Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa
File:                     3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa (raw, json)
Hash identifier:          BSwML59K6Eh+BnivZfBjp6Jmj/U1o9rktE0ED+7M/t8=
Subject key identifier:   93:99:FD:10:0B:1C:28:5E:DE:A1:80:CF:09:9F:0F:63:3E:EF:AA:5C
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       761DB81B585115BE852203965647171A82EB650F
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa
Signing time:             Thu 05 Feb 2026 14:06:30 +0000
ROA not before:           Thu 05 Feb 2026 14:01:30 +0000
ROA not after:            Thu 04 Feb 2027 14:06:30 +0000
asID:                     271589
IP address blocks:        177.184.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 08:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:b8:1b:58:51:15:be:85:22:03:96:56:47:17:1a:82:eb:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Feb  5 14:01:30 2026 GMT
            Not After : Feb  4 14:06:30 2027 GMT
        Subject: CN=9399FD100B1C285EDEA180CF099F0F633EEFAA5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:80:37:e5:12:90:df:e8:83:44:13:34:76:33:
                    5f:10:97:34:bc:c3:e5:ef:45:f6:f9:b8:a3:00:3b:
                    ea:41:ba:97:1a:03:3b:43:e8:46:b3:49:74:87:0e:
                    66:16:68:c5:0d:d9:19:bd:db:ae:f6:b5:1d:8f:d2:
                    2f:97:92:fa:71:f9:f2:d7:d6:2d:c5:e7:d3:99:56:
                    00:ed:ff:37:aa:00:6d:4d:13:70:5f:2c:2d:d9:de:
                    dc:af:9f:f9:b6:40:15:01:e9:ad:7d:61:df:c7:d2:
                    86:f3:2e:39:84:5e:56:87:17:b8:ae:c1:ee:22:9a:
                    8d:d4:72:39:d8:46:8e:a4:50:ca:39:a5:26:2e:56:
                    ce:04:21:d2:2f:79:d2:2f:4c:6f:6a:09:34:64:9e:
                    33:01:85:7c:79:61:76:54:27:2e:d8:74:ee:75:6f:
                    6e:43:93:22:bf:34:47:68:20:fb:49:42:3b:3a:5f:
                    57:6e:20:d3:48:83:71:ad:4f:b4:38:6a:5c:a0:aa:
                    8a:3b:7f:f3:16:09:5e:ba:29:88:43:13:7c:28:53:
                    3d:da:4f:6f:19:c6:6c:d7:4a:91:a2:d9:ec:c1:1d:
                    52:d5:08:ff:bb:97:52:d1:52:c6:32:5f:48:16:48:
                    0f:09:25:5f:51:89:b3:d2:51:e1:38:d8:a8:a5:35:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:FD:10:0B:1C:28:5E:DE:A1:80:CF:09:9F:0F:63:3E:EF:AA:5C
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/3137372e3138342e3230382e302f32322d3234203d3e20323731353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:0f:2b:9c:2a:8c:b1:5d:c8:d0:84:59:05:d9:4f:c2:2a:4b:
         ee:5a:f2:fb:c6:1c:40:fe:94:84:fb:d1:2b:7f:49:5a:c8:af:
         a4:42:da:1c:ff:94:bf:44:92:5d:24:93:41:1b:97:7a:94:0e:
         50:32:d5:aa:56:c1:1b:0a:bc:ae:6f:da:26:43:17:d3:48:0c:
         8a:d2:af:e5:5c:7b:c2:85:00:4f:b0:1a:07:ab:bc:72:69:93:
         d9:90:7e:3a:cd:27:64:0a:19:cb:94:6a:3d:db:60:00:a3:43:
         9d:86:5f:d4:c1:24:a2:28:af:5d:9b:0c:0a:52:21:8d:52:8d:
         77:ac:7a:42:33:8b:82:ff:4e:8d:f3:65:b2:58:39:2a:4c:83:
         03:92:fe:f0:8d:6c:b6:76:54:5c:c6:f2:09:d8:ce:b9:1e:c7:
         f9:c3:89:f5:0f:7e:59:43:87:b6:ba:be:36:ba:11:9a:1b:5d:
         1d:71:00:06:c6:dd:2b:33:d0:17:a0:df:5a:d8:17:75:99:0f:
         98:3a:cd:b6:07:6c:44:f8:f0:84:40:93:92:45:e5:2e:9f:28:
         96:0b:39:ee:70:85:f4:c4:67:8a:13:32:5e:23:65:96:b6:00:
         d5:9c:bc:eb:04:7b:43:81:93:44:e3:4a:90:e0:b5:e6:80:0a:
         90:12:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:28:15 2026 by rpki-client