Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32322d3232203d3e203631393138.roa
File:                     3137372e39322e3136342e302f32322d3232203d3e203631393138.roa (raw, json)
Hash identifier:          ub8XR4e/GVYaJg8sEKr6dHaKeeUizUiwf9Pag8GL6uo=
Subject key identifier:   5B:F1:9E:95:94:0F:28:76:6B:B7:1D:09:36:B9:B0:E4:8C:AE:EF:28
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       74BEF104C6AC21B86C839677683D9DB08B928C10
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32322d3232203d3e203631393138.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     61918
IP address blocks:        177.92.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 11:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:be:f1:04:c6:ac:21:b8:6c:83:96:77:68:3d:9d:b0:8b:92:8c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=5BF19E95940F28766BB71D0936B9B0E48CAEEF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:db:0f:af:f3:d1:1e:18:54:2b:7a:33:db:
                    26:78:00:f7:59:8b:83:75:7e:30:bd:fb:97:49:76:
                    4c:8b:d6:da:26:58:ba:7d:02:7d:d9:70:50:d1:e6:
                    15:e0:fc:b3:86:9f:7f:ea:c4:1b:64:ef:79:17:5c:
                    71:dc:f9:39:ee:7c:da:7e:78:d6:46:13:d4:cd:f7:
                    16:4e:d5:96:54:97:d6:73:9c:44:d1:db:a1:81:c1:
                    0f:26:26:d5:71:5b:88:57:b6:36:ea:b3:b1:aa:b7:
                    e4:d5:18:f5:c4:c0:80:1c:d1:4b:89:27:24:0a:2b:
                    64:2e:9a:1f:22:70:42:db:e1:c8:a7:1a:c1:05:2b:
                    ba:2b:30:a3:65:52:c5:18:dc:cb:06:28:92:48:94:
                    9f:e1:21:64:dc:72:83:8e:22:90:79:44:c8:32:49:
                    40:15:06:28:eb:85:ee:fd:e8:80:88:bd:a7:a1:75:
                    f3:00:7d:ea:23:37:fe:ca:f9:0e:85:ec:a8:07:f3:
                    e8:ba:c6:a2:a8:49:ad:81:ae:1f:38:b7:d5:7e:4f:
                    fc:59:eb:7c:13:82:55:2f:94:15:65:54:13:0a:2a:
                    2f:f1:49:bf:10:d9:48:7f:4c:b1:a5:bc:6d:88:a1:
                    e9:64:50:84:31:26:de:58:e7:6f:41:0d:ac:b8:33:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F1:9E:95:94:0F:28:76:6B:B7:1D:09:36:B9:B0:E4:8C:AE:EF:28
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32322d3232203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:32:d6:62:b5:03:75:7f:fc:fa:42:0f:1d:fb:db:c7:71:a1:
         db:99:30:e3:73:9d:41:ea:28:6d:31:37:79:9e:33:c5:8a:b4:
         9e:fc:85:5d:dc:12:99:96:ad:98:03:d9:10:b5:83:93:6c:33:
         20:40:15:e2:87:37:dd:81:29:ea:e5:47:58:44:f6:b8:09:c5:
         c8:31:1c:c0:c1:bd:52:f5:92:4d:10:4e:50:7f:66:ad:7e:e3:
         41:78:5f:86:7c:38:c0:84:b9:89:d6:21:93:dd:21:82:79:f4:
         a6:b1:d3:af:eb:ab:01:43:f3:de:2f:fc:3d:a9:d9:ab:0b:52:
         57:d7:52:3e:89:2f:b5:20:af:fd:a2:bd:59:94:e8:f9:49:ff:
         6e:a8:24:1d:78:fc:28:ef:f9:61:d3:10:30:c7:e5:89:9f:67:
         20:db:2d:6b:79:81:d4:c0:fc:68:c4:65:bf:f0:95:31:53:8d:
         52:d8:15:3d:4b:6a:36:8a:72:4b:cb:c9:cc:02:8e:51:b5:3b:
         14:b7:eb:7b:5e:c8:7c:99:60:d4:01:96:85:a4:03:d2:e9:a2:
         cc:01:9e:05:8c:ea:29:4e:40:2d:b1:c7:fa:13:f1:ff:75:b0:
         1b:ca:fc:d6:06:8a:d2:48:0f:15:a3:d8:39:e5:33:05:77:4b:
         f5:6c:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:38:41 2026 by rpki-client