84:14:2b:78:8d:1a:73:34:a7:39:f5:d7:36:87:
         ed:c9:1c:63:df:61:97:64:3b:ba:20:fd:31:e1:c6:e2:cf:d9:
         c5:75:ae:b6:d3:f3:42:e2:ab:a7:1e:83:38:77:78:ad:eb:5c:
         2f:1c:33:48:7c:1f:66:a5:dc:ee:ba:0b:59:85:0c:b2:e5:83:
         3d:8d:90:01:c6:fd:c0:e7:da:62:56:94:07:8a:eb:79:5c:3c:
         ba:68:cf:58:0e:d0:b7:b3:69:57:6e:8d:5d:69:8d:48:38:4e:
         e0:e5:c9:f4:1c:5f:cd:c2:5d:3a:48:1d:d2:87:1f:93:2c:47:
         79:65:42:e8:d2:10:7d:e7:35:74:87:78:7c:ea:e9:d6:1a:14:
         b9:06:75:37
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWOC/5TSh3hzpcHqV9rnPOsvXnRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNjAyMDUwMDI0MDlaFw0yNzAyMDQwMDI5MDlaMDMxMTAvBgNV
BAMTKEExNkU4QjExQkVEMUNBOTZEN0E5M0Y5MkVCQTg3N0NFOEZBODQxNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpKJclEL4FsX/ByUziXPSdxtn
MOn2e5VyhvynvV6WsVMs0YrIR+sW6QOjDdTZ+J5uU3RZ9WmHoEPt7Py1+RsEALTj
/IxQN6mcTM7D6Zbc3bdoBGj5UZOQbWMdYn4IE1N+HMtq4qQIhWCX67YOU5yT6ois
IWoKqHkYZJ4RJGSI8Qa2gcH232Anw0TkyDnC8ZvlQcyh7eYvvz9XUMyPZQDkTc8S
YdwlJbhbF3lLTtjqP/CNl1Z4drVHzATWU/XaYnqgvOwY5WPeVt6Qa1cPEFgoCLqj
lmUy4mYtEPfabsPGqzW1uZ2V+XT2OMpKWPSdravEwWTXjVCA7EpumQ4m7RE5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoW6LEb7RypbXqT+S66h3zo+oQXAwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM5MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsd1eMA0GCSqGSIb3DQEBCwUAA4IBAQB47FsGHWEe
qmf4Z39gW8bTmrdGu9FfPMrsRVuJsP+o78+Zd7LvUDeGkkbI8tKVFe7R4JnoJztQ
3oItW3zLAoD4w6eDgOhcs7pSnTYZMwoecHMfeDQa09wS0ABIuWGO+a7rmiq8CwDC
cNwbEIG/VNgFhBQreI0aczSnOfXXNoftyRxj32GXZDu6IP0x4cbiz9nFda620/NC
4qunHoM4d3it61wvHDNIfB9mpdzuugtZhQyy5YM9jZABxv3A59piVpQHiut5XDy6
aM9YDtC3s2lXbo1daY1IOE7g5cn0HF/Nwl06SB3Shx+TLEd5ZULo0hB95zV0h3h8
6unWGhS5BnU3
-----END CERTIFICATE-----
Generated at Thu Feb 19 08:50:55 2026 by rpki-client