Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e382e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e382e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          Ytv9IWn/IhmOFaVv7W6LB9njaEs3TezGfHgaI/y1e0o=
Subject key identifier:   30:71:17:B0:67:25:89:82:83:11:5F:72:25:D2:BD:DB:67:35:A5:18
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       1B6D186B501EE37C211C530F65F6FB7245F03215
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e382e302f32332d3234203d3e203532383731.roa
Signing time:             Thu 05 Feb 2026 00:34:20 +0000
ROA not before:           Thu 05 Feb 2026 00:29:20 +0000
ROA not after:            Thu 04 Feb 2027 00:34:20 +0000
asID:                     52871
IP address blocks:        177.136.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Feb 2026 21:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6d:18:6b:50:1e:e3:7c:21:1c:53:0f:65:f6:fb:72:45:f0:32:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Feb  5 00:29:20 2026 GMT
            Not After : Feb  4 00:34:20 2027 GMT
        Subject: CN=307117B06725898283115F7225D2BDDB6735A518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:15:94:c3:a2:70:ed:c1:67:1d:e7:61:36:
                    23:74:34:94:4f:08:37:83:a4:97:f4:13:d1:f4:79:
                    46:f8:a7:b6:24:c3:f1:61:d6:54:d3:5f:be:7f:12:
                    b1:1c:35:0a:4b:b5:e1:88:87:f9:e0:73:e7:48:af:
                    5f:24:c2:6b:af:41:a8:4c:85:a5:9b:99:bd:ed:67:
                    57:9a:cb:b8:79:fa:67:fa:d6:04:3d:23:1a:72:c4:
                    07:2f:3f:21:17:1a:b6:26:ea:1a:53:f9:49:c9:5c:
                    89:5b:5a:69:32:7b:3d:4a:d4:67:6b:be:15:ff:4a:
                    e1:45:c5:e2:96:19:a6:a2:24:d5:ce:46:01:52:a3:
                    87:62:93:9a:7f:76:73:d4:f5:71:70:a6:f9:72:90:
                    9d:83:23:40:6f:7e:b4:4b:ae:92:84:72:cb:55:9d:
                    6b:17:59:93:42:c8:1f:a8:3a:ba:0d:11:e3:67:31:
                    2e:87:94:6f:23:9d:9d:b1:73:b2:69:95:fa:bb:7c:
                    5d:30:16:80:5c:3a:e3:3b:66:a7:5f:3a:a0:cd:bf:
                    1f:6f:85:30:6d:4c:e5:a9:2a:97:eb:84:04:a0:4a:
                    58:ad:b4:aa:19:5d:fe:d5:22:1d:81:0b:dd:7e:38:
                    73:7f:1a:0d:65:c8:df:df:c2:b6:eb:ec:af:b1:dd:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:71:17:B0:67:25:89:82:83:11:5F:72:25:D2:BD:DB:67:35:A5:18
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e382e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:70:e6:00:27:73:9f:79:17:36:4e:15:1c:b3:0e:49:c7:8f:
         ee:4f:6e:71:c4:90:8c:68:71:06:44:a2:c6:3f:fe:6b:1f:8b:
         39:12:a7:2a:ba:6d:56:2e:ed:10:79:4a:71:59:01:ed:e6:52:
         bf:c3:1f:21:82:10:e1:1d:ed:11:2e:54:50:42:c4:df:d8:6c:
         7d:71:72:29:9e:1a:f1:a3:2c:bf:22:55:02:b8:83:29:d2:29:
         e3:fb:fc:65:a0:d4:64:b2:53:15:5a:c1:40:d2:5e:47:b4:b1:
         e5:cd:f4:41:12:d9:21:d0:1f:4c:da:b7:d1:95:60:dc:9c:2a:
         a0:1e:6a:9a:8d:89:60:ed:29:6f:96:b5:d6:50:70:bd:e6:26:
         03:92:3c:9a:38:c3:7c:a5:8e:93:69:b3:b8:7c:74:3a:1c:14:
         a1:9d:3a:59:bd:7b:de:e1:8d:cd:6c:95:0f:76:6c:21:14:a8:
         c7:d9:06:3c:9a:51:29:bf:60:67:4b:09:e1:6a:87:af:98:e9:
         e0:13:2f:4b:c4:15:d1:5b:36:08:7c:49:3b:83:4f:1f:c2:2b:
         46:3b:ff:cf:26:43:97:9f:a8:5e:10:be:74:82:65:a4:82:31:
         b1:7e:6b:3f:7b:20:2e:1f:96:18:24:16:95:d4:f8:dc:5b:c6:
         9f:aa:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 03:13:36 2026 by rpki-client