Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa
File:                     3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa (raw, json)
Hash identifier:          m+nssQYHrnXOq/hb0eyIYVP0zd1CutzVa1h16yS87XE=
Subject key identifier:   50:BD:C7:DD:F8:56:FC:D2:CD:59:BF:57:49:B5:B9:98:59:58:35:A5
Certificate issuer:       /CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
Certificate serial:       4703D0A17A6EF0FFA8628C64FC39BFAB06E03CF5
Authority key identifier: FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa
Signing time:             Wed 04 Feb 2026 20:00:14 +0000
ROA not before:           Wed 04 Feb 2026 19:55:14 +0000
ROA not after:            Wed 03 Feb 2027 20:00:14 +0000
asID:                     262891
IP address blocks:        177.20.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl
                          rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 00:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:03:d0:a1:7a:6e:f0:ff:a8:62:8c:64:fc:39:bf:ab:06:e0:3c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1585E42E738EE596DB2F2B970CC3CB743BD8FC
        Validity
            Not Before: Feb  4 19:55:14 2026 GMT
            Not After : Feb  3 20:00:14 2027 GMT
        Subject: CN=50BDC7DDF856FCD2CD59BF5749B5B998595835A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:70:79:7d:2e:6e:df:22:ee:bc:e2:3c:4f:
                    f3:cf:eb:c3:20:95:9f:c4:c1:5c:7a:5d:90:f4:ae:
                    d1:27:37:9e:d8:71:47:82:11:bc:44:6d:c5:c8:c7:
                    ce:ea:c9:93:a9:a1:42:f4:63:1c:e3:6d:98:49:34:
                    01:11:7f:1d:b9:cb:42:8a:2c:4e:6b:c2:6d:d3:28:
                    4f:56:7b:2a:0e:0e:ae:51:51:cc:bb:90:52:b5:cd:
                    b8:d5:ff:da:f7:db:e9:1e:0f:98:ce:19:3d:f8:fa:
                    48:03:17:02:15:e3:79:02:ba:8c:e3:98:c0:1b:fb:
                    5f:84:8a:95:56:56:d4:3d:96:85:4b:28:69:72:64:
                    6a:8f:69:34:67:7a:ac:12:ad:01:64:c6:d6:99:59:
                    36:b8:0b:43:c1:a2:28:6f:0a:4d:e2:51:b0:6a:7f:
                    c9:07:c6:84:0a:72:16:83:e0:7b:bf:d6:67:dd:f8:
                    8b:42:e7:26:bb:17:0c:ae:e4:0e:00:f1:02:26:18:
                    a6:67:50:47:3d:82:3d:91:98:8c:a2:42:7f:1a:db:
                    3c:36:94:ab:8f:52:fd:e0:2b:07:76:a1:1f:09:87:
                    08:f8:f4:13:15:fe:47:89:de:d0:22:5a:35:6f:49:
                    61:95:12:92:0c:08:06:a6:58:b0:bd:1c:b1:f1:67:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BD:C7:DD:F8:56:FC:D2:CD:59:BF:57:49:B5:B9:98:59:58:35:A5
            X509v3 Authority Key Identifier:
                keyid:FA:15:85:E4:2E:73:8E:E5:96:DB:2F:2B:97:0C:C3:CB:74:3B:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1585E42E738EE596DB2F2B970CC3CB743BD8FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fcVfwabTkgyohSNK6r5N9VXxvwMAKG6VXrCVRxkXPad/1/3137372e32302e3138342e302f32312d3231203d3e20323632383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:c1:8e:a7:2c:90:8c:94:02:65:f4:32:28:54:20:39:f0:de:
         9b:d7:6b:9e:42:9c:c3:26:1d:a9:10:2c:9d:94:85:59:02:e4:
         90:7c:b0:eb:8f:96:a1:a3:3a:5d:08:17:80:4c:4c:69:cd:30:
         4c:d6:fa:c8:9c:25:86:0e:e9:cc:d7:da:13:dc:75:c8:95:ea:
         23:40:f8:b3:65:d8:b5:75:a0:74:b0:29:e7:d9:dc:9b:52:4b:
         a9:52:64:f4:89:77:60:8a:de:0c:2b:8f:fe:c6:1c:b2:42:29:
         fa:34:e6:2e:06:ce:e4:bc:54:44:40:2e:32:68:cf:09:a2:f9:
         9c:b4:00:44:98:a0:6e:d1:03:1f:bc:88:85:d2:82:51:f0:9b:
         b7:9b:1f:3d:be:6a:e4:f5:8d:ad:45:c5:29:1c:b7:de:1b:3f:
         ad:e9:e9:ae:c2:f3:97:91:23:ea:c8:48:c6:d2:d7:e9:c4:c6:
         30:1d:40:50:e5:28:6a:10:67:d5:fe:54:22:5c:1d:07:36:55:
         42:20:43:00:bc:8a:2e:87:2d:30:94:ae:78:bb:01:e1:87:96:
         80:a1:81:85:02:47:4b:13:eb:7b:cc:76:79:ef:32:a9:5a:af:
         38:5f:64:95:e3:23:a7:ec:15:83:27:a2:a8:4f:6f:90:d1:8d:
         a8:56:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 10:18:07 2026 by rpki-client