Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32342d3234203d3e203631393138.roa
File:                     3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          QflKVL4gyoZt8h6BeJzE9d1mQeF6TZLetnBU7KJJuR8=
Subject key identifier:   B5:0F:4F:6F:F1:4F:30:05:D9:39:B1:8C:B2:20:57:27:4D:A6:D9:4A
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       2B82DE79C494C0FD3A690D6B037C9AB9D256EBB3
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 04 Feb 2026 20:00:08 +0000
ROA not before:           Wed 04 Feb 2026 19:55:08 +0000
ROA not after:            Wed 03 Feb 2027 20:00:08 +0000
asID:                     61918
IP address blocks:        177.92.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 16:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:de:79:c4:94:c0:fd:3a:69:0d:6b:03:7c:9a:b9:d2:56:eb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Feb  4 19:55:08 2026 GMT
            Not After : Feb  3 20:00:08 2027 GMT
        Subject: CN=B50F4F6FF14F3005D939B18CB22057274DA6D94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:c7:8d:a9:4a:4f:b1:d8:a6:77:5d:e7:8d:
                    77:68:ab:68:11:0f:f5:e8:bc:8d:21:51:1e:b1:01:
                    4e:2d:af:f4:8b:21:73:40:b6:ad:bc:4b:c1:53:80:
                    e7:43:f1:e6:f6:66:35:1a:0d:b6:3f:86:17:ec:a3:
                    9b:6c:cd:31:0d:6a:c4:5f:6f:b3:af:e6:22:ed:09:
                    c6:55:27:81:73:a8:3b:6f:36:48:bd:73:e8:47:66:
                    de:36:ce:cd:a4:ea:49:b4:92:2e:be:d9:9f:fa:81:
                    9c:cf:27:24:fa:95:2e:5a:d7:56:35:82:ad:46:12:
                    37:6e:37:a0:30:ae:bd:70:b6:09:c2:2d:14:c3:d9:
                    bc:2e:a2:b4:36:33:6a:5d:e5:e2:96:21:45:ea:15:
                    6a:89:ad:79:a4:07:35:7d:7e:33:24:21:ae:3c:e4:
                    e8:d2:fc:01:fd:32:91:f6:df:3f:0b:20:1a:0f:6d:
                    c7:f1:90:73:b9:70:94:2f:f4:ef:9b:f4:44:af:c3:
                    35:bc:46:5e:24:d5:a4:b1:56:26:e9:0a:28:a2:2f:
                    a9:2a:c2:e7:d8:54:75:ac:c6:1f:ce:0f:58:28:90:
                    8a:34:74:60:7f:d7:67:41:3b:45:47:64:9a:34:ae:
                    15:5b:f4:97:35:d3:8b:f2:e9:98:c3:8a:7a:85:38:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0F:4F:6F:F1:4F:30:05:D9:39:B1:8C:B2:20:57:27:4D:A6:D9:4A
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:bd:ed:88:c5:a3:54:63:74:4e:36:27:21:cc:18:2d:6a:8f:
         96:15:ab:30:96:6a:b5:df:b8:7e:8f:fe:e2:d3:06:0a:40:e0:
         8b:93:3f:e4:14:e3:01:5e:b7:d6:ee:ab:32:28:96:0f:af:5d:
         d8:75:bd:5e:61:32:c2:a0:50:ad:de:a4:3f:5f:c3:8d:2e:44:
         76:da:c4:79:49:8f:d7:17:53:4b:c9:bb:d4:44:6b:9c:a9:43:
         a6:05:f2:5b:76:92:f3:87:75:d4:43:fe:82:ce:f6:85:1f:48:
         b7:43:a4:2e:ea:10:2d:71:0a:a8:1c:af:2d:5e:5d:b8:98:9f:
         c1:4b:ba:52:1b:69:38:14:38:31:68:e4:9a:ac:f3:8e:f5:84:
         22:dc:69:1b:58:a9:cf:1d:b5:17:bb:6b:b0:fe:ce:12:9d:81:
         ff:40:ea:18:c5:bd:06:85:50:d6:9c:59:71:43:cc:7f:be:46:
         d4:cb:fa:ee:53:d6:c5:fd:d3:0f:b1:0d:5e:b2:3a:9c:95:3d:
         33:0a:59:a4:45:a5:2d:a4:3a:6d:cb:bc:1e:1f:9d:a8:0b:db:
         7e:13:1d:cd:eb:81:bf:1a:40:e1:cf:d9:7a:34:a5:a2:a1:76:
         29:ae:94:7f:54:2a:71:ad:b6:92:21:92:d8:bd:c2:00:66:f9:
         25:7c:77:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:28:59 2026 by rpki-client