Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
File:                     3137372e3133362e34372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          QQT8kkDVjffQzIBu+7BOL7LHKTINBltpk+ImcWWO/+M=
Subject key identifier:   DC:21:8A:CA:A0:23:80:C1:D6:FF:2A:7C:29:22:E7:DF:5D:21:CB:43
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       2F91D461226D4F87EA8584C32B62411AA9ACB582
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:20 +0000
ROA not before:           Thu 05 Feb 2026 00:29:20 +0000
ROA not after:            Thu 04 Feb 2027 00:34:20 +0000
asID:                     52871
IP address blocks:        177.136.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:91:d4:61:22:6d:4f:87:ea:85:84:c3:2b:62:41:1a:a9:ac:b5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:20 2026 GMT
            Not After : Feb  4 00:34:20 2027 GMT
        Subject: CN=DC218ACAA02380C1D6FF2A7C2922E7DF5D21CB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:04:91:9b:2a:8a:a4:7c:fc:53:f0:62:8f:
                    bd:f2:32:aa:a0:27:22:85:ce:8d:bc:88:97:c6:73:
                    b1:3e:8a:69:21:d4:52:59:ef:2d:b5:ec:a7:19:23:
                    92:88:35:86:4b:50:3d:df:3f:84:e6:74:a5:74:cb:
                    a7:10:96:4e:6e:e9:df:a5:ee:90:d5:2c:fe:d3:39:
                    d6:9a:c7:e6:dd:90:34:2b:6f:2a:53:75:6d:3b:7b:
                    ee:de:b3:be:e7:9e:20:d1:f9:b9:f0:9b:28:66:03:
                    e6:63:2b:be:da:bf:19:af:48:7e:35:30:56:d2:79:
                    2c:53:1c:bb:55:39:59:c6:99:d6:89:90:96:eb:ee:
                    b3:43:86:70:57:07:69:d4:0d:87:55:c8:fd:22:61:
                    ac:99:bc:03:30:2f:c0:8e:7e:d5:86:c1:fa:49:52:
                    e3:b7:81:f9:3b:a9:69:0a:c2:c9:f2:55:88:ae:c4:
                    48:0f:70:2b:a1:35:4f:f5:e7:98:84:47:0b:5a:ee:
                    66:67:4e:ce:fd:48:30:79:c4:06:eb:fd:99:f3:6e:
                    d5:cc:bc:e5:8f:de:ac:8f:0a:0e:02:6f:4f:18:01:
                    37:de:47:fd:a1:65:ce:9b:6e:88:2c:a2:ad:ba:7c:
                    49:b5:1e:46:33:0f:e2:1d:09:3a:7f:6a:72:92:5d:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:8A:CA:A0:23:80:C1:D6:FF:2A:7C:29:22:E7:DF:5D:21:CB:43
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:e1:34:d2:20:0e:ec:46:6f:d2:3e:5d:67:36:22:a1:e0:
         10:b9:dc:86:ea:8e:d1:94:9b:0b:90:69:81:9b:10:f8:5b:8f:
         76:dc:0c:e4:c1:45:c8:e3:6d:66:2a:95:c2:43:12:12:f6:7a:
         a0:9c:79:f1:a2:35:7c:19:24:76:e3:b4:c3:62:d5:51:40:2e:
         16:5d:85:3b:e2:f7:13:31:37:de:83:58:1a:d7:23:93:6b:8a:
         37:fa:95:e0:3c:38:22:50:bc:ef:8b:ac:f5:5d:cc:ec:22:1d:
         b1:47:0a:d9:34:b8:43:05:1c:e5:fa:ee:35:b7:a6:22:3e:c1:
         5a:39:77:c9:fd:9c:67:9c:74:1a:86:ff:f0:93:49:3b:97:b5:
         32:f0:c5:5b:2a:43:7d:b0:71:0d:e0:fa:38:46:47:05:ca:ba:
         27:58:3d:bd:7d:10:82:5e:16:50:b5:fe:b5:8d:0a:6e:1e:81:
         77:ae:e7:21:7d:95:ac:9a:b8:ed:b3:8e:62:35:6d:3f:2f:81:
         90:57:22:5f:c7:82:5b:b2:83:b3:a6:a0:f9:17:a1:fa:e1:a9:
         00:4c:e6:55:ef:40:2f:76:0b:07:b0:00:eb:0a:64:22:8c:01:
         d8:90:33:8c:f2:65:63:3f:05:af:e8:bf:8f:5d:3b:8f:ac:61:
         f4:0c:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 05:55:37 2026 by rpki-client