Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa
File:                     3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa (raw, json)
Hash identifier:          +oWW6Etth27ORvzVREBLKKDVm57GZWihsQgIJ51bYvs=
Subject key identifier:   E8:40:99:92:9F:5F:70:9E:79:B1:A5:2A:27:7C:B1:CB:23:BE:56:DC
Certificate issuer:       /CN=9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00
Certificate serial:       2A71E6B339985CEBC7749B73FBC71C08C7171C82
Authority key identifier: 9A:D0:28:E1:D1:72:F6:58:9C:BC:F8:6A:98:E5:4C:C4:C6:BF:4C:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa
Signing time:             Wed 11 Feb 2026 20:10:03 +0000
ROA not before:           Wed 11 Feb 2026 20:05:03 +0000
ROA not after:            Wed 10 Feb 2027 20:10:03 +0000
asID:                     52872
IP address blocks:        177.128.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.crl
                          rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 06:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:71:e6:b3:39:98:5c:eb:c7:74:9b:73:fb:c7:1c:08:c7:17:1c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00
        Validity
            Not Before: Feb 11 20:05:03 2026 GMT
            Not After : Feb 10 20:10:03 2027 GMT
        Subject: CN=E84099929F5F709E79B1A52A277CB1CB23BE56DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:1a:7b:7b:b6:eb:86:68:e1:73:da:93:bf:
                    ad:60:07:e9:1f:eb:b9:a0:f1:ed:5a:b6:06:42:c6:
                    d2:fd:1f:a6:45:37:d5:2f:72:cb:cd:a0:ff:fd:af:
                    89:75:d8:ce:ec:c3:5b:c3:a2:fa:5f:cb:01:2a:bb:
                    5c:78:39:fc:4c:dd:80:1f:56:58:98:c5:39:1b:23:
                    c3:94:1c:ab:ff:49:c3:99:a8:13:e7:d6:00:fe:38:
                    53:81:0d:8a:6d:be:52:b1:9f:f5:4f:18:06:23:20:
                    43:21:30:a1:f6:8d:0d:75:95:fc:63:5e:5d:50:62:
                    72:8c:ae:8a:39:45:11:3e:1b:df:39:7a:03:76:2b:
                    0f:58:95:0b:2a:83:89:11:1e:8c:1d:59:25:41:6b:
                    0c:26:ae:a6:c8:8c:a5:6a:ec:d6:5e:6b:3f:64:5d:
                    62:b2:f3:e6:d7:5f:16:23:57:18:30:9c:d3:e9:d4:
                    6b:07:58:5a:d0:18:66:16:de:04:93:de:f1:04:1d:
                    58:86:42:ee:af:54:25:54:ca:98:5d:61:95:b2:fe:
                    d3:af:33:bf:85:6f:37:c9:42:62:e9:f0:54:39:d8:
                    5d:7e:b6:6f:4e:ab:ed:7c:05:08:5b:70:e7:ed:3b:
                    0f:dd:c1:86:d1:37:83:ce:3c:61:5b:fa:e8:b0:73:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:99:92:9F:5F:70:9E:79:B1:A5:2A:27:7C:B1:CB:23:BE:56:DC
            X509v3 Authority Key Identifier:
                keyid:9A:D0:28:E1:D1:72:F6:58:9C:BC:F8:6A:98:E5:4C:C4:C6:BF:4C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AD028E1D172F6589CBCF86A98E54CC4C6BF4C00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/3137372e3132382e3139322e302f32312d3234203d3e203532383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:62:9a:0b:cb:04:26:9b:09:58:81:2f:70:f8:89:7e:1c:27:
         7b:ba:50:45:66:51:2e:30:7c:8f:69:92:49:56:e4:7c:d7:81:
         69:f6:15:7d:b5:53:bb:57:a6:b6:1e:21:45:41:2a:de:a9:54:
         f5:48:bb:5b:ed:45:3b:8c:c1:e1:1e:75:75:f8:af:a1:94:f3:
         cf:de:d6:1e:21:c4:7d:5d:e0:9d:6d:38:98:89:15:8e:9e:5f:
         be:03:41:d2:50:79:69:0d:8d:45:9b:54:cd:56:f2:32:40:bb:
         4c:50:7c:f4:80:26:b3:48:41:8e:17:d9:f2:43:74:74:19:e2:
         97:32:91:dd:92:8c:44:29:65:c9:f2:f3:5c:dc:78:ab:84:26:
         21:9c:19:36:b2:12:3f:ba:a6:21:9b:0d:63:1d:0d:13:87:f6:
         9d:e6:ca:45:4c:a6:61:0f:7a:f6:a3:18:50:63:5b:c7:a8:86:
         26:c2:83:1e:3c:b1:01:ff:a3:9f:94:ee:0f:7f:98:00:60:bc:
         b8:33:43:85:d0:f2:2f:d0:68:58:6b:4c:6e:09:5c:5a:69:d8:
         56:c6:21:08:c2:60:4d:aa:a7:b6:ea:1a:88:eb:21:e3:a6:9e:
         f6:28:03:cc:fa:10:2b:f4:3f:b4:e8:aa:24:ac:f3:c2:aa:1c:
         29:d8:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:07:33 2026 by rpki-client