Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e31342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          OEyPxApP80mYBNfhYNCnp5Dw/xPZvd5O4X3rPepPN/c=
Subject key identifier:   9D:3B:DC:0F:C3:7A:C0:19:97:C7:D9:AC:8C:A2:ED:38:E6:A1:76:07
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       7DC67FF9196A8ECCD15E6169930BFC5394A1EB80
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:19 +0000
ROA not before:           Thu 05 Feb 2026 00:29:19 +0000
ROA not after:            Thu 04 Feb 2027 00:34:19 +0000
asID:                     52871
IP address blocks:        177.136.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c6:7f:f9:19:6a:8e:cc:d1:5e:61:69:93:0b:fc:53:94:a1:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:19 2026 GMT
            Not After : Feb  4 00:34:19 2027 GMT
        Subject: CN=9D3BDC0FC37AC01997C7D9AC8CA2ED38E6A17607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:d7:83:f7:af:bb:4a:7e:32:3a:9d:1d:f5:
                    9b:54:df:64:12:7f:37:e8:70:87:fd:95:35:30:7b:
                    b3:92:ad:8d:b0:8e:de:73:b0:c0:01:18:7f:fc:96:
                    b7:d6:4d:a1:c5:17:d4:9c:d6:c0:3e:72:60:75:05:
                    df:15:34:7c:3f:19:2f:14:74:f5:a7:0f:2c:1c:14:
                    76:b8:ee:8e:78:c9:a4:2e:3c:44:cd:49:90:c4:fb:
                    5b:30:2b:f6:ec:3a:2d:0d:ef:01:ff:60:79:c9:4b:
                    ee:2f:8b:70:8d:00:6b:8f:d0:e1:56:b8:7c:2d:c7:
                    d5:65:1d:7a:d7:52:a2:49:c2:ae:bf:f3:db:c4:f4:
                    0d:77:8a:f6:7f:01:7d:ea:d8:f4:5c:6c:ea:8d:6a:
                    04:bd:ae:aa:13:da:d4:d5:de:e1:7c:e7:7f:05:69:
                    f9:b1:64:15:84:b5:13:69:17:73:41:50:08:97:83:
                    c6:64:f8:4d:4e:db:76:1d:a1:1d:49:e1:3b:f6:58:
                    91:8c:c8:a6:1b:85:cb:b3:b0:67:d0:6c:ae:51:4d:
                    4b:5a:b8:cc:1c:11:dd:0a:08:ab:25:71:7b:36:44:
                    c1:ae:96:c5:5d:e3:fc:12:33:4f:eb:83:9e:c4:cd:
                    69:88:5f:1b:a4:6a:9d:6a:56:1c:f5:aa:53:70:77:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3B:DC:0F:C3:7A:C0:19:97:C7:D9:AC:8C:A2:ED:38:E6:A1:76:07
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:49:7e:c9:1c:a8:2d:41:cc:44:6d:76:ab:bb:aa:4c:37:
         c3:31:36:51:be:10:71:d8:e5:53:4c:9b:b4:90:6a:cd:6f:d9:
         81:0c:ab:53:f0:8a:7d:c8:bc:43:6b:99:26:48:e1:52:9e:60:
         25:fb:54:f5:5b:e0:d0:7a:dc:5f:04:6d:26:52:b6:93:ff:d6:
         48:47:8a:7e:6a:7c:d6:50:5a:05:1a:dc:8a:93:c8:7a:b3:85:
         8c:d5:b8:38:82:07:15:fd:02:28:8a:55:a3:c6:72:98:54:1c:
         92:82:22:28:c2:9c:62:f9:68:8c:3f:31:e5:d9:c9:8a:f6:cf:
         18:41:5a:2b:3f:03:92:02:9d:74:59:df:ff:10:94:61:30:27:
         55:9a:17:e0:49:5b:c6:06:c4:45:a5:c2:10:0a:57:97:ec:35:
         d1:69:1a:18:45:48:c5:ae:bd:cb:a2:d0:49:1b:b6:0a:43:28:
         f5:13:cc:5f:f9:12:b7:56:0b:4d:ee:46:03:e7:7d:b0:28:08:
         8d:ac:d3:09:f5:82:ad:3e:21:e9:ae:6a:7b:f7:3d:b6:4c:49:
         8b:ed:0c:3c:93:e0:7a:a8:ee:05:03:3b:63:63:82:8e:5b:90:
         a6:7f:13:d0:61:67:14:69:2d:a8:ce:37:f4:ed:e7:b1:9c:cc:
         2e:72:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:34:36 2026 by rpki-client