Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          oVuW487wnNWuuRBVCqbXYuKSh2JQART95TvAytvmD48=
Subject key identifier:   CE:73:AC:9C:FC:CD:2E:73:B9:AB:81:E6:70:53:70:0E:05:88:D1:AD
Certificate issuer:       /CN=0EBCE5B97EAE4FB47E76B02244A55732FF9E2856
Certificate serial:       6CEC1624D7F4A6D52E257C086DD7EA275395EE3B
Authority key identifier: 0E:BC:E5:B9:7E:AE:4F:B4:7E:76:B0:22:44:A5:57:32:FF:9E:28:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EBCE5B97EAE4FB47E76B02244A55732FF9E2856.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa
Signing time:             Mon 26 Jan 2026 17:58:13 +0000
ROA not before:           Mon 26 Jan 2026 17:53:13 +0000
ROA not after:            Mon 25 Jan 2027 17:58:13 +0000
asID:                     262550
IP address blocks:        177.72.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0EBCE5B97EAE4FB47E76B02244A55732FF9E2856.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0EBCE5B97EAE4FB47E76B02244A55732FF9E2856.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EBCE5B97EAE4FB47E76B02244A55732FF9E2856.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 13:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ec:16:24:d7:f4:a6:d5:2e:25:7c:08:6d:d7:ea:27:53:95:ee:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EBCE5B97EAE4FB47E76B02244A55732FF9E2856
        Validity
            Not Before: Jan 26 17:53:13 2026 GMT
            Not After : Jan 25 17:58:13 2027 GMT
        Subject: CN=CE73AC9CFCCD2E73B9AB81E67053700E0588D1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:4e:68:7f:08:73:c8:89:02:97:e7:6a:ec:
                    5d:21:cf:bb:31:08:9e:d2:43:33:ff:96:a4:39:ec:
                    5d:14:0e:56:2c:c6:56:2b:83:2b:5a:80:f4:93:29:
                    a2:cb:4d:fd:3b:a1:28:f6:1c:6f:bd:a8:97:39:88:
                    9c:21:e2:84:f5:b0:bc:81:30:68:f7:52:34:31:ad:
                    72:2a:4c:39:6c:62:0e:08:5e:f7:04:b1:bf:ac:d7:
                    d1:3f:14:d4:94:13:5a:c4:13:31:da:8f:6e:a8:96:
                    3f:30:e0:b5:77:18:d8:15:2c:ea:8e:6b:1c:89:15:
                    dd:f0:cd:dc:32:ae:6a:e0:e8:4c:8b:61:32:43:6f:
                    78:98:ad:58:16:70:29:0c:bb:2b:bf:23:49:61:b9:
                    87:5d:80:e5:12:ee:c6:31:ad:69:ca:d1:65:79:27:
                    39:e5:a1:1c:6a:98:1e:fe:a5:92:42:21:da:2d:a5:
                    42:b2:fe:5a:e3:a9:c5:03:73:c0:b8:60:cc:4a:d9:
                    d1:9e:64:64:97:e6:1e:69:aa:6c:83:7e:76:0f:a4:
                    7d:b5:1f:a7:45:20:93:13:9f:b9:7f:d8:c0:ad:54:
                    f6:fb:f6:84:4d:49:69:5b:53:6e:43:54:98:87:3d:
                    89:c6:6d:db:65:05:87:27:4e:47:3c:a6:33:24:cd:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:73:AC:9C:FC:CD:2E:73:B9:AB:81:E6:70:53:70:0E:05:88:D1:AD
            X509v3 Authority Key Identifier:
                keyid:0E:BC:E5:B9:7E:AE:4F:B4:7E:76:B0:22:44:A5:57:32:FF:9E:28:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/0EBCE5B97EAE4FB47E76B02244A55732FF9E2856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EBCE5B97EAE4FB47E76B02244A55732FF9E2856.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32312d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:20:b4:c9:ff:d5:1c:80:a0:51:94:09:c4:9b:74:e5:26:94:
         e3:17:28:67:c9:a4:81:72:7d:0d:77:2b:d8:a5:f2:39:67:6a:
         ed:76:52:0e:f7:05:8e:31:f7:be:c3:22:c3:ea:38:08:5c:54:
         7f:ac:56:d8:bc:de:2a:66:cf:56:c4:01:78:98:f5:c7:21:82:
         95:60:a7:14:02:97:ca:80:21:7f:f9:53:3d:55:ff:cc:e6:7f:
         4c:a2:6a:33:c3:41:25:cf:de:8a:ba:aa:b0:17:db:b3:85:f3:
         04:9a:50:80:af:53:9e:03:b8:65:50:d8:49:ec:ec:9b:73:4e:
         6d:7a:02:7d:77:06:70:30:47:52:08:59:13:54:37:27:df:9b:
         66:84:6c:72:08:08:ae:44:d8:ff:60:47:69:2f:9d:25:fb:cb:
         eb:80:48:c4:fd:61:69:70:3a:43:97:c4:42:7c:c7:86:52:cf:
         58:a4:1c:4b:0e:89:05:dc:79:3a:60:b9:fb:69:70:bf:b8:25:
         54:1d:9f:c8:fe:e3:cf:ec:d0:fd:12:16:72:ca:c3:dd:f0:12:
         1b:4a:55:7d:7e:eb:12:ce:c6:53:19:7a:cb:cc:95:c1:e5:ea:
         1d:b8:44:33:87:c8:4a:d4:a9:98:85:96:5c:f6:fe:d4:ec:89:
         36:e9:10:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:11:44 2026 by rpki-client